Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
File: vRTPGp8I9oE3_oEWzXdq29sv77Q.cer (raw, json)
Hash identifier: NCxeYRt8+IzGUJn6mQYBVOKCXbkn0fvqR94738oapoA=
Subject key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0212AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Oct 2024 12:33:43 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138205
IP: 103.129.236.0/22
IP: 2403:8b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135855 (0x212af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 8 12:33:43 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:8a:e1:27:73:54:57:24:3c:b0:51:b5:b2:
96:f9:60:11:e3:f3:16:0f:fc:09:ac:4a:83:01:95:
04:03:1e:6f:86:df:b8:bc:c9:99:33:56:fe:0a:b4:
d6:15:1e:bd:a1:9d:d1:bf:a1:5c:a5:a2:f7:b4:b1:
d5:cb:52:15:a0:e0:80:52:b7:b7:cd:aa:f1:b2:58:
d9:21:17:c8:c0:05:29:82:77:28:57:3c:af:90:21:
d5:b6:4d:1d:53:ed:46:9c:62:8f:e0:90:f1:94:0c:
64:79:e6:09:cf:cf:c0:46:9f:6a:31:6c:af:24:4d:
ca:18:4b:8d:c0:f8:be:8c:59:03:7a:c1:12:20:a0:
96:9a:4d:94:0a:16:cc:8b:ab:b7:4a:25:43:30:2a:
a8:e7:27:ec:91:60:2b:b3:36:34:61:12:5c:3c:fd:
20:b9:14:e0:34:59:a5:f8:2a:17:0b:c5:b8:d0:4c:
ad:db:45:44:d3:d0:6b:67:20:d8:8d:e7:63:49:03:
3d:68:50:a5:78:e2:5a:bf:f6:7e:95:6c:65:2a:c1:
a5:94:83:97:50:78:99:ef:9d:47:b4:66:08:aa:0b:
14:e9:87:c5:93:b7:18:3a:79:f0:ab:35:8d:13:83:
fb:08:a8:ee:5e:9b:00:99:23:fb:56:ea:5e:5d:41:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138205
sbgp-ipAddrBlock: critical
IPv4:
103.129.236.0/22
IPv6:
2403:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
36:ff:d1:3f:9f:4a:72:b1:42:db:79:b8:aa:b3:78:84:bc:9e:
f1:5c:10:45:17:97:57:5c:09:0b:96:08:b6:ed:27:4d:dc:fa:
8d:dd:e2:b0:e8:c4:82:a5:fd:0f:3e:32:c2:d1:13:0c:2c:5e:
6d:f7:57:1e:b0:0f:70:a1:0c:c0:50:ae:f1:4b:41:60:d3:9d:
b3:fb:d2:7f:8d:0d:f1:d8:91:56:ff:79:de:12:fb:99:ef:77:
ab:30:59:c2:ef:bf:f2:97:43:10:ef:d7:c4:5b:d6:c6:e6:6a:
a2:8d:20:46:ed:32:63:75:92:c5:5a:03:fd:72:bf:19:e5:b4:
01:45:5b:95:a2:c5:51:04:e3:97:37:07:ad:31:26:9d:ba:4f:
81:59:b1:71:a9:1d:95:86:64:e8:78:9d:7f:e5:ea:99:a4:71:
c7:0f:33:70:fd:a8:dd:8e:d6:19:81:4d:f8:d4:6b:91:68:34:
29:dc:ab:ba:69:fc:d0:89:f7:ea:2e:1c:9e:c5:bf:33:c9:46:
78:2b:6d:56:36:2a:b0:fa:05:7e:dc:9c:f5:98:79:13:90:8a:
d5:0e:ca:d1:e3:f0:2b:d5:12:a2:44:76:ed:71:5e:58:c9:25:
42:48:c5:37:ab:f2:7d:bf:79:ed:90:ec:16:30:7b:74:c7:f7:
c9:13:08:11
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAhKvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAwODEyMzM0M1oXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODEx
NkNENzc2QURCREIyRkVGQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaPYrhJ3NUVyQ8sFG1spb5YBHj8xYP/AmsSoMBlQQDHm+G37i8yZkzVv4KtNYV
Hr2hndG/oVylove0sdXLUhWg4IBSt7fNqvGyWNkhF8jABSmCdyhXPK+QIdW2TR1T
7UacYo/gkPGUDGR55gnPz8BGn2oxbK8kTcoYS43A+L6MWQN6wRIgoJaaTZQKFsyL
q7dKJUMwKqjnJ+yRYCuzNjRhElw8/SC5FOA0WaX4KhcLxbjQTK3bRUTT0GtnINiN
52NJAz1oUKV44lq/9n6VbGUqwaWUg5dQeJnvnUe0ZgiqCxTph8WTtxg6efCrNY0T
g/sIqO5emwCZI/tW6l5dQVHlAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUvRTPGp8I
9oE3/oEWzXdq29sv77QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE5QTQwLzBCRDQ1NjIyMDA3QTExRUFCOEIzMUIxMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExOUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4
STlvRTNfb0VXelhkcTI5c3Y3N1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhvdMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4HsMA0EAgAC
MAcDBQAkA4tAMA0GCSqGSIb3DQEBCwUAA4IBAQA2/9E/n0pysULbebiqs3iEvJ7x
XBBFF5dXXAkLlgi27SdN3PqN3eKw6MSCpf0PPjLC0RMMLF5t91cesA9woQzAUK7x
S0Fg052z+9J/jQ3x2JFW/3neEvuZ73erMFnC77/yl0MQ79fEW9bG5mqijSBG7TJj
dZLFWgP9cr8Z5bQBRVuVosVRBOOXNwetMSaduk+BWbFxqR2VhmToeJ1/5eqZpHHH
DzNw/ajdjtYZgU341GuRaDQp3Ku6afzQiffqLhyexb8zyUZ4K21WNiqw+gV+3Jz1
mHkTkIrVDsrR4/Ar1RKiRHbtcV5YySVCSMU3q/J9v3ntkOwWMHt0x/fJEwgR
-----END CERTIFICATE-----
Generated at Wed Nov 27 04:04:08 2024 by rpki-client on console-fra.rpki-client.org