Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
File: PLw5Tr9aIgmw6yx0fD_wBratGds.cer (raw, json)
Hash identifier: tBR8Gr2UY5jz97+a9+xDm21DhhIEfAM5HhvztMDAnQc=
Subject key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020FD1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Sep 2024 19:54:42 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 151621
IP: 103.239.42.0/23
IP: 2001:df2:b4c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135121 (0x20fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 26 19:54:42 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:79:39:5c:0c:35:12:90:27:ae:a1:e9:79:
1d:c4:49:92:6a:fc:ed:37:00:2a:66:93:2e:3f:77:
d7:6a:fd:59:61:88:35:f6:53:56:06:63:95:68:01:
85:a4:45:ef:80:70:8b:1b:26:88:5d:e8:e5:5d:55:
2d:67:6d:0a:bc:8c:c9:3f:92:21:8e:f5:c8:3c:fa:
1a:75:49:57:db:37:60:2d:c8:5a:df:0d:37:63:46:
a1:60:4a:de:2c:7e:62:ba:f9:06:60:9b:32:5a:73:
b9:d9:78:05:c5:7d:8b:e0:fb:fb:95:93:b6:95:1f:
3e:ec:02:02:a9:0e:af:6f:5d:e4:d3:8c:e2:6f:9c:
b5:c0:8e:14:63:fe:f8:6d:80:bb:a4:3c:08:06:68:
f2:9d:b2:fa:a2:11:30:d8:06:d9:65:72:ee:fa:c4:
cc:da:28:f7:3f:b5:54:56:d0:93:19:eb:f4:60:ff:
3c:70:1f:16:bb:b9:89:c0:ff:57:4a:cd:9b:ec:35:
3e:ee:91:0d:c9:6e:d0:1f:07:7a:5d:13:9b:92:be:
60:83:9d:62:b6:f1:b0:09:30:f9:4b:2c:84:d7:95:
84:5d:64:42:f1:c7:5d:95:ab:36:69:07:58:82:b6:
78:62:fc:ea:5d:83:ea:49:0a:20:46:7f:a9:65:06:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151621
sbgp-ipAddrBlock: critical
IPv4:
103.239.42.0/23
IPv6:
2001:df2:b4c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:1e:a4:5f:a5:45:2f:65:ed:0b:43:dd:1f:d0:19:07:57:26:
a8:77:fa:e3:7e:41:8b:59:4d:2e:d7:a7:15:34:28:6d:eb:8a:
41:cb:83:58:37:fb:86:9d:54:87:42:d5:85:91:f0:be:2b:be:
41:5b:3a:12:25:b8:3f:e2:37:74:35:4d:31:e8:a5:27:9b:2a:
32:dc:4f:cd:c3:62:b2:8b:71:3d:34:7d:12:da:34:f2:d4:b7:
80:38:38:bb:91:a1:c2:6f:a5:fe:61:1e:22:66:1b:f7:c2:2d:
5d:eb:f7:c4:9c:50:59:01:7d:01:34:87:83:95:30:3f:cd:b5:
48:12:d3:fa:a6:16:6c:6a:2a:10:2d:68:57:11:b1:5d:30:4f:
cc:ff:39:b2:ef:fb:3e:f1:0f:ce:8f:1a:8f:a8:5a:d5:f7:77:
2d:7e:e5:4c:7c:fc:02:89:06:2a:a3:b4:5c:dd:90:9f:b0:5b:
56:79:f1:3d:95:93:c0:b4:8f:ce:b1:a6:e7:89:f4:d8:da:b6:
93:8a:18:97:fc:87:dc:52:dc:ba:cc:5f:21:b8:ed:a1:f8:80:
fa:7e:bd:f4:81:2e:eb:14:0f:fa:59:07:37:e2:32:d7:fa:31:
7a:f8:8b:89:46:ce:08:de:9c:ed:cc:80:bf:8d:ff:3c:2e:92:
2a:04:a9:bd
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAg/RMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDkyNjE5NTQ0MloXDTI1MTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjhFMUYxMTAvBgNVBAUTKDNDQkMzOTRFQkY1QTIyMDlCMEVCMkM3
NDdDM0ZGMDA2QjZBRDE5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO23k5XAw1EpAnrqHpeR3ESZJq/O03ACpmky4/d9dq/VlhiDX2U1YGY5VoAYWk
Re+AcIsbJohd6OVdVS1nbQq8jMk/kiGO9cg8+hp1SVfbN2AtyFrfDTdjRqFgSt4s
fmK6+QZgmzJac7nZeAXFfYvg+/uVk7aVHz7sAgKpDq9vXeTTjOJvnLXAjhRj/vht
gLukPAgGaPKdsvqiETDYBtllcu76xMzaKPc/tVRW0JMZ6/Rg/zxwHxa7uYnA/1dK
zZvsNT7ukQ3JbtAfB3pdE5uSvmCDnWK28bAJMPlLLITXlYRdZELxx12VqzZpB1iC
tnhi/Opdg+pJCiBGf6llBjsZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPLw5Tr9a
Igmw6yx0fD/wBratGdswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI4RTFGLzE2OTJENDg4MjU2MjExRUU4MTIyMkUzMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOEUxRi8xNjkyRDQ4ODI1NjIxMUVFODEyMjJFMzFDNEY5QUUwMi9QTHc1VHI5
YUlnbXc2eXgwZkRfd0JyYXRHZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlBFMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ+8qMA8EAgAC
MAkDBwAgAQ3ytMAwDQYJKoZIhvcNAQELBQADggEBAIcepF+lRS9l7QtD3R/QGQdX
Jqh3+uN+QYtZTS7XpxU0KG3rikHLg1g3+4adVIdC1YWR8L4rvkFbOhIluD/iN3Q1
TTHopSebKjLcT83DYrKLcT00fRLaNPLUt4A4OLuRocJvpf5hHiJmG/fCLV3r98Sc
UFkBfQE0h4OVMD/NtUgS0/qmFmxqKhAtaFcRsV0wT8z/ObLv+z7xD86PGo+oWtX3
dy1+5Ux8/AKJBiqjtFzdkJ+wW1Z58T2Vk8C0j86xpueJ9NjatpOKGJf8h9xS3LrM
XyG47aH4gPp+vfSBLusUD/pZBzfiMtf6MXr4i4lGzgjenO3MgL+N/zwukioEqb0=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:49 2024 by rpki-client on console.sobornost.net