Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer (raw, json)
Hash identifier: Yf8OcE9tLbcV4q2KsktoExxSO28gcn0bHoXDdiHqkes=
Subject key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020A4D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 30 Aug 2024 22:05:17 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 140957
IP: 103.153.198.0/23
IP: 2001:df4:5880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133709 (0x20a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 30 22:05:17 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:e5:aa:df:88:90:36:87:ab:4a:47:0b:6b:
3f:4c:28:50:d6:12:40:b9:64:bc:e4:1b:48:02:0b:
70:ad:c2:85:ff:89:5e:c7:87:02:2e:81:e6:47:32:
87:78:a9:cc:67:c6:8c:4a:52:ed:5c:4f:da:af:f5:
09:64:b7:39:c7:6c:f4:61:e1:97:00:d3:32:d6:b3:
4a:52:4b:57:3e:43:9e:f1:f3:e4:27:ab:3c:3a:cb:
1f:fc:55:e6:c7:0b:f8:12:21:2b:0a:d4:bd:d1:95:
d0:ac:48:54:4e:a8:30:8e:53:0a:af:86:0a:cb:ef:
cf:c3:80:1b:08:00:73:f4:3f:8a:94:16:f2:c2:9b:
e6:c3:4b:90:12:20:80:27:20:0c:62:c6:d2:10:fd:
bf:c0:a3:67:78:76:94:13:19:0a:a7:d6:91:ae:a6:
37:c1:ca:67:23:92:96:45:5f:10:30:6e:e3:81:d6:
2b:8a:9a:56:26:60:68:d9:e0:3a:cf:3d:14:ae:3f:
a7:f1:d5:0a:50:ca:aa:8e:3c:bd:63:0b:b8:32:fe:
ea:95:73:ce:53:5b:6f:83:8b:6a:f4:89:fa:ba:1b:
3f:29:0c:01:72:02:4c:3a:18:ae:b9:bb:c4:4b:eb:
2e:9f:12:dc:5f:d1:d8:69:4d:f8:a1:c5:ab:15:bf:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140957
sbgp-ipAddrBlock: critical
IPv4:
103.153.198.0/23
IPv6:
2001:df4:5880::/48
Signature Algorithm: sha256WithRSAEncryption
b9:b3:33:66:53:a0:f2:ed:66:29:8c:d1:81:42:1d:15:92:d3:
01:84:b7:ee:59:01:06:7b:87:d4:d7:08:4c:3a:9c:dd:59:dc:
75:ab:52:d3:ff:b3:d8:68:59:92:53:47:ec:64:7d:d7:68:7a:
e0:aa:35:d9:bd:ae:0d:d2:7e:2f:57:5b:6f:a8:a3:67:4e:5d:
78:f6:97:e6:07:5b:ad:a6:0b:3a:1d:d0:54:73:4c:94:96:57:
75:cf:f2:8a:41:39:e5:1d:eb:78:5f:ab:d5:f9:aa:9d:85:19:
0b:f0:28:20:0f:a4:10:e2:b5:38:1f:1b:e7:c6:c1:5e:7f:6f:
a3:2f:9e:52:6c:f4:d9:82:a2:aa:76:b7:00:25:8a:5b:95:7e:
b3:ff:f9:a7:07:69:97:70:f6:b8:55:85:7a:d6:ea:0e:00:05:
1f:8f:f4:63:1b:a6:a3:ea:d3:17:0d:7c:c0:b9:25:d4:89:8d:
ff:3f:c8:3a:b1:df:d3:f2:05:f1:d5:e8:29:6c:ea:60:1a:20:
28:14:08:67:ff:00:bf:0d:ab:23:fb:16:c1:89:a3:09:c9:5a:
66:c3:93:55:7d:c0:96:be:a5:74:13:ba:c4:d5:81:12:c6:ff:
78:ae:ef:93:70:ba:bd:ff:45:db:4e:fa:b2:50:d4:a6:ae:c3:
58:8d:55:d8
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAgpNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgzMDIyMDUxN1oXDTI1MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRC
RTc4NDI0MTE4RjhBMjA2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQgOWq34iQNoerSkcLaz9MKFDWEkC5ZLzkG0gCC3CtwoX/iV7HhwIugeZHMod4
qcxnxoxKUu1cT9qv9QlktznHbPRh4ZcA0zLWs0pSS1c+Q57x8+Qnqzw6yx/8VebH
C/gSISsK1L3RldCsSFROqDCOUwqvhgrL78/DgBsIAHP0P4qUFvLCm+bDS5ASIIAn
IAxixtIQ/b/Ao2d4dpQTGQqn1pGupjfBymcjkpZFXxAwbuOB1iuKmlYmYGjZ4DrP
PRSuP6fx1QpQyqqOPL1jC7gy/uqVc85TW2+Di2r0ifq6Gz8pDAFyAkw6GK65u8RL
6y6fEtxf0dhpTfihxasVv9eHAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU3rVjn1hH
xw3g/ES+eEJBGPiiBsYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNERkZCLzI3RTUwNkU2RDRFRjExRUE5QTYxNzI0QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDREZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFo
SHh3M2dfRVMtZUVKQkdQaWlCc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiadMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5nGMA8EAgAC
MAkDBwAgAQ30WIAwDQYJKoZIhvcNAQELBQADggEBALmzM2ZToPLtZimM0YFCHRWS
0wGEt+5ZAQZ7h9TXCEw6nN1Z3HWrUtP/s9hoWZJTR+xkfddoeuCqNdm9rg3Sfi9X
W2+oo2dOXXj2l+YHW62mCzod0FRzTJSWV3XP8opBOeUd63hfq9X5qp2FGQvwKCAP
pBDitTgfG+fGwV5/b6MvnlJs9NmCoqp2twAliluVfrP/+acHaZdw9rhVhXrW6g4A
BR+P9GMbpqPq0xcNfMC5JdSJjf8/yDqx39PyBfHV6Cls6mAaICgUCGf/AL8NqyP7
FsGJownJWmbDk1V9wJa+pXQTusTVgRLG/3iu75Nwur3/RdtO+rJQ1Kauw1iNVdg=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:35 2024 by rpki-client on console.sobornost.net