Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
File: vt7dCrwa8pN-0x02Azt8qwSLibs.cer (raw, json)
Hash identifier: hcF87R0CGPI8sKOm5JDbdk8Bj6Mtyv2ZCAXIt8oaEKQ=
Subject key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A66
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Fri 08 Nov 2024 19:14:17 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 148973
IP: 103.175.26.0/23
IP: 2001:df0:5a40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137830 (0x21a66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 8 19:14:17 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91BE6D70000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:da:96:14:36:9b:79:7f:c5:d8:ba:f6:68:
e1:b9:97:1c:d6:df:90:29:d9:56:2f:60:94:1a:ed:
3f:b3:41:bb:c6:36:cf:24:b0:ff:3d:e5:ff:53:b2:
5a:87:3c:8b:26:b1:e1:a0:e3:06:77:4d:6b:b9:cb:
b5:09:f0:d1:ad:f7:0f:c7:56:22:67:6a:34:88:9f:
d4:98:66:18:ec:72:3d:63:b9:08:d9:95:40:6b:7e:
c5:26:3e:c1:01:f4:a0:c0:e4:32:bc:b7:59:4b:9d:
d8:94:3f:4c:a7:66:3e:a4:c6:d6:93:01:1d:17:5d:
de:bc:81:96:7f:3f:cb:af:5b:7e:f7:d1:5f:d8:8a:
cc:fc:ee:4f:e0:7d:2b:72:ed:06:8d:c5:2b:95:84:
0a:30:29:ef:53:b1:df:8c:a4:45:28:40:22:25:aa:
fa:65:d4:57:a4:6d:95:ec:67:ab:5f:14:71:a1:78:
11:02:38:a1:53:97:14:ad:e4:1c:b0:a9:e2:7f:4b:
31:a8:9d:4d:29:98:3f:df:1e:51:1d:63:83:3b:43:
52:54:fd:81:51:ae:d1:59:2a:ec:81:39:04:2f:61:
03:f8:2f:ff:9a:8a:30:2e:eb:a6:df:82:68:86:c8:
5a:f4:75:57:66:8e:21:31:ed:94:59:75:42:bc:35:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
148973
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/23
IPv6:
2001:df0:5a40::/48
Signature Algorithm: sha256WithRSAEncryption
4e:6c:71:43:bc:2d:12:ef:3b:5a:c0:67:1f:b4:39:4d:e0:ef:
a2:d0:ca:ca:ba:8c:0c:d6:08:21:92:36:76:38:51:b4:55:a8:
8b:ad:6f:25:d9:09:05:c2:c1:62:27:c5:51:b1:89:a3:ee:89:
f2:22:dd:6c:a5:7c:e5:b8:6e:10:69:e2:0e:e1:a2:2e:50:75:
57:84:6c:50:d6:e1:97:ec:9b:be:df:e3:99:9b:c8:73:df:f1:
9f:93:1a:26:b5:5a:f0:4f:94:68:14:3e:ea:56:70:72:35:fd:
73:dd:eb:49:5a:fe:8d:76:99:6b:f7:ca:7f:b5:9d:be:52:41:
72:eb:bf:22:e2:72:d6:3e:d6:6c:97:53:d3:38:11:aa:f5:f7:
4f:0c:d8:2d:3d:49:16:ab:83:46:3e:79:5a:6e:71:18:8f:f9:
b4:fc:54:ee:51:88:68:b3:50:04:14:db:03:76:0b:56:58:3f:
bc:c7:af:bd:60:88:a8:76:68:ba:01:24:16:12:7a:9c:8d:9f:
98:57:aa:0b:e0:86:b5:e4:c3:e0:9a:d8:c5:36:38:86:ee:2a:
db:bc:b4:a7:71:66:3a:2b:48:1e:04:86:ba:17:84:e3:c1:39:
04:2a:f7:67:a0:9e:50:03:67:3f:b6:85:ce:b5:fc:e3:22:bc:
12:74:ab:fd
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIDAhpmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwODE5MTQxN1oXDTI2MDEzMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxQkU2RDcwMDAwMTEwLwYDVQQFEyhCRURFREQwQUJDMUFGMjkzN0VE
MzFEMzYwMzNCN0NBQjA0OEI4OUJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApVHalhQ2m3l/xdi69mjhuZcc1t+QKdlWL2CUGu0/s0G7xjbPJLD/PeX/
U7JahzyLJrHhoOMGd01rucu1CfDRrfcPx1YiZ2o0iJ/UmGYY7HI9Y7kI2ZVAa37F
Jj7BAfSgwOQyvLdZS53YlD9Mp2Y+pMbWkwEdF13evIGWfz/Lr1t+99Ff2IrM/O5P
4H0rcu0GjcUrlYQKMCnvU7HfjKRFKEAiJar6ZdRXpG2V7GerXxRxoXgRAjihU5cU
reQcsKnif0sxqJ1NKZg/3x5RHWODO0NSVP2BUa7RWSrsgTkEL2ED+C//moowLuum
34Johsha9HVXZo4hMe2UWXVCvDVdDwIDAQABo4IC8jCCAu4wHQYDVR0OBBYEFL7e
3Qq8GvKTftMdNgM7fKsEi4m7MB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF
BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFC
RTZENzAwMDAvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu
bmV0L3JlcG9zaXRvcnkvQTkxQkU2RDcwMDAwLzAvQkVERUREMEFCQzFBRjI5MzdF
RDMxRDM2MDMzQjdDQUIwNDhCODlCQi5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v
cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAkXtMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ68a
MA8EAgACMAkDBwAgAQ3wWkAwDQYJKoZIhvcNAQELBQADggEBAE5scUO8LRLvO1rA
Zx+0OU3g76LQysq6jAzWCCGSNnY4UbRVqIutbyXZCQXCwWInxVGxiaPuifIi3Wyl
fOW4bhBp4g7hoi5QdVeEbFDW4Zfsm77f45mbyHPf8Z+TGia1WvBPlGgUPupWcHI1
/XPd60la/o12mWv3yn+1nb5SQXLrvyLictY+1myXU9M4Ear1908M2C09SRarg0Y+
eVpucRiP+bT8VO5RiGizUAQU2wN2C1ZYP7zHr71giKh2aLoBJBYSepyNn5hXqgvg
hrXkw+Ca2MU2OIbuKtu8tKdxZjorSB4EhroXhOPBOQQq92egnlADZz+2hc61/OMi
vBJ0q/0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:39 2025 by rpki-client