Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer
File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer (raw, json)
Hash identifier: HxFWax+hSFdNJJ+/oLFhtslYBiji3q+nIX7dg1RTceg=
Subject key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E40
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 28 Nov 2024 14:36:24 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 18119
IP: 43.255.24.0/22
IP: 103.29.246.0/23
IP: 103.239.8.0/22
IP: 114.110.32.0/21
IP: 202.21.136.0/23
IP: 202.49.249.0/24
IP: 202.61.2.0/23
IP: 2001:4428::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138816 (0x21e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 28 14:36:24 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A917D7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:f5:32:16:12:41:8d:40:6e:a2:e2:62:15:
f8:1c:c6:14:24:05:75:24:5d:14:7a:4a:a2:cf:fc:
95:4b:d0:c5:af:8b:b6:8d:ce:e2:f0:b3:9f:c3:89:
fa:d8:3e:24:87:27:d3:40:63:58:22:a3:d5:1a:73:
8c:ef:ec:e6:39:29:9b:ff:f1:25:63:59:53:77:02:
3b:43:81:82:08:a0:4e:e9:37:cf:32:b6:33:dd:45:
9c:2c:64:66:99:4b:5f:81:40:12:5c:df:4c:ce:1c:
d7:6a:24:e9:f3:13:f1:04:07:a8:61:4b:84:35:e3:
6d:4a:14:2f:d4:92:07:32:87:c5:81:be:0d:7b:58:
8a:7f:ea:fc:df:5c:92:31:96:e8:b5:15:e8:e1:e3:
c8:c9:3b:b2:95:14:37:ee:f1:f5:27:53:99:4b:ca:
15:1f:77:f7:a9:eb:2a:af:8d:c3:1b:1e:7e:b7:f9:
fe:33:50:83:83:b2:57:0f:a1:e8:b9:5e:cb:30:19:
00:f1:74:4c:38:ff:ad:10:ed:d8:62:25:d5:f8:3e:
2f:37:ba:0b:43:bc:d0:b0:9c:a3:56:3c:3d:2e:69:
77:c3:1e:38:52:8b:da:8c:bc:92:e0:eb:c3:bf:53:
2f:09:21:06:9f:86:b3:c7:39:da:fe:ab:6b:48:8c:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18119
sbgp-ipAddrBlock: critical
IPv4:
43.255.24.0/22
103.29.246.0/23
103.239.8.0/22
114.110.32.0/21
202.21.136.0/23
202.49.249.0/24
202.61.2.0/23
IPv6:
2001:4428::/32
Signature Algorithm: sha256WithRSAEncryption
16:00:6c:63:02:b6:49:1c:22:7f:3e:4a:06:19:8f:26:d7:8d:
89:39:10:16:e6:ba:41:83:91:bf:b2:6c:d6:9f:8a:0b:f5:02:
08:a6:f4:2b:9e:5b:22:ed:e8:9b:d7:a1:95:5f:33:f4:52:44:
c8:33:5e:aa:5a:71:7e:8e:ec:49:17:12:fb:ba:c9:35:79:09:
7b:b6:93:ad:8e:a9:c0:e7:32:88:bd:c9:66:8f:1d:66:7e:bd:
d8:c8:6f:41:74:d9:d8:28:a7:e8:fd:58:8a:d3:9a:3b:8a:7a:
fe:17:fc:45:27:bf:e9:ac:12:57:e4:69:8d:e6:87:18:3b:32:
fd:70:57:0f:d8:68:03:8f:ba:17:fc:f5:6b:d9:6b:b2:f5:4a:
9a:51:41:6f:fb:45:2f:d1:df:b7:21:5b:19:84:18:19:62:25:
ce:83:a6:19:c8:58:df:af:03:fb:cc:2b:d4:6e:47:8b:38:1d:
57:aa:34:9c:a8:29:f4:f3:35:28:ad:31:a2:0c:94:71:2a:d5:
65:b4:52:9e:c9:9a:3f:45:b4:34:f3:56:24:31:4d:a3:ef:68:
bf:d1:85:49:65:b4:5e:f7:07:59:61:2b:ac:f4:55:8a:47:08:
f1:f6:c6:0b:c8:39:12:a0:4d:82:a5:2f:75:00:3e:ef:fe:51:
a2:ba:e5:35
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIDAh5AMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyODE0MzYyNFoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJD
Qzk3NkRDMENCODQxNEU4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzn/UyFhJBjUBuouJiFfgcxhQkBXUkXRR6SqLP/JVL0MWvi7aNzuLws5/DifrY
PiSHJ9NAY1gio9Uac4zv7OY5KZv/8SVjWVN3AjtDgYIIoE7pN88ytjPdRZwsZGaZ
S1+BQBJc30zOHNdqJOnzE/EEB6hhS4Q1421KFC/Ukgcyh8WBvg17WIp/6vzfXJIx
lui1Fejh48jJO7KVFDfu8fUnU5lLyhUfd/ep6yqvjcMbHn63+f4zUIODslcPoei5
XsswGQDxdEw4/60Q7dhiJdX4Pi83ugtDvNCwnKNWPD0uaXfDHjhSi9qMvJLg68O/
Uy8JIQafhrPHOdr+q2tIjDY9AgMBAAGjggNBMIIDPTAdBgNVHQ4EFgQUlC1UHf55
gvbgHmvMl23Ay4QU6DgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdEN0YyL0YwMjg5MDNDMUQ4QzExRTJCMTlENUZFQTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1
NWd2YmdIbXZNbDIzQXk0UVU2RGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICRscwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAIr/xgDBAFnHfYD
BAJn7wgDBANybiADBAHKFYgDBADKMfkDBAHKPQIwDQQCAAIwBwMFACABRCgwDQYJ
KoZIhvcNAQELBQADggEBABYAbGMCtkkcIn8+SgYZjybXjYk5EBbmukGDkb+ybNaf
igv1Agim9CueWyLt6JvXoZVfM/RSRMgzXqpacX6O7EkXEvu6yTV5CXu2k62OqcDn
Moi9yWaPHWZ+vdjIb0F02dgop+j9WIrTmjuKev4X/EUnv+msElfkaY3mhxg7Mv1w
Vw/YaAOPuhf89WvZa7L1SppRQW/7RS/R37chWxmEGBliJc6DphnIWN+vA/vMK9Ru
R4s4HVeqNJyoKfTzNSitMaIMlHEq1WW0Up7Jmj9FtDTzViQxTaPvaL/RhUlltF73
B1lhK6z0VYpHCPH2xgvIORKgTYKlL3UAPu/+UaK65TU=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:49 2025 by rpki-client