Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer (raw, json)
Hash identifier: hp6U7L7kaREHv2bbTbIam6sc02vjBm8n99u1/eKlhjk=
Subject key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CED5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 18:41:39 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 9258
AS: 9650
AS: 45837
IP: 45.64.68.0/22
IP: 103.233.236.0/22
IP: 203.5.10.0/24
IP: 203.9.184.0/22
IP: 203.15.124.0/22
IP: 203.18.108.0/23
IP: 203.21.12.0/24
IP: 203.62.216.0/22
IP: 2406:3c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 15:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118485 (0x1ced5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 18:41:39 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:d8:68:68:c8:41:4f:60:d0:d1:91:fa:52:
d1:e0:79:ac:88:07:d5:a7:d8:b7:bd:08:eb:3b:51:
a0:ca:51:c7:45:13:5d:bd:12:7c:07:ba:96:0d:c1:
1e:a4:88:fc:7f:0c:ab:89:4e:cd:0c:0e:49:de:5d:
c5:6d:2a:8f:c3:fc:29:1f:1a:8a:37:69:fd:f7:0d:
20:0e:71:e9:ab:fd:44:6d:64:3b:fc:93:64:f7:9f:
38:02:31:37:31:55:c0:0f:2a:d5:fa:71:4e:72:dd:
a8:90:79:51:cc:b3:ee:48:36:6a:91:da:f0:5d:ce:
d7:0f:b6:2a:9f:a8:dd:c6:fd:e6:96:bb:5a:7e:5c:
5a:ff:51:ae:57:00:e6:40:6f:30:96:e8:1d:ff:84:
75:0d:20:7c:d2:1b:d1:54:75:32:46:87:cf:a4:28:
cd:e8:69:76:da:08:f7:60:d9:b9:54:21:af:92:6c:
ac:b4:00:87:61:2e:da:51:4c:72:e8:84:70:e6:3c:
11:ed:3d:a6:ae:25:0e:f9:3b:39:e9:32:1d:9a:8e:
e3:f1:44:ac:55:1f:c9:ee:d6:73:ae:00:b9:a2:ab:
6e:a3:f5:a4:41:c6:c4:8e:ba:81:ae:ca:60:f1:bb:
37:4f:6e:d7:68:57:4b:42:e4:c6:d4:7b:e6:53:cc:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9258
9650
45837
sbgp-ipAddrBlock: critical
IPv4:
45.64.68.0/22
103.233.236.0/22
203.5.10.0/24
203.9.184.0/22
203.15.124.0/22
203.18.108.0/23
203.21.12.0/24
203.62.216.0/22
IPv6:
2406:3c00::/32
Signature Algorithm: sha256WithRSAEncryption
cb:ed:02:32:9d:da:fc:89:de:2f:f4:01:95:20:dd:93:c3:70:
82:b8:a1:ac:e6:30:d9:da:7a:15:5e:98:11:31:0d:b3:9f:db:
65:d9:9a:41:15:ef:29:9f:57:dc:bd:5e:1f:03:bc:e0:c6:cc:
1a:a1:f1:eb:fa:ca:57:e6:b1:91:89:4d:a2:d1:d5:59:f2:b4:
08:ae:5d:6b:62:96:5d:8c:0d:9b:1c:90:84:9b:c0:36:41:0a:
13:84:e8:4d:aa:c0:71:ea:8f:f1:75:af:e6:5a:72:17:cb:0e:
21:5d:dd:8e:16:42:2f:00:b1:58:6e:f9:51:e2:05:2b:71:79:
48:c9:70:39:8e:99:d8:02:41:7e:10:39:8e:c2:91:22:2e:c8:
ad:49:cc:e4:bb:ca:48:42:4c:d4:4d:21:3e:2a:2f:08:01:5d:
b3:cb:80:3c:2f:15:66:e0:0b:13:ba:74:f8:33:37:bf:7f:36:
1a:59:0a:e3:e2:19:46:ce:a3:87:01:3a:c5:4f:a1:f4:6e:2f:
8a:ae:e5:bb:23:1e:61:19:20:77:e8:33:c8:67:68:ea:ff:73:
51:cf:69:e2:ea:66:61:89:3a:6d:61:fd:51:56:64:a5:d1:b5:
b5:0c:a9:e6:90:e9:0d:d8:31:92:41:31:2b:c4:07:66:3d:91:
70:b2:d5:d7
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIDAc7VMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIwMTE4NDEzOVoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2
MTU0NkZBM0ZEQ0E5ODQwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDetdhoaMhBT2DQ0ZH6UtHgeayIB9Wn2Le9COs7UaDKUcdFE129EnwHupYNwR6k
iPx/DKuJTs0MDkneXcVtKo/D/CkfGoo3af33DSAOcemr/URtZDv8k2T3nzgCMTcx
VcAPKtX6cU5y3aiQeVHMs+5INmqR2vBdztcPtiqfqN3G/eaWu1p+XFr/Ua5XAOZA
bzCW6B3/hHUNIHzSG9FUdTJGh8+kKM3oaXbaCPdg2blUIa+SbKy0AIdhLtpRTHLo
hHDmPBHtPaauJQ75OznpMh2ajuPxRKxVH8nu1nOuALmiq26j9aRBxsSOuoGuymDx
uzdPbtdoV0tC5MbUe+ZTzIc1AgMBAAGjggNQMIIDTDAdBgNVHQ4EFgQUqkNqr8aI
BFv1FIhhVG+j/cqYQI4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdFNEJBL0QwNkJGMzI4NTJEQzExRUE4MjYwMUIwRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhh
SUJGdjFGSWhoVkctal9jcVlRSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQgBAf8EEzAR
oA8wDQICJCoCAiWyAgMAsw0wWAYIKwYBBQUHAQcBAf8ESTBHMDYEAgABMDADBAIt
QEQDBAJn6ewDBADLBQoDBALLCbgDBALLD3wDBAHLEmwDBADLFQwDBALLPtgwDQQC
AAIwBwMFACQGPAAwDQYJKoZIhvcNAQELBQADggEBAMvtAjKd2vyJ3i/0AZUg3ZPD
cIK4oazmMNnaehVemBExDbOf22XZmkEV7ymfV9y9Xh8DvODGzBqh8ev6ylfmsZGJ
TaLR1VnytAiuXWtill2MDZsckISbwDZBChOE6E2qwHHqj/F1r+ZachfLDiFd3Y4W
Qi8AsVhu+VHiBStxeUjJcDmOmdgCQX4QOY7CkSIuyK1JzOS7ykhCTNRNIT4qLwgB
XbPLgDwvFWbgCxO6dPgzN79/NhpZCuPiGUbOo4cBOsVPofRuL4qu5bsjHmEZIHfo
M8hnaOr/c1HPaeLqZmGJOm1h/VFWZKXRtbUMqeaQ6Q3YMZJBMSvEB2Y9kXCy1dc=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:41:10 2024 by rpki-client on console-ams.rpki-client.org