Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer (raw, json)
Hash identifier: +jFUs08EJne7mChaCfOI+PI6M79Rwm5Kbtv4XS21uLs=
Subject key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020DC2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Sep 2024 15:29:59 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 151834
IP: 103.217.70.0/23
IP: 2401:40e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134594 (0x20dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 15:29:59 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:9d:02:b9:64:d2:27:36:29:45:27:92:74:
2b:35:a3:29:db:53:a8:b0:ac:ed:9d:1a:3c:6d:53:
17:67:c7:d9:40:ab:ae:b2:e9:25:25:9e:ae:2f:1a:
da:2e:b1:60:8f:0c:33:f9:21:0d:14:89:3e:6b:4a:
b3:5d:b9:93:ac:a9:20:87:07:df:60:f8:d2:ae:25:
be:28:e1:10:5a:0d:6a:f2:58:1d:10:b2:aa:a0:c9:
c2:28:be:33:ec:a7:f4:81:86:47:ba:a4:19:86:fd:
ce:69:b5:b8:cf:27:63:17:85:b4:55:db:84:7a:4e:
7a:96:53:bc:34:07:89:0b:ec:a4:dd:55:9b:cf:9f:
04:e5:c8:11:1b:a7:69:58:9e:e8:f3:29:69:d4:65:
47:5e:fc:23:e0:bd:9a:a5:fb:c2:f6:3e:32:ff:04:
71:78:7c:98:d2:a8:d4:3a:f7:26:cc:01:7a:f4:ff:
91:22:91:64:c4:85:55:3a:38:39:a0:29:1c:92:de:
3a:33:a5:5b:34:90:4c:39:5b:03:c0:16:56:d3:f0:
69:af:d8:8c:3f:07:b1:0d:c6:7f:c4:11:9c:d0:46:
40:d4:7a:c3:10:fd:0e:d7:fe:75:c5:cd:52:55:9d:
d0:5b:46:b5:84:82:90:a2:47:f2:78:14:19:f9:7b:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151834
sbgp-ipAddrBlock: critical
IPv4:
103.217.70.0/23
IPv6:
2401:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
14:b9:28:54:19:97:0e:07:dd:b5:b3:d0:ce:1f:02:ce:a9:0d:
67:98:e9:5e:75:65:ff:b1:ae:a8:9b:1c:eb:eb:8b:da:88:44:
49:82:81:91:e4:d0:5d:fb:a1:1d:5b:8d:61:00:6c:0d:5a:16:
09:9d:8a:7e:a8:da:b2:95:76:df:cb:d9:db:6f:ac:f6:a1:f4:
b3:cc:f6:94:10:c2:55:dc:1d:9a:5f:d4:c3:ec:a5:c2:c7:23:
47:61:49:95:43:69:f9:fa:6f:30:87:85:70:ed:8d:26:88:4b:
4a:d5:6d:a0:47:c1:04:dd:b4:9d:14:37:0e:cd:c7:7b:c8:4b:
4c:30:72:42:23:ca:ee:00:c1:34:3f:86:28:24:4e:48:93:3d:
2c:1b:3e:c8:e1:3e:3e:4d:6e:f2:d2:c1:4f:3e:cd:de:fa:be:
fa:1d:57:8b:ed:cc:c9:14:2f:fa:47:a3:66:12:d7:58:a7:50:
8a:af:f7:93:61:47:43:89:36:78:99:59:39:87:a6:b4:92:1c:
0e:fb:f0:fc:f6:c7:8f:dc:1f:46:9f:27:90:cf:4e:27:80:a5:
1f:46:5d:76:b6:41:90:a5:50:05:6b:a1:fd:7b:d2:97:45:88:
97:4d:ed:70:66:86:bc:ba:6b:5c:58:1c:eb:d6:a5:d7:69:aa:
32:60:1e:61
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAg3CMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkxNjE1Mjk1OVoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjI3NDQxMTAvBgNVBAUTKEJEMjFCRTk4MzA3NTQyOTE2RDgxRTBG
RUQ5RjhGNTMyNDA0OTQ0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPp50CuWTSJzYpRSeSdCs1oynbU6iwrO2dGjxtUxdnx9lAq66y6SUlnq4vGtou
sWCPDDP5IQ0UiT5rSrNduZOsqSCHB99g+NKuJb4o4RBaDWryWB0QsqqgycIovjPs
p/SBhke6pBmG/c5ptbjPJ2MXhbRV24R6TnqWU7w0B4kL7KTdVZvPnwTlyBEbp2lY
nujzKWnUZUde/CPgvZql+8L2PjL/BHF4fJjSqNQ69ybMAXr0/5EikWTEhVU6ODmg
KRyS3jozpVs0kEw5WwPAFlbT8Gmv2Iw/B7ENxn/EEZzQRkDUesMQ/Q7X/nXFzVJV
ndBbRrWEgpCiR/J4FBn5ewE1AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUvSG+mDB1
QpFtgeD+2fj1MkBJRIAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYyNzQ0LzhFOEI5QzlFNjc0NDExRUU4QTkyRjgzRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2Mjc0NC84RThCOUM5RTY3NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURC
MVFwRnRnZUQtMmZqMU1rQkpSSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlEaMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ9lGMA0EAgAC
MAcDBQAkAUDgMA0GCSqGSIb3DQEBCwUAA4IBAQAUuShUGZcOB921s9DOHwLOqQ1n
mOledWX/sa6omxzr64vaiERJgoGR5NBd+6EdW41hAGwNWhYJnYp+qNqylXbfy9nb
b6z2ofSzzPaUEMJV3B2aX9TD7KXCxyNHYUmVQ2n5+m8wh4Vw7Y0miEtK1W2gR8EE
3bSdFDcOzcd7yEtMMHJCI8ruAME0P4YoJE5Ikz0sGz7I4T4+TW7y0sFPPs3e+r76
HVeL7czJFC/6R6NmEtdYp1CKr/eTYUdDiTZ4mVk5h6a0khwO+/D89seP3B9GnyeQ
z04ngKUfRl12tkGQpVAFa6H9e9KXRYiXTe1wZoa8umtcWBzr1qXXaaoyYB5h
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:55 2024 by rpki-client on console-fra.rpki-client.org