Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.cer (raw, json)
Hash identifier: 3lEkdvRwByfiNGPHH+VII7yPFsK8igardEgsyZ8F4Og=
Subject key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D02C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Dec 2023 15:00:07 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 9483
AS: 150454
IP: 202.50.109.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118828 (0x1d02c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 6 15:00:07 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:47:c1:2e:20:66:0f:7d:9e:83:ff:0b:43:
84:43:ed:6d:83:5f:33:08:0a:b0:3a:8e:67:d4:68:
21:3f:63:be:d0:8c:17:6e:d8:d8:36:07:aa:f9:a9:
62:73:f2:94:ff:5c:99:7b:07:a1:ce:a9:64:0f:74:
62:20:42:c3:76:d2:06:eb:c8:56:99:0e:2c:b6:36:
21:32:2c:e0:f2:fb:2b:f2:39:64:f8:62:a5:fe:8a:
d5:72:33:4f:a6:1d:de:25:a7:09:5a:b9:0a:19:95:
94:5c:f1:01:04:da:00:4d:b9:16:9b:68:a4:46:07:
bb:13:7e:b4:2e:18:57:be:d0:a5:37:d2:9f:94:1d:
98:07:95:82:85:be:11:3a:46:f6:b2:b2:dd:07:18:
90:79:41:2c:fe:88:96:a7:36:e6:90:bf:79:a5:76:
45:69:4d:f1:16:a2:f9:6b:07:e4:14:02:5d:64:c1:
91:09:c3:04:ab:f5:d4:c0:37:49:a4:2f:48:4c:16:
6f:ea:fe:9b:4e:32:f4:ed:03:b9:78:d0:80:38:99:
b2:c6:22:e4:4b:10:d7:bd:7f:24:dd:c4:70:cd:36:
35:ca:e0:74:2c:f5:d3:bf:24:c7:13:2c:b1:07:ab:
9d:e5:93:b9:22:3b:51:da:e3:9c:99:f1:ce:fa:61:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9483
150454
sbgp-ipAddrBlock: critical
IPv4:
202.50.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4b:39:42:b1:12:8d:c5:c0:dc:48:97:12:9d:37:d4:04:d5:
8c:96:fa:5a:a6:63:2f:11:1d:e3:f9:0b:fc:5c:c0:42:28:ab:
b6:d8:03:2f:12:5c:2f:16:dd:a6:2c:73:b5:c0:bf:06:fc:fc:
b5:1f:13:de:bd:a3:23:dd:8f:fd:6f:a3:d3:1e:79:95:46:91:
79:4b:7c:8d:f8:cf:e0:bf:c6:e5:5d:f9:62:3f:11:ec:9e:09:
cc:9d:f6:f8:af:18:f6:d6:64:98:ff:be:df:c9:f1:c6:d3:53:
4a:df:3a:ae:4f:7d:95:1c:da:a8:b7:cc:c7:55:e2:0c:c7:c7:
72:1a:29:e8:c4:6f:f7:c0:80:04:1a:c1:41:d8:58:41:3f:c9:
28:84:fb:6b:5e:0b:0f:19:5b:9d:04:33:b2:ef:ee:bc:22:0f:
6d:a5:30:52:48:d3:be:c4:9c:f0:3c:b2:11:e4:56:49:97:50:
5a:bb:25:72:a0:f6:4f:5d:d8:46:bd:40:52:70:a2:a2:8a:11:
db:09:dc:b1:a8:b7:4e:fc:c9:d7:d7:8b:a6:78:35:c6:cc:f1:
0a:3e:30:14:08:6c:4b:b7:31:ba:68:31:e0:f6:a4:70:77:ab:
0e:11:ed:78:94:38:b1:a6:ee:8d:3a:2d:9d:a1:be:bd:ca:ca:
60:46:21:56
-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgIDAdAsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIwNjE1MDAwN1oXDTI1MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RE
NjYwNjRCRTkyNkVDNzRDOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSqkfBLiBmD32eg/8LQ4RD7W2DXzMICrA6jmfUaCE/Y77QjBdu2Ng2B6r5qWJz
8pT/XJl7B6HOqWQPdGIgQsN20gbryFaZDiy2NiEyLODy+yvyOWT4YqX+itVyM0+m
Hd4lpwlauQoZlZRc8QEE2gBNuRabaKRGB7sTfrQuGFe+0KU30p+UHZgHlYKFvhE6
Rvayst0HGJB5QSz+iJanNuaQv3mldkVpTfEWovlrB+QUAl1kwZEJwwSr9dTAN0mk
L0hMFm/q/ptOMvTtA7l40IA4mbLGIuRLENe9fyTdxHDNNjXK4HQs9dO/JMcTLLEH
q53lk7kiO1Ha45yZ8c76YX5xAgMBAAGjggMTMIIDDzAdBgNVHQ4EFgQUsQtPQ0P6
rissTT3WYGS+km7HTJ8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVDRTJGLzBCREVBNTI4NzBFMzExRURCNTc3MDQzRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQ
NnJpc3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICJQsCAwJLtjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoybTAN
BgkqhkiG9w0BAQsFAAOCAQEAS0s5QrESjcXA3EiXEp031ATVjJb6WqZjLxEd4/kL
/FzAQiirttgDLxJcLxbdpixztcC/Bvz8tR8T3r2jI92P/W+j0x55lUaReUt8jfjP
4L/G5V35Yj8R7J4JzJ32+K8Y9tZkmP++38nxxtNTSt86rk99lRzaqLfMx1XiDMfH
chop6MRv98CABBrBQdhYQT/JKIT7a14LDxlbnQQzsu/uvCIPbaUwUkjTvsSc8Dyy
EeRWSZdQWrslcqD2T13YRr1AUnCioooR2wncsai3TvzJ19eLpng1xszxCj4wFAhs
S7cxumgx4PakcHerDhHteJQ4sabujTotnaG+vcrKYEYhVg==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:13 2024 by rpki-client on console-ams.rpki-client.org