Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
File: ogavyWamnnC0ibOPEEg9wfpdPiI.cer (raw, json)
Hash identifier: uTUpLop32BOR7y2099QyOopWco1TF3f6QXhGWFtVCA0=
Subject key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E378
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Mar 2024 22:07:06 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 149489
IP: 103.181.28.0/23
IP: 2400:5820::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 15:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123768 (0x1e378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 7 22:07:06 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:8e:0c:5e:a9:99:14:40:16:57:ab:cb:18:
10:4e:99:75:30:2e:55:89:dd:2c:41:47:9d:70:d8:
1e:29:66:e6:6d:b4:00:17:69:c8:ce:3f:cd:67:71:
3d:5a:3f:21:b6:7e:5e:5b:af:c9:be:2b:79:cd:1c:
2a:7d:19:88:63:00:aa:73:16:14:b4:a6:4e:95:c8:
2b:b0:4c:6e:62:e6:65:65:e7:20:62:2d:a2:94:a5:
fc:4c:e9:fc:de:a8:16:04:44:06:7b:e2:26:33:44:
07:36:44:41:16:4e:e7:5a:84:dc:32:18:95:15:59:
59:a7:c4:49:46:02:01:86:45:23:21:5e:84:4b:de:
83:d9:65:bc:f8:c1:29:fe:ae:82:f9:4a:ff:15:60:
72:45:47:37:11:2c:84:ce:ea:f4:c6:5a:fe:08:b0:
c2:7a:c3:e3:bf:2e:73:08:05:f1:34:0f:66:24:c4:
0e:8f:8d:5d:ff:14:55:58:20:0f:a4:13:17:e4:c9:
e3:83:6c:6f:8b:48:d2:d5:e4:be:60:39:f7:64:e0:
cd:84:b4:b3:63:df:4d:cb:dc:d0:fc:17:e1:22:ab:
71:8b:87:2c:21:fb:98:c8:93:29:f5:c0:96:89:e3:
04:86:85:28:03:e4:19:e6:76:0c:24:83:dc:f1:d1:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149489
sbgp-ipAddrBlock: critical
IPv4:
103.181.28.0/23
IPv6:
2400:5820::/32
Signature Algorithm: sha256WithRSAEncryption
a6:db:09:ae:64:fe:82:fa:7a:c6:73:40:ac:c9:46:e0:21:21:
8c:61:df:7d:dc:f1:85:46:f4:d8:ba:26:4b:dd:a6:de:84:64:
ae:e5:6c:38:00:23:0d:a2:00:1f:6e:2f:22:ec:4f:ef:75:2b:
0a:6e:be:95:e1:e5:7a:2c:ec:aa:bf:af:ab:a6:0e:5d:56:2c:
82:db:f0:85:43:96:b0:d3:4e:0a:0a:d4:be:a4:00:eb:7d:90:
8e:2f:6b:99:b2:21:01:30:24:da:b7:dc:ec:33:14:3f:80:79:
e4:aa:f6:07:7e:56:a5:d9:b9:f7:ee:9f:02:80:42:69:ed:e8:
df:0a:e5:d7:95:75:5f:71:53:47:7f:24:bb:c6:84:6d:b0:7d:
2f:a8:fe:3e:e8:37:fe:5c:4b:6a:c0:6d:52:80:f3:15:25:b9:
f5:f4:1c:cd:72:49:f4:30:ca:13:13:95:f7:d1:b2:52:c0:19:
8d:ee:38:5e:23:92:88:93:24:da:a2:d0:ff:43:40:1c:9a:cd:
d7:51:9c:88:98:04:f1:94:c3:f1:a3:ce:26:32:66:bd:d2:64:
1c:d5:1b:dc:a5:48:2d:f8:2c:cf:02:df:51:36:42:4e:8d:36:
65:86:41:d5:85:61:3e:78:d4:8f:c7:c8:c8:c8:2f:33:1b:5f:
41:5a:d1:63
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAeN4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMwNzIyMDcwNloXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTRCNkExMTAvBgNVBAUTKEEyMDZBRkM5NjZBNjlFNzBCNDg5QjM4
RjEwNDgzREMxRkE1RDNFMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQColY4MXqmZFEAWV6vLGBBOmXUwLlWJ3SxBR51w2B4pZuZttAAXacjOP81ncT1a
PyG2fl5br8m+K3nNHCp9GYhjAKpzFhS0pk6VyCuwTG5i5mVl5yBiLaKUpfxM6fze
qBYERAZ74iYzRAc2REEWTudahNwyGJUVWVmnxElGAgGGRSMhXoRL3oPZZbz4wSn+
roL5Sv8VYHJFRzcRLITO6vTGWv4IsMJ6w+O/LnMIBfE0D2YkxA6PjV3/FFVYIA+k
ExfkyeODbG+LSNLV5L5gOfdk4M2EtLNj303L3ND8F+Eiq3GLhywh+5jIkyn1wJaJ
4wSGhSgD5Bnmdgwkg9zx0bWvAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUogavyWam
nnC0ibOPEEg9wfpdPiIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU0QjZBL0I0ODEzMzQyODRENzExRUM4RTA3NDE2REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFNEI2QS9CNDgxMzM0Mjg0RDcxMUVDOEUwNzQxNkRDNEY5QUUwMi9vZ2F2eVdh
bW5uQzBpYk9QRUVnOXdmcGRQaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkfxMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7UcMA0EAgAC
MAcDBQAkAFggMA0GCSqGSIb3DQEBCwUAA4IBAQCm2wmuZP6C+nrGc0CsyUbgISGM
Yd993PGFRvTYuiZL3abehGSu5Ww4ACMNogAfbi8i7E/vdSsKbr6V4eV6LOyqv6+r
pg5dViyC2/CFQ5aw004KCtS+pADrfZCOL2uZsiEBMCTat9zsMxQ/gHnkqvYHflal
2bn37p8CgEJp7ejfCuXXlXVfcVNHfyS7xoRtsH0vqP4+6Df+XEtqwG1SgPMVJbn1
9BzNckn0MMoTE5X30bJSwBmN7jheI5KIkyTaotD/Q0Acms3XUZyImATxlMPxo84m
Mma90mQc1RvcpUgt+CzPAt9RNkJOjTZlhkHVhWE+eNSPx8jIyC8zG19BWtFj
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:18:41 2024 by rpki-client on console-fra.rpki-client.org