Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer
File: xhlIJCxagX94h_N49IM8VrevtXw.cer (raw, json)
Hash identifier: 39o8vKtmm6fpRbqJ+pYsACM3J57RhpWnGuKPNSo13rw=
Subject key identifier: C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC17
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Nov 2023 18:06:05 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 139742
IP: 103.144.108.0/23
IP: 2001:df1:bd80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117783 (0x1cc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 21 18:06:05 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A919C0C5/serialNumber=C61948242C5A817F7887F378F4833C56B7AFB57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:45:30:23:38:83:eb:69:11:8b:d0:2d:07:
eb:a5:f3:de:77:be:94:96:38:af:43:e6:e7:93:f3:
3b:f1:2f:e6:3b:30:04:bf:5f:b3:a5:b8:11:cf:75:
21:5d:fc:1a:50:cf:71:2d:70:ae:9c:0b:ac:0a:d9:
ba:71:9e:30:b1:dc:e1:bc:4e:04:86:b3:01:a9:24:
a7:64:ab:0e:bb:97:35:f7:b5:1f:40:b5:46:ca:fd:
27:4c:59:27:97:87:ca:08:c9:64:49:ed:0b:6f:fe:
5c:65:5b:53:a7:c2:40:8d:01:7e:3e:af:e6:44:47:
c6:e1:ec:ba:b9:67:8c:6f:fe:68:6b:aa:ca:f0:a2:
a5:ba:39:a8:c3:32:50:4d:6d:4a:ef:49:08:3e:e9:
74:b1:b1:c9:5b:6f:16:85:26:e6:2b:a9:bb:73:38:
3d:db:bd:e1:d9:62:c5:6a:8e:8a:d2:90:15:84:f6:
80:68:90:a2:94:a6:32:03:9b:64:44:92:c6:97:d0:
ea:9d:14:c5:fc:7a:ee:62:7a:1e:85:25:cd:25:02:
ad:d8:58:83:4c:15:70:08:43:3b:c6:32:0e:78:ad:
a2:77:d2:45:7c:69:c8:65:07:b1:bd:6d:89:82:b1:
d0:34:7f:7c:26:f7:34:c3:98:45:f6:7e:7e:c4:c2:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139742
sbgp-ipAddrBlock: critical
IPv4:
103.144.108.0/23
IPv6:
2001:df1:bd80::/48
Signature Algorithm: sha256WithRSAEncryption
21:48:56:2e:72:92:59:5b:6e:7a:e9:aa:3e:cc:96:2a:33:13:
75:f5:f9:57:b3:65:4c:78:af:aa:be:38:f2:3e:91:2d:26:b4:
a4:98:db:af:c9:e3:38:80:e6:43:4e:a1:95:dc:3e:f3:dd:0f:
c0:8d:ac:89:61:2f:20:bd:e2:7f:a0:fe:b3:ff:de:14:12:a3:
c0:ad:30:8e:60:dc:9c:bd:a2:37:2a:92:9f:7f:48:43:70:ea:
c1:e2:cd:96:8b:1a:76:f5:a4:c3:b3:60:35:75:65:96:99:d7:
e9:ee:f9:d4:67:33:e4:e4:31:f4:7b:b7:f5:96:aa:84:c6:2f:
d1:49:3b:9f:82:98:90:c8:30:e2:6e:dd:42:c0:4c:51:f6:c5:
d1:3e:da:30:a8:4f:38:80:26:6e:3f:c1:20:5f:f9:ba:80:3d:
f5:5f:0a:1b:e6:18:98:02:bf:49:9f:ff:3d:52:48:11:b6:80:
9c:ca:f6:16:a6:a4:6b:fe:64:3a:f7:2b:8a:d8:22:de:57:66:
73:8c:a2:c5:e4:85:c6:3d:00:0c:52:65:a1:ff:1d:91:60:54:
b5:65:87:83:b2:9c:7e:35:bb:4b:11:f6:72:29:03:40:f4:2e:
a6:f9:5b:44:a4:13:5d:7b:e9:64:f3:9a:da:95:39:82:5d:6e:
e2:b9:39:7a
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAcwXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyMTE4MDYwNVoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUMwQzUxMTAvBgNVBAUTKEM2MTk0ODI0MkM1QTgxN0Y3ODg3RjM3
OEY0ODMzQzU2QjdBRkI1N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYwkUwIziD62kRi9AtB+ul8953vpSWOK9D5ueT8zvxL+Y7MAS/X7OluBHPdSFd
/BpQz3EtcK6cC6wK2bpxnjCx3OG8TgSGswGpJKdkqw67lzX3tR9AtUbK/SdMWSeX
h8oIyWRJ7Qtv/lxlW1OnwkCNAX4+r+ZER8bh7Lq5Z4xv/mhrqsrwoqW6OajDMlBN
bUrvSQg+6XSxsclbbxaFJuYrqbtzOD3bveHZYsVqjorSkBWE9oBokKKUpjIDm2RE
ksaX0OqdFMX8eu5ieh6FJc0lAq3YWINMFXAIQzvGMg54raJ30kV8achlB7G9bYmC
sdA0f3wm9zTDmEX2fn7Ewv9NAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUxhlIJCxa
gX94h/N49IM8VrevtXwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlDMEM1L0MzNTA0OUNBNTUzQjExRUJBRTlFRDI2RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5QzBDNS9DMzUwNDlDQTU1M0IxMUVCQUU5RUQyNkZDNEY5QUUwMi94aGxJSkN4
YWdYOTRoX040OUlNOFZyZXZ0WHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiHeMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5BsMA8EAgAC
MAkDBwAgAQ3xvYAwDQYJKoZIhvcNAQELBQADggEBACFIVi5ykllbbnrpqj7Mlioz
E3X1+VezZUx4r6q+OPI+kS0mtKSY26/J4ziA5kNOoZXcPvPdD8CNrIlhLyC94n+g
/rP/3hQSo8CtMI5g3Jy9ojcqkp9/SENw6sHizZaLGnb1pMOzYDV1ZZaZ1+nu+dRn
M+TkMfR7t/WWqoTGL9FJO5+CmJDIMOJu3ULATFH2xdE+2jCoTziAJm4/wSBf+bqA
PfVfChvmGJgCv0mf/z1SSBG2gJzK9hampGv+ZDr3K4rYIt5XZnOMosXkhcY9AAxS
ZaH/HZFgVLVlh4OynH41u0sR9nIpA0D0Lqb5W0SkE1176WTzmtqVOYJdbuK5OXo=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:40 2024 by rpki-client on console-fra.rpki-client.org