Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer (raw, json)
Hash identifier: mIWV7U5ltEti+lwBx3N/xhhhHsxWUFdzFpGNrZdNSBU=
Subject key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020964
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Aug 2024 04:55:25 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 9498
AS: 23870
AS: 24560
AS: 45514
AS: 45609
IP: 27.123.64.0/18
IP: 58.84.56.0/23
IP: 59.144.0.0/15
IP: 61.95.128.0/17
IP: 61.246.0.0/16
IP: 61.247.224.0/19
IP: 101.2.0.0/17
IP: 103.7.108.0/22
IP: 103.16.104.0/22
IP: 103.56.85.0/24
IP: 103.116.28.0/22
IP: 103.239.233.0/24
IP: 103.251.28.0/22
IP: 122.160.0.0 -- 122.187.255.255
IP: 125.16.0.0/13
IP: 150.129.140.0/22
IP: 171.48.0.0/12
IP: 171.76.0.0/14
IP: 180.178.0.0/19
IP: 180.211.80.0/22
IP: 182.64.0.0/12
IP: 202.56.192.0/18
IP: 203.101.0.0/17
IP: 203.132.128.0/19
IP: 203.145.128.0/18
IP: 2404:a800::/32
IP: 2407:b900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133476 (0x20964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 28 04:55:25 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:21:47:ac:2c:95:e8:a1:d2:f2:5a:6e:86:
80:f2:28:c7:d5:3b:16:f5:1e:d5:97:0e:0a:cb:ee:
0a:1d:c3:4a:b0:37:7f:ed:7f:a6:5b:b8:22:26:fe:
d5:5e:de:93:11:46:d0:4e:b9:c2:51:4d:e2:4e:62:
08:85:78:ef:77:b6:70:dc:a6:7d:77:21:7e:52:db:
3f:4f:45:83:4a:c6:43:12:2e:e6:3d:92:1e:eb:89:
49:d4:ad:07:62:e4:44:f3:81:63:57:53:46:68:5c:
70:c9:fe:1d:77:30:41:aa:5e:a5:e4:02:99:07:7f:
3b:d0:ab:63:ea:b2:1b:4d:be:8f:a9:04:49:88:49:
fc:76:e8:4d:bf:73:9d:57:82:a8:79:2c:b5:70:4f:
49:7a:ff:4f:f9:e1:a3:ed:29:0e:59:88:c1:86:ad:
3f:d2:0d:43:29:f2:f5:55:05:74:dd:57:94:41:68:
44:0d:08:db:00:6e:46:4b:21:3c:9d:eb:6c:73:0e:
57:a4:da:e6:bc:bd:3f:57:3d:99:da:c6:03:ff:6b:
41:0d:f6:06:69:39:f2:cc:21:bc:2e:2c:c6:5f:f5:
d1:f8:f4:22:b2:25:17:ad:e7:76:a1:ea:10:21:59:
7a:42:9b:bd:ed:91:bc:63:fd:a4:a4:14:d1:31:89:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9498
23870
24560
45514
45609
sbgp-ipAddrBlock: critical
IPv4:
27.123.64.0/18
58.84.56.0/23
59.144.0.0/15
61.95.128.0/17
61.246.0.0/16
61.247.224.0/19
101.2.0.0/17
103.7.108.0/22
103.16.104.0/22
103.56.85.0/24
103.116.28.0/22
103.239.233.0/24
103.251.28.0/22
122.160.0.0-122.187.255.255
125.16.0.0/13
150.129.140.0/22
171.48.0.0/12
171.76.0.0/14
180.178.0.0/19
180.211.80.0/22
182.64.0.0/12
202.56.192.0/18
203.101.0.0/17
203.132.128.0/19
203.145.128.0/18
IPv6:
2404:a800::/32
2407:b900::/32
Signature Algorithm: sha256WithRSAEncryption
