Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer
File: sZJ_E4KvyIRDDJZerSibw77GS-w.cer (raw, json)
Hash identifier: r6yiuS0B5romwH9Tp1MZodz5+ft748LJsGWbJATZ2uw=
Subject key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D847
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 14 Jan 2024 06:24:06 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 152324
IP: 2001:df3:5f40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120903 (0x1d847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 14 06:24:06 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:c8:ac:dc:41:e9:f3:80:81:16:8f:82:34:
58:b9:b8:51:89:e9:41:b5:a4:f7:c3:ee:a0:29:f6:
73:f4:dd:35:c1:c3:75:a9:4b:5e:bb:56:83:fe:f8:
fe:c4:59:54:13:4a:00:b0:ed:8b:b8:d4:e5:34:55:
85:ce:89:a7:38:4b:aa:fc:8e:a6:51:39:80:99:be:
95:e9:b1:db:9f:e1:a0:44:26:b1:65:e3:1e:23:19:
fe:28:12:94:4f:9a:bd:a8:7b:91:47:72:9c:0d:30:
38:2e:25:95:23:84:92:ca:e0:bf:55:6f:ca:03:51:
4e:c4:2f:fd:7f:70:1a:be:f2:83:72:02:e6:94:a3:
2c:3b:68:c2:5c:5b:35:f4:a2:41:08:c5:99:7f:cc:
42:fc:54:d7:6e:aa:5c:6e:ab:d8:d9:0a:5b:0e:73:
2f:01:53:07:5a:72:2f:c1:8a:12:4e:a8:fa:5a:4c:
d4:d4:8e:6b:d5:7d:c9:3a:96:96:36:e1:7d:1c:b3:
b4:ef:24:42:2a:34:e1:f4:b2:10:74:b5:00:e1:b6:
64:0a:d0:c4:56:1c:e9:d3:2c:55:aa:42:ad:e0:49:
29:95:e4:ee:86:88:b3:9a:37:34:1e:fb:ca:87:01:
e3:1d:02:ca:81:15:1d:69:0e:5b:1c:50:af:67:e6:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152324
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:5f40::/48
Signature Algorithm: sha256WithRSAEncryption
76:8c:a9:54:43:2b:e9:0c:57:6f:d4:3b:fd:66:36:af:ae:16:
e6:23:be:c4:6d:32:40:e6:77:b0:12:d1:28:93:a3:7a:19:0d:
81:96:c7:eb:e2:f3:a7:c7:c3:67:19:3b:2d:16:3d:6a:eb:8f:
1c:83:82:d9:62:e8:6e:43:72:24:0d:af:b8:21:91:61:8a:fe:
6c:f2:a0:73:03:e8:63:3c:af:40:d8:a3:c4:33:6e:10:5f:15:
be:38:a4:1e:72:3f:a9:ea:d0:da:e0:0f:52:95:09:ab:c9:ee:
b6:aa:5b:7e:63:6d:74:d2:4a:9f:9f:36:e5:6a:83:30:1b:ff:
c8:77:17:22:2f:f9:ff:1a:53:b6:19:82:5d:5a:e1:06:1e:54:
cf:30:a7:7f:76:20:de:f4:0b:98:96:17:6e:b6:54:d1:b1:e0:
51:06:64:27:16:7b:50:d5:f8:31:4c:48:cd:43:8a:0a:31:fa:
57:84:35:2c:23:19:01:d7:38:90:b2:f5:ac:97:2f:7e:80:e2:
43:db:09:b0:fb:52:db:a8:0c:34:44:a0:46:b5:0f:12:56:c8:
47:8d:3b:41:e1:e1:0a:ba:c0:5d:81:f7:2a:8c:3c:f2:89:b5:
60:50:fd:b4:39:fd:ec:e0:01:d4:20:d8:b3:4a:48:f6:07:64:
01:8f:85:a8
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAdhHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDExNDA2MjQwNloXDTI1MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUM4RjcxMTAvBgNVBAUTKEIxOTI3RjEzODJBRkM4ODQ0MzBDOTY1
RUFEMjg5QkMzQkVDNjRCRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/E8is3EHp84CBFo+CNFi5uFGJ6UG1pPfD7qAp9nP03TXBw3WpS167VoP++P7E
WVQTSgCw7Yu41OU0VYXOiac4S6r8jqZROYCZvpXpsduf4aBEJrFl4x4jGf4oEpRP
mr2oe5FHcpwNMDguJZUjhJLK4L9Vb8oDUU7EL/1/cBq+8oNyAuaUoyw7aMJcWzX0
okEIxZl/zEL8VNduqlxuq9jZClsOcy8BUwdaci/BihJOqPpaTNTUjmvVfck6lpY2
4X0cs7TvJEIqNOH0shB0tQDhtmQK0MRWHOnTLFWqQq3gSSmV5O6GiLOaNzQe+8qH
AeMdAsqBFR1pDlscUK9n5gZDAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUsZJ/E4Kv
yIRDDJZerSibw77GS+wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVDOEY3LzgwOTNDMzA4QjJBNTExRUU5MERFQTIyMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQzhGNy84MDkzQzMwOEIyQTUxMUVFOTBERUEyMjBDNEY5QUUwMi9zWkpfRTRL
dnlJUkRESlplclNpYnc3N0dTLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlMEMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN819AMA0G
CSqGSIb3DQEBCwUAA4IBAQB2jKlUQyvpDFdv1Dv9ZjavrhbmI77EbTJA5newEtEo
k6N6GQ2Blsfr4vOnx8NnGTstFj1q648cg4LZYuhuQ3IkDa+4IZFhiv5s8qBzA+hj
PK9A2KPEM24QXxW+OKQecj+p6tDa4A9SlQmrye62qlt+Y2100kqfnzblaoMwG//I
dxciL/n/GlO2GYJdWuEGHlTPMKd/diDe9AuYlhdutlTRseBRBmQnFntQ1fgxTEjN
Q4oKMfpXhDUsIxkB1ziQsvWsly9+gOJD2wmw+1LbqAw0RKBGtQ8SVshHjTtB4eEK
usBdgfcqjDzyibVgUP20Of3s4AHUINizSkj2B2QBj4Wo
-----END CERTIFICATE-----
Generated at Thu May 2 06:14:38 2024 by rpki-client on console-fra.rpki-client.org