Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
File: HJuixf6owDTaVR_a3GKlOnoC5ds.cer (raw, json)
Hash identifier: ijOTuJ121Q/uVm0c7tPOMi+0PeVVSoAWbwCMlDNTXfo=
Subject key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021386
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Oct 2024 17:49:56 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 103.100.60.0/22
IP: 2401:b940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136070 (0x21386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 10 17:49:56 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:0b:20:c8:f6:fd:3d:13:0d:96:bb:b5:0c:
d0:03:e5:74:da:c5:db:83:e6:be:d8:78:93:94:7b:
dc:86:fd:de:2a:13:23:8d:79:b7:2c:94:c0:2b:4b:
2c:6f:e0:33:9e:e3:26:b7:e6:fb:f3:a7:60:b8:07:
4c:3d:ed:8c:ef:76:df:33:d0:4c:c5:22:1c:2a:0d:
37:e4:66:86:33:04:fa:fd:ec:73:58:31:f2:4b:f4:
4e:8f:76:09:09:69:de:c4:cf:33:c6:3c:f7:a0:3a:
48:d4:fc:1b:c1:8f:b9:88:22:aa:d5:60:23:c0:e9:
9b:1a:af:d6:3d:86:d4:0b:ee:d5:6c:5f:3b:18:ac:
e2:41:b7:da:5e:6d:c4:d4:a7:d4:e7:0d:57:b4:ba:
ab:90:58:ff:93:8d:e0:c1:9a:28:32:40:26:b3:35:
2d:68:15:cd:b6:e7:1f:ed:03:a8:ee:ec:b2:8c:65:
6a:d2:07:1f:1d:ca:20:af:1f:76:ee:ac:ef:e3:ba:
df:b3:1c:7d:9b:db:a0:5f:e1:9d:39:a4:51:05:b6:
24:f0:87:eb:44:bc:11:aa:24:d7:c8:b3:a4:f3:b8:
73:9d:65:13:19:ff:81:aa:09:60:fe:37:2e:7c:7a:
3d:69:6e:3e:93:db:fb:7f:85:a4:7e:2f:a8:b4:b2:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.60.0/22
IPv6:
2401:b940::/32
Signature Algorithm: sha256WithRSAEncryption
a9:67:cd:12:d8:27:63:de:57:c3:1b:f5:84:e3:71:af:0a:b6:
ad:11:15:72:4b:bb:e4:2c:a6:3f:df:c9:27:62:6c:bf:74:54:
1c:f9:fd:ba:15:26:a0:4b:e9:5c:29:1a:f8:8c:7f:53:64:35:
92:18:9e:57:4a:ff:f2:5a:aa:e4:c7:f1:e4:17:11:2d:9d:f1:
28:2b:ba:77:8e:cc:31:75:41:59:da:91:15:6a:e9:d4:7d:af:
ba:31:6d:8a:f2:6b:97:98:13:de:32:17:02:ca:1d:2a:67:7b:
e2:65:65:77:48:18:07:e5:7e:00:3f:6b:96:71:04:b6:18:a6:
ab:74:44:f1:03:67:ca:f6:35:ab:7c:82:b5:d3:7e:52:c1:07:
8b:f5:9f:2d:37:5c:84:00:bd:c8:13:af:da:62:1e:fd:33:2d:
89:15:73:5d:3d:b9:03:04:3f:a1:60:bb:b7:12:3f:d5:c3:6c:
82:4d:e3:1f:4d:55:9c:2f:f1:1f:7a:04:06:f9:33:b3:d9:98:
65:4a:33:7d:51:c2:58:30:3b:e1:51:53:22:a1:4b:53:e4:f0:
c2:c6:2b:36:bb:ce:be:c0:2f:ba:b4:24:e1:32:ac:29:62:30:
2c:96:ca:cb:10:cf:2c:b3:b0:66:e5:9b:20:c4:8a:e2:77:c5:
20:b1:1a:9b
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAhOGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAxMDE3NDk1NloXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTNEODYxMTAvBgNVBAUTKDFDOUJBMkM1RkVBOEMwMzREQTU1MUZE
QURDNjJBNTNBN0EwMkU1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1bgsgyPb9PRMNlru1DNAD5XTaxduD5r7YeJOUe9yG/d4qEyONebcslMArSyxv
4DOe4ya35vvzp2C4B0w97Yzvdt8z0EzFIhwqDTfkZoYzBPr97HNYMfJL9E6PdgkJ
ad7EzzPGPPegOkjU/BvBj7mIIqrVYCPA6Zsar9Y9htQL7tVsXzsYrOJBt9pebcTU
p9TnDVe0uquQWP+TjeDBmigyQCazNS1oFc225x/tA6ju7LKMZWrSBx8dyiCvH3bu
rO/jut+zHH2b26Bf4Z05pFEFtiTwh+tEvBGqJNfIs6TzuHOdZRMZ/4GqCWD+Ny58
ej1pbj6T2/t/haR+L6i0skrLAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUHJuixf6o
wDTaVR/a3GKlOnoC5dswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzRDg2L0M2N0QxNzZFOUE1RjExRUE5RjYyNkI1RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5M0Q4Ni9DNjdEMTc2RTlBNUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2
b3dEVGFWUl9hM0dLbE9ub0M1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAJnZDwwDQQCAAIwBwMFACQBuUAwDQYJKoZIhvcNAQELBQADggEB
AKlnzRLYJ2PeV8Mb9YTjca8Ktq0RFXJLu+Qspj/fySdibL90VBz5/boVJqBL6Vwp
GviMf1NkNZIYnldK//JaquTH8eQXES2d8SgruneOzDF1QVnakRVq6dR9r7oxbYry
a5eYE94yFwLKHSpne+JlZXdIGAflfgA/a5ZxBLYYpqt0RPEDZ8r2Nat8grXTflLB
B4v1ny03XIQAvcgTr9piHv0zLYkVc109uQMEP6Fgu7cSP9XDbIJN4x9NVZwv8R96
BAb5M7PZmGVKM31RwlgwO+FRUyKhS1Pk8MLGKza7zr7AL7q0JOEyrCliMCyWyssQ
zyyzsGblmyDEiuJ3xSCxGps=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:44 2024 by rpki-client on console.sobornost.net