Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
File: mOHsvUXXh5-byUOfTGwvJxStNvU.cer (raw, json)
Hash identifier: 2CL41OmkuuBQ8l7MBgmJxWsXXxa5E4PngaGQ2K8YNmg=
Subject key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CBC6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Nov 2023 15:20:32 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 147291
IP: 103.174.96.0/23
IP: 2001:df7:c380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 19:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117702 (0x1cbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 20 15:20:32 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:db:7c:85:60:c4:6c:ff:d7:86:73:86:9e:
9b:31:dd:ac:5a:5e:08:54:d4:b4:28:86:5e:23:bf:
ad:01:37:8b:39:25:91:66:15:98:fa:fd:e8:87:b0:
5b:4d:05:82:8d:c1:2d:d4:c1:c1:c5:06:63:bb:c2:
ef:bd:a6:5b:ab:b6:8f:b1:84:e2:bd:e7:ea:64:1c:
99:1a:c6:82:63:c5:91:fd:c2:c0:de:a5:4e:87:07:
59:b1:59:4f:09:3d:45:cf:3d:1f:a8:ff:a2:8e:94:
f7:fa:58:7a:87:55:af:dc:e2:9e:d4:26:4c:43:06:
fe:df:ef:ac:d3:99:17:c8:b5:e2:7f:ae:06:ce:f6:
1d:38:c2:4b:e5:d6:d6:c9:9b:7b:3e:d7:3d:50:8b:
ae:f8:58:72:3e:ca:34:af:8d:a7:07:00:5c:8d:fc:
f3:33:79:58:04:67:e3:d1:b6:54:4a:c6:4e:f2:48:
01:6a:84:b9:5f:96:b5:56:f6:6b:23:1b:3b:2b:a9:
7b:83:98:7d:6d:86:c9:ac:3b:43:05:70:18:ff:ce:
86:d5:a6:0a:b0:76:cb:57:62:b5:ed:3b:59:f0:af:
ec:64:f6:03:27:9e:6e:4d:c6:e3:b7:66:03:eb:6e:
71:01:67:28:6e:16:cb:a7:b8:51:dc:86:db:5e:ad:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147291
sbgp-ipAddrBlock: critical
IPv4:
103.174.96.0/23
IPv6:
2001:df7:c380::/48
Signature Algorithm: sha256WithRSAEncryption
2f:fb:ea:26:da:41:21:f9:9e:69:68:ba:a0:bc:e3:74:75:88:
49:0e:c5:8b:7f:c5:2f:8f:85:b9:58:7b:ff:c0:b7:d8:58:7e:
e0:d8:59:bb:fe:fc:fe:bb:fa:a1:95:df:da:84:d3:5e:41:da:
c4:a6:23:67:1a:ec:ec:72:0d:f2:fc:37:ba:e2:ec:cd:da:83:
d7:ab:78:20:32:20:8c:06:fd:cb:49:93:cc:43:d8:4f:5a:07:
31:63:3e:9f:5d:ee:eb:c1:1d:18:33:74:52:4d:f3:07:35:6f:
17:41:54:01:98:31:31:a5:d8:49:36:11:51:a4:39:40:c7:f3:
2b:e5:b1:14:ad:40:e3:b6:0b:1c:de:ce:31:c6:97:d6:e0:f5:
8d:c4:4b:22:ec:db:79:f1:76:18:2e:ff:55:5e:15:89:06:89:
74:43:41:1a:3a:a6:07:50:2d:ce:5a:96:89:9c:b2:6a:ea:25:
f7:54:81:0e:6e:d7:3f:b3:8d:af:c8:6d:b7:aa:1c:69:ef:92:
2c:0a:80:ce:18:5b:89:99:6d:88:be:80:b2:de:0e:f1:9f:c0:
fe:a4:56:27:21:c0:f2:12:6c:cc:fa:bf:ae:09:af:89:f7:8b:
9f:21:ff:a0:fd:04:26:18:4f:10:84:c0:46:08:90:cc:bb:28:
15:a5:79:b6
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAcvGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyMDE1MjAzMloXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5
RjRDNkMyRjI3MTRBRDM2RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIfdt8hWDEbP/XhnOGnpsx3axaXghU1LQohl4jv60BN4s5JZFmFZj6/eiHsFtN
BYKNwS3UwcHFBmO7wu+9plurto+xhOK95+pkHJkaxoJjxZH9wsDepU6HB1mxWU8J
PUXPPR+o/6KOlPf6WHqHVa/c4p7UJkxDBv7f76zTmRfIteJ/rgbO9h04wkvl1tbJ
m3s+1z1Qi674WHI+yjSvjacHAFyN/PMzeVgEZ+PRtlRKxk7ySAFqhLlflrVW9msj
GzsrqXuDmH1thsmsO0MFcBj/zobVpgqwdstXYrXtO1nwr+xk9gMnnm5NxuO3ZgPr
bnEBZyhuFsunuFHchtterV7xAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUmOHsvUXX
h5+byUOfTGwvJxStNvUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYyM0I5Lzc4Q0VBQ0JDMkIzNjExRUNBRDU5NUI3Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVY
WGg1LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj9bMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ65gMA8EAgAC
MAkDBwAgAQ33w4AwDQYJKoZIhvcNAQELBQADggEBAC/76ibaQSH5nmlouqC843R1
iEkOxYt/xS+PhblYe//At9hYfuDYWbv+/P67+qGV39qE015B2sSmI2ca7OxyDfL8
N7ri7M3ag9ereCAyIIwG/ctJk8xD2E9aBzFjPp9d7uvBHRgzdFJN8wc1bxdBVAGY
MTGl2Ek2EVGkOUDH8yvlsRStQOO2CxzezjHGl9bg9Y3ESyLs23nxdhgu/1VeFYkG
iXRDQRo6pgdQLc5alomcsmrqJfdUgQ5u1z+zja/IbbeqHGnvkiwKgM4YW4mZbYi+
gLLeDvGfwP6kVichwPISbMz6v64Jr4n3i58h/6D9BCYYTxCEwEYIkMy7KBWlebY=
-----END CERTIFICATE-----
Generated at Tue Apr 16 20:24:13 2024 by rpki-client on console-fra.rpki-client.org