Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
File: x6CGcqgQDaMwwSIxURVYe-YRDfE.cer (raw, json)
Hash identifier: +bU1KaXTzB0CXP05EQ1mDTZ0nu1Hs9lTOF0tQAz+c64=
Subject key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD4E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Nov 2023 15:35:43 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 38797
IP: 125.62.224.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 13:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118094 (0x1cd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 28 15:35:43 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:fc:80:a5:a8:44:0a:b5:26:12:a4:04:ce:
09:8e:ee:94:b0:58:c8:85:af:81:ff:3d:72:4a:14:
8a:23:54:5b:40:aa:60:48:74:97:27:56:65:93:24:
28:0f:86:f3:26:56:a0:19:38:8f:7a:7f:16:40:df:
af:b5:ea:79:bc:cb:e4:3b:9b:b8:09:28:bc:f4:80:
a9:8d:6b:ab:ed:1a:6a:c5:05:da:29:0c:a0:65:e1:
49:1f:db:10:d1:1e:3e:98:14:0f:54:29:62:dc:24:
b5:93:13:6f:d3:5f:8b:ad:6f:2c:a1:79:d8:6a:86:
59:7e:f6:bf:91:bd:a6:b2:44:82:09:31:09:30:a7:
b6:d0:d6:a9:d1:f6:ae:44:a6:1a:4f:83:9f:35:ce:
a2:1e:31:69:78:2b:a5:a9:5f:b1:e2:f2:35:e6:8b:
ca:c3:be:d1:3b:0e:bb:b0:32:01:be:ab:5c:00:17:
f1:02:b2:86:13:b5:aa:fc:88:75:30:c7:54:26:9b:
d2:6d:fd:c5:45:a7:a6:ee:84:15:cf:b1:8a:08:65:
cd:e6:76:ac:e3:fb:16:d7:20:4e:76:35:2e:02:72:
0e:b2:8f:fd:b6:d6:a5:d7:a6:23:ff:36:3e:2f:02:
bd:ff:14:c8:a3:dc:bb:85:81:df:f9:ab:aa:a3:39:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38797
sbgp-ipAddrBlock: critical
IPv4:
125.62.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:6a:5f:7d:18:6a:ae:2b:55:45:4b:2a:75:e7:46:22:5a:b8:
d5:a8:4f:63:3b:3d:71:84:d7:7d:ec:fc:2e:ef:8d:48:19:d6:
12:57:d3:3f:25:a7:8f:6b:47:d0:bf:a8:63:72:bb:59:0e:f6:
98:06:80:4b:e4:4e:5d:84:88:fc:10:de:a4:c2:70:e5:51:a4:
df:b5:b8:5c:fb:8c:39:80:8f:4c:3f:dd:43:79:b6:9b:0a:72:
a1:96:7d:d7:f1:e8:0c:a9:9e:5a:68:3c:a6:7c:a6:e5:d2:43:
70:f3:00:14:77:e5:57:bc:01:ef:41:fa:a5:8d:a2:10:a7:97:
b2:cf:ab:33:3a:b2:60:1f:1b:7e:4a:20:38:d5:d8:fc:c3:cf:
79:e9:a2:c4:ae:c3:3b:2f:25:c7:f0:18:85:8a:0f:1b:56:93:
1c:54:3a:8f:f2:1d:0b:cd:48:98:5c:08:7f:4c:53:66:52:8a:
28:e7:03:58:41:1a:ca:3a:6a:ec:5a:1f:ac:f6:21:91:56:d5:
05:2e:0b:89:c7:a9:f8:db:31:17:e5:d2:ef:5d:60:09:42:92:
64:a0:8f:6f:79:8f:49:08:77:22:1a:52:e7:b2:39:84:38:e7:
9a:8b:b5:45:80:59:1a:89:d8:51:da:ae:12:99:dd:8d:47:17:
6c:bb:09:3e
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAc1OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyODE1MzU0M1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIz
MTUxMTU1ODdCRTYxMTBERjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRmPyApahECrUmEqQEzgmO7pSwWMiFr4H/PXJKFIojVFtAqmBIdJcnVmWTJCgP
hvMmVqAZOI96fxZA36+16nm8y+Q7m7gJKLz0gKmNa6vtGmrFBdopDKBl4Ukf2xDR
Hj6YFA9UKWLcJLWTE2/TX4utbyyhedhqhll+9r+RvaayRIIJMQkwp7bQ1qnR9q5E
phpPg581zqIeMWl4K6WpX7Hi8jXmi8rDvtE7DruwMgG+q1wAF/ECsoYTtar8iHUw
x1Qmm9Jt/cVFp6buhBXPsYoIZc3mdqzj+xbXIE52NS4Ccg6yj/221qXXpiP/Nj4v
Ar3/FMij3LuFgd/5q6qjOTR5AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUx6CGcqgQ
DaMwwSIxURVYe+YRDfEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ5Q0E5L0VFRDc0OEQ2NEYxNTExRUI4QzdFQUIxQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0OUNBOS9FRUQ3NDhENjRGMTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3Fn
UURhTXd3U0l4VVJWWWUtWVJEZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJeNMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEfT7gMA0GCSqG
SIb3DQEBCwUAA4IBAQBsal99GGquK1VFSyp150YiWrjVqE9jOz1xhNd97Pwu741I
GdYSV9M/JaePa0fQv6hjcrtZDvaYBoBL5E5dhIj8EN6kwnDlUaTftbhc+4w5gI9M
P91DebabCnKhln3X8egMqZ5aaDymfKbl0kNw8wAUd+VXvAHvQfqljaIQp5eyz6sz
OrJgHxt+SiA41dj8w8956aLErsM7LyXH8BiFig8bVpMcVDqP8h0LzUiYXAh/TFNm
Uooo5wNYQRrKOmrsWh+s9iGRVtUFLguJx6n42zEX5dLvXWAJQpJkoI9veY9JCHci
GlLnsjmEOOeai7VFgFkaidhR2q4Smd2NRxdsuwk+
-----END CERTIFICATE-----
Generated at Thu Apr 25 14:23:06 2024 by rpki-client on console-fra.rpki-client.org