53:28:11:76:f9:be:24:7e:82:1a:e5:a9:fe:47:f0:29:37:db:
07:21:56:c4:31:85:7f:c6:e2:ec:aa:4a:5c:3d:07:40:74:6e:
30:04:87:91:b2:0f:da:15:fd:fe:c9:b9:69:7a:d8:cb:a4:50:
b5:26:5a:fd:bb:ce:eb:5f:31:c6:d6:54:9f:2d:6b:a6:5c:19:
aa:ad:27:7b:93:2e:4b:a5:f2:b7:05:93:22:7d:ca:8d:eb:12:
b3:5a:a5:c3:4e:1e:cd:cb:21:1c:b6:58:ff:74:87:d0:b5:3c:
ce:a1:bb:22:86:5c:29:e8:fc:89:bb:66:92:68:87:ec:e9:03:
fc:80:d1:a1:81:c1:45:38:45:bf:aa:65:ad:05:06:67:a5:7d:
41:db:67:68:d4:f7:88:47:c7:12:4b:de:c6:fe:28:d8:09:9c:
da:89:71:62:86:4d:1d:73:17:28:99:90:7a:c4:42:c2:55:2f:
24:35:7e:0c:d6:5e:9d:c6:65:af:90:4d:55:81:fb:9c:0e:73:
4e:ad:4b:42:02:8c:01:be:ac:6f:23:1e:b9:12:7c:4e:5d:00:
bf:ee:1d:10:05:62:0d:a0:d4:eb:bc:30:41:c1:1a:fe:29:0e:
5b:ef:f6:15:77:14:c9:7d:41:0c:b9:ee:27:f5:5a:52:c2:3a:
ee:a8:33:a2
-----BEGIN CERTIFICATE-----
MIIG1jCCBb6gAwIBAgIDAglkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgyODA0NTUyNVoXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUz
Qzg4QUQxNERBODlBMTg2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc0iFHrCyV6KHS8lpuhoDyKMfVOxb1HtWXDgrL7godw0qwN3/tf6ZbuCIm/tVe
3pMRRtBOucJRTeJOYgiFeO93tnDcpn13IX5S2z9PRYNKxkMSLuY9kh7riUnUrQdi
5ETzgWNXU0ZoXHDJ/h13MEGqXqXkApkHfzvQq2PqshtNvo+pBEmISfx26E2/c51X
gqh5LLVwT0l6/0/54aPtKQ5ZiMGGrT/SDUMp8vVVBXTdV5RBaEQNCNsAbkZLITyd
62xzDlek2ua8vT9XPZnaxgP/a0EN9gZpOfLMIbwuLMZf9dH49CKyJRet53ah6hAh
WXpCm73tkbxj/aSkFNExiQNTAgMBAAGjggPLMIIDxzAdBgNVHQ4EFgQUs5hmqZ0c
2fTn6PU8iK0U2omhhiUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk2NEIzL0U2NTg1MTEyMUQ4NDExRTJBMUJBMzBEQjA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVow
YzJmVG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQgBAf8EHDAa
oBgwFgICJRoCAl0+AgJf8AIDALHKAgMAsikwgckGCCsGAQUFBwEHAQH/BIG5MIG2
MIGdBAIAATCBlgMEBht7QAMEATpUOAMDATuQAwQHPV+AAwMAPfYDBAU99+ADBAdl
AgADBAJnB2wDBAJnEGgDBABnOFUDBAJndBwDBABn7+kDBAJn+xwwCgMDBXqgAwMC
ergDAwN9EAMEApaBjAMDBKswAwMCq0wDBAW0sgADBAK001ADAwS2QAMEBso4wAME
B8tlAAMEBcuEgAMEBsuRgDAUBAIAAjAOAwUAJASoAAMFACQHuQAwDQYJKoZIhvcN
AQELBQADggEBAFMoEXb5viR+ghrlqf5H8Ck32wchVsQxhX/G4uyqSlw9B0B0bjAE
h5GyD9oV/f7JuWl62MukULUmWv27zutfMcbWVJ8ta6ZcGaqtJ3uTLkul8rcFkyJ9
yo3rErNapcNOHs3LIRy2WP90h9C1PM6huyKGXCno/Im7ZpJoh+zpA/yA0aGBwUU4
Rb+qZa0FBmelfUHbZ2jU94hHxxJL3sb+KNgJnNqJcWKGTR1zFyiZkHrEQsJVLyQ1
fgzWXp3GZa+QTVWB+5wOc06tS0ICjAG+rG8jHrkSfE5dAL/uHRAFYg2g1Ou8MEHB
Gv4pDlvv9hV3FMl9QQy57if1WlLCOu6oM6I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:09 2024 by rpki-client on console-fra.rpki-client.org