Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
File: oiK21tBSghQiHUrOpH4axhHvQno.cer (raw, json)
Hash identifier: H657Trqp40w/gH7VUdC9S2qowYsajjyednBos9Q4HZo=
Subject key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DD6A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Feb 2024 12:48:49 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 133762
IP: 103.108.180.0/22
IP: 2402:6e40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122218 (0x1dd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 5 12:48:49 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A911F177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7f:a7:da:22:14:50:cc:d6:7b:b4:a9:97:99:
c3:f4:0f:2b:8a:81:61:bb:5c:54:2d:49:d8:87:16:
d6:88:84:98:df:a4:ad:ef:ee:a7:af:40:3c:94:ea:
c7:cc:9c:28:32:a7:4a:d8:55:36:13:d3:5f:3f:3b:
6a:f7:d1:90:3f:fc:14:e7:45:30:13:61:8b:e7:e1:
26:40:bf:c4:58:58:63:4b:3c:37:a7:58:02:1c:e4:
9c:da:72:4c:41:87:84:13:f9:23:26:93:ca:c6:6a:
55:9e:e7:d5:60:a6:23:e8:16:a7:53:e2:cc:3d:c4:
0e:25:a5:ac:ad:d7:31:e6:55:e8:b4:29:34:76:69:
a3:f8:22:ed:d5:92:3d:73:02:4b:d5:e7:09:e1:1d:
59:94:c3:a4:ad:f4:b3:e1:fe:80:83:f7:6b:d1:a2:
4e:00:12:5d:4f:1f:f2:16:1a:70:f3:96:c3:8e:c9:
64:b0:f1:1f:0a:73:5d:1a:71:fd:50:b8:e0:4e:5a:
cf:dd:5c:e7:f5:d2:21:74:0c:34:46:24:23:4a:b5:
08:e2:8e:38:f2:cb:ab:0c:9c:8d:09:37:ad:20:78:
f6:06:f5:5e:b9:45:b2:21:7f:a2:ba:1d:d3:c4:4c:
75:78:b6:0c:cd:a9:59:a2:1a:ad:71:18:56:5d:df:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133762
sbgp-ipAddrBlock: critical
IPv4:
103.108.180.0/22
IPv6:
2402:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
3e:d1:01:55:db:8b:ef:d6:46:92:5f:bf:67:89:3e:49:b4:9c:
cf:52:84:6c:0b:fe:05:0d:f3:57:67:87:56:20:b3:53:49:ae:
c1:64:ad:45:fd:94:b6:9d:34:93:7e:18:e4:18:4d:63:78:5a:
8b:f8:e1:a4:64:91:c5:c8:23:c4:26:4f:bc:28:ba:65:c2:03:
75:46:bf:36:54:d1:38:ed:ec:b1:e5:af:9f:e9:84:2a:e9:d1:
09:e6:0d:a2:a2:fe:e6:69:cc:36:80:28:4b:c8:97:a1:b2:c3:
c8:17:36:73:7c:fe:b3:dd:1d:5f:2d:74:fe:ba:4a:36:fd:41:
fc:24:3c:1e:61:1e:7d:be:40:aa:a1:28:66:60:5f:e7:d8:34:
8d:86:61:90:59:c8:99:3e:2f:f0:1c:45:9d:24:e6:ed:3b:21:
c1:f3:ba:b8:0c:62:d5:99:6d:8d:87:57:b8:9c:16:ea:57:6e:
5f:4d:0d:c4:77:31:f3:b6:09:c0:35:b8:f8:c6:e9:7a:f6:e0:
f8:17:0d:e6:ec:8a:5a:73:7c:ac:1f:78:70:7a:74:8e:36:82:
b9:e3:1c:c6:70:58:1e:07:be:73:a1:ac:f5:69:3a:a3:1e:66:
66:69:df:d6:14:a3:b8:91:8b:c3:0d:58:83:18:5c:e2:cd:40:
b9:f0:81:3b
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAd1qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIwNTEyNDg0OVoXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUYxNzcxMTAvBgNVBAUTKEEyMjJCNkQ2RDA1MjgyMTQyMjFENEFD
RUE0N0UxQUM2MTFFRjQyN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD5f6faIhRQzNZ7tKmXmcP0DyuKgWG7XFQtSdiHFtaIhJjfpK3v7qevQDyU6sfM
nCgyp0rYVTYT018/O2r30ZA//BTnRTATYYvn4SZAv8RYWGNLPDenWAIc5JzackxB
h4QT+SMmk8rGalWe59VgpiPoFqdT4sw9xA4lpayt1zHmVei0KTR2aaP4Iu3Vkj1z
AkvV5wnhHVmUw6St9LPh/oCD92vRok4AEl1PH/IWGnDzlsOOyWSw8R8Kc10acf1Q
uOBOWs/dXOf10iF0DDRGJCNKtQjijjjyy6sMnI0JN60gePYG9V65RbIhf6K6HdPE
THV4tgzNqVmiGq1xGFZd333vAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUoiK21tBS
ghQiHUrOpH4axhHvQnowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFGMTc3LzgyRUU1ODI2MEUwNjExRUI4Njg3NkU1M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExRjE3Ny84MkVFNTgyNjBFMDYxMUVCODY4NzZFNTNDNEY5QUUwMi9vaUsyMXRC
U2doUWlIVXJPcEg0YXhoSHZRbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgqCMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2y0MA0EAgAC
MAcDBQAkAm5AMA0GCSqGSIb3DQEBCwUAA4IBAQA+0QFV24vv1kaSX79niT5JtJzP
UoRsC/4FDfNXZ4dWILNTSa7BZK1F/ZS2nTSTfhjkGE1jeFqL+OGkZJHFyCPEJk+8
KLplwgN1Rr82VNE47eyx5a+f6YQq6dEJ5g2iov7macw2gChLyJehssPIFzZzfP6z
3R1fLXT+uko2/UH8JDweYR59vkCqoShmYF/n2DSNhmGQWciZPi/wHEWdJObtOyHB
87q4DGLVmW2Nh1e4nBbqV25fTQ3EdzHztgnANbj4xul69uD4Fw3m7Ipac3ysH3hw
enSONoK54xzGcFgeB75zoaz1aTqjHmZmad/WFKO4kYvDDViDGFzizUC58IE7
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:39 2025 by rpki-client