Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer
File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer (raw, json)
Hash identifier: XOXO5yL0DHQkqJY1n+N+fH26aaGCVGHIpj+GDm6RI1g=
Subject key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021116
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Oct 2024 19:25:15 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 45215
IP: 43.239.180.0/22
IP: 103.58.212.0/22
IP: 103.241.88.0/22
IP: 202.36.68.0/23
IP: 2403:40c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135446 (0x21116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 19:25:15 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:a5:1a:9a:25:1e:dd:3b:7b:32:3a:06:a9:
1f:14:67:3e:32:12:31:de:a3:22:32:a3:90:dd:4c:
b6:e9:85:da:d6:b3:17:2d:7b:54:a6:a9:6c:8b:2c:
ef:cb:c9:5c:41:a6:56:65:15:46:ad:4b:ea:43:55:
02:71:0b:90:5d:c5:7b:d2:54:a8:0e:ef:1d:65:be:
74:19:da:35:73:4c:36:ce:b9:ed:a5:47:c0:98:7d:
36:24:ed:f9:fa:30:ef:4c:8b:70:86:c5:46:bb:10:
4a:c2:41:b7:7d:4e:6c:59:51:36:de:c3:9f:cf:26:
8f:5e:fd:07:02:6d:09:58:b6:1f:3e:dd:16:e7:22:
8b:22:17:53:26:47:27:c4:2f:3a:67:08:0d:be:37:
b9:1c:94:41:dd:ca:fb:2d:d2:45:63:9b:d8:c9:1d:
14:f7:0d:15:02:56:56:4c:43:c6:54:15:33:ea:1d:
ad:67:aa:53:37:32:d6:fb:b5:2f:73:fa:68:7c:88:
69:15:b2:3e:4b:97:ef:db:20:12:f3:47:2e:8a:14:
3a:43:e8:af:88:36:22:32:8c:c5:53:d8:cc:01:3c:
32:49:a2:b8:28:4e:fd:17:9f:47:5b:01:f7:cf:53:
6b:fa:24:ba:f3:db:02:c5:5b:5b:7a:c3:de:39:cd:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45215
sbgp-ipAddrBlock: critical
IPv4:
43.239.180.0/22
103.58.212.0/22
103.241.88.0/22
202.36.68.0/23
IPv6:
2403:40c0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:43:51:b5:8f:2b:ee:e1:c7:92:ae:2b:24:18:22:10:76:8e:
fe:99:6f:88:e6:21:ec:b8:43:25:e8:6c:a7:8b:24:36:56:88:
50:65:1a:59:7c:4d:35:5a:56:98:df:c2:37:81:df:19:69:82:
34:a5:70:bc:6c:7f:f7:3b:bc:a6:3c:56:13:5a:c7:63:34:23:
b7:02:64:b1:52:51:1c:9a:7a:9a:e8:cc:a9:0f:ad:a0:8a:99:
8a:67:0f:ee:f5:21:2e:01:90:24:00:37:73:ba:3c:27:88:50:
35:43:e7:a2:dd:4d:65:d2:07:62:b7:81:ab:8a:43:4c:b5:41:
a5:7b:48:15:51:ac:25:70:89:96:2e:cc:4b:f1:7a:be:17:42:
7a:6e:ba:0f:ca:ad:78:be:69:fd:ae:0d:a9:a6:36:93:ed:48:
34:e7:bf:52:b7:fb:da:43:a2:48:ad:ec:fa:9b:28:bb:9f:c5:
e1:f2:0a:4a:f7:2a:f1:b5:a0:01:87:6a:ba:e2:35:c5:ef:90:
ad:0b:e7:e9:3e:e1:6c:53:ac:ff:7f:ca:96:68:15:30:19:2c:
7a:01:ad:de:05:ff:7d:e7:80:e3:ac:73:ef:61:2d:6c:12:66:
9b:59:0f:0e:28:9e:35:e6:b0:64:17:1d:42:3f:f4:41:cd:82:
10:f2:33:9e
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIDAhEWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAwMTE5MjUxNVoXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQx
NzkyNzlCRjVCOUJCQzFFNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFDKUamiUe3Tt7MjoGqR8UZz4yEjHeoyIyo5DdTLbphdrWsxcte1SmqWyLLO/L
yVxBplZlFUatS+pDVQJxC5BdxXvSVKgO7x1lvnQZ2jVzTDbOue2lR8CYfTYk7fn6
MO9Mi3CGxUa7EErCQbd9TmxZUTbew5/PJo9e/QcCbQlYth8+3RbnIosiF1MmRyfE
LzpnCA2+N7kclEHdyvst0kVjm9jJHRT3DRUCVlZMQ8ZUFTPqHa1nqlM3Mtb7tS9z
+mh8iGkVsj5Ll+/bIBLzRy6KFDpD6K+INiIyjMVT2MwBPDJJorgoTv0Xn0dbAffP
U2v6JLrz2wLFW1t6w945zbUjAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUNYjxu1y2
mbA0gR0Xknm/W5u8HlswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYzNzhGL0E1QTlDNEE4MTI3MTExRUI4OEQ0QkQ4MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5
Mm1iQTBnUjBYa25tX1c1dThIbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALCfMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCK++0AwQCZzrU
AwQCZ/FYAwQByiREMA0EAgACMAcDBQAkA0DAMA0GCSqGSIb3DQEBCwUAA4IBAQCK
Q1G1jyvu4ceSriskGCIQdo7+mW+I5iHsuEMl6GyniyQ2VohQZRpZfE01WlaY38I3
gd8ZaYI0pXC8bH/3O7ymPFYTWsdjNCO3AmSxUlEcmnqa6MypD62gipmKZw/u9SEu
AZAkADdzujwniFA1Q+ei3U1l0gdit4GrikNMtUGle0gVUawlcImWLsxL8Xq+F0J6
broPyq14vmn9rg2ppjaT7Ug0579St/vaQ6JIrez6myi7n8Xh8gpK9yrxtaABh2q6
4jXF75CtC+fpPuFsU6z/f8qWaBUwGSx6Aa3eBf9954DjrHPvYS1sEmabWQ8OKJ41
5rBkFx1CP/RBzYIQ8jOe
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:48 2024 by rpki-client on console.sobornost.net