Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer
File: s5MbVo8uudLtLKTWS-vAhvuduJo.cer (raw, json)
Hash identifier: 10wRekYKvJIITVWIt7CO+oCXHzsQHx5XbcxaqfJVj6g=
Subject key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E171
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Feb 2024 16:57:44 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 132054
IP: 103.148.224.0/23
IP: 2001:df2:f280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 13:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123249 (0x1e171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 29 16:57:44 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:61:5d:92:68:05:d6:c3:a9:40:d4:a1:cc:
02:8a:98:f3:9b:42:55:b5:cb:fd:a2:e4:38:13:12:
e2:7e:6b:e5:40:cc:d4:78:d4:03:56:83:08:fb:f7:
81:5a:62:48:c4:b9:1d:a0:d3:e1:5a:df:be:fd:df:
23:91:e7:f8:7d:82:3c:31:22:d5:16:7e:42:84:b3:
3e:41:5a:1e:b9:a8:c4:d4:11:08:bc:d3:18:78:29:
bb:b7:ec:b7:58:da:68:3f:86:9c:27:96:52:9f:be:
99:7e:ab:40:e5:7b:dd:ed:a1:96:8a:c8:30:37:81:
66:67:bf:3d:51:94:d2:90:04:51:b2:73:38:17:7d:
4f:8a:60:32:1a:71:63:f6:4d:63:8f:e6:63:e4:5c:
31:0c:7a:d2:84:f3:a9:3e:05:bb:b6:8a:d8:19:c3:
7a:b6:c9:ac:e2:c2:b4:83:22:c2:37:6b:10:bc:d9:
32:2d:b9:12:0a:f9:0c:6e:5a:c3:e6:b1:a6:5b:80:
a0:c6:58:ed:83:cf:ad:ae:3c:11:2b:27:26:f6:5c:
9c:b1:b7:9a:f0:c7:b2:93:59:51:5e:a1:61:6a:f7:
65:c7:9e:c2:17:9c:ff:55:86:4c:e0:7e:bf:22:42:
8a:30:c9:70:ad:73:b9:f9:0d:0b:4e:ce:a6:fa:1b:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132054
sbgp-ipAddrBlock: critical
IPv4:
103.148.224.0/23
IPv6:
2001:df2:f280::/48
Signature Algorithm: sha256WithRSAEncryption
2f:79:0c:56:6b:74:47:a9:af:8b:c2:79:ef:df:56:33:c6:7a:
93:cb:f7:c4:b9:28:c6:a0:a2:d3:43:34:75:59:16:9b:36:48:
4c:46:ce:9f:62:be:f1:19:f9:98:57:41:75:5e:3f:2b:30:26:
4b:0d:a4:fa:f7:ee:8f:cc:a8:c3:18:bf:62:5b:70:1b:24:1a:
c6:92:74:ef:69:54:7c:3a:eb:b4:ab:90:d3:c3:b3:64:3c:28:
30:85:c1:3f:e5:9a:ef:c2:af:15:9a:c0:4c:6d:20:42:0b:89:
1c:02:11:b6:eb:bb:ef:d1:c2:30:e9:28:fe:f4:de:95:7e:25:
89:11:0a:b3:04:7b:f7:aa:e2:e9:06:92:e6:23:82:6c:2e:66:
d2:d4:2e:a7:84:aa:66:71:52:32:e8:50:c9:a2:2d:15:e2:5b:
28:04:1d:05:c9:53:ed:3e:f6:a3:11:c6:09:fc:b0:c5:47:1f:
4d:ab:fa:20:58:9e:d6:cc:25:34:5e:a0:32:45:cd:b0:1d:54:
01:65:59:b0:8b:97:37:d1:f2:6a:bf:22:38:3a:35:9b:4c:4d:
f8:77:24:9a:54:2c:74:5b:6b:38:e3:6f:7b:a6:7d:db:d0:41:
a1:24:ae:cd:b6:e8:c7:17:5d:fe:c4:72:15:dc:5c:8d:e8:a8:
17:c1:03:15
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAeFxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDIyOTE2NTc0NFoXDTI1MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRE
NjRCRUJDMDg2RkI5REI4OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpomFdkmgF1sOpQNShzAKKmPObQlW1y/2i5DgTEuJ+a+VAzNR41ANWgwj794Fa
YkjEuR2g0+Fa37793yOR5/h9gjwxItUWfkKEsz5BWh65qMTUEQi80xh4Kbu37LdY
2mg/hpwnllKfvpl+q0Dle93toZaKyDA3gWZnvz1RlNKQBFGyczgXfU+KYDIacWP2
TWOP5mPkXDEMetKE86k+Bbu2itgZw3q2yaziwrSDIsI3axC82TItuRIK+QxuWsPm
saZbgKDGWO2Dz62uPBErJyb2XJyxt5rwx7KTWVFeoWFq92XHnsIXnP9Vhkzgfr8i
QoowyXCtc7n5DQtOzqb6G2nPAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUs5MbVo8u
udLtLKTWS+vAhvuduJowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg2N0YxLzgwOUQ3MTVDNTkxQTExRUE5NjkyQUEzQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NjdGMS84MDlENzE1QzU5MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84
dXVkTHRMS1RXUy12QWh2dWR1Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgPWMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5TgMA8EAgAC
MAkDBwAgAQ3y8oAwDQYJKoZIhvcNAQELBQADggEBAC95DFZrdEepr4vCee/fVjPG
epPL98S5KMagotNDNHVZFps2SExGzp9ivvEZ+ZhXQXVePyswJksNpPr37o/MqMMY
v2JbcBskGsaSdO9pVHw667SrkNPDs2Q8KDCFwT/lmu/CrxWawExtIEILiRwCEbbr
u+/RwjDpKP703pV+JYkRCrMEe/eq4ukGkuYjgmwuZtLULqeEqmZxUjLoUMmiLRXi
WygEHQXJU+0+9qMRxgn8sMVHH02r+iBYntbMJTReoDJFzbAdVAFlWbCLlzfR8mq/
Ijg6NZtMTfh3JJpULHRbazjjb3umfdvQQaEkrs226McXXf7EchXcXI3oqBfBAxU=
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:25:59 2024 by rpki-client on console-fra.rpki-client.org