Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
File: hHdPRraSCgXa3UJHe6qzbucka5Q.cer (raw, json)
Hash identifier: Z9jWXXvEb5uOLeU/i8CgBAXUtbcf1JJIoo1vcHCD7c0=
Subject key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021219
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Oct 2024 01:47:22 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 24341
IP: 180.178.120.0/22
IP: 2401:8180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135705 (0x21219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 4 01:47:22 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:fd:5a:16:97:fe:d7:43:e2:20:ec:24:45:
e7:de:68:11:84:23:6d:73:04:7e:1c:f5:62:07:cb:
a6:f7:49:88:d0:d1:7f:83:9b:01:1e:cb:e7:bb:ad:
85:e7:22:a2:24:bf:8d:17:56:c1:be:5b:88:33:ad:
7e:29:73:ee:87:21:17:7c:d9:b4:a7:4f:d9:ee:69:
e6:a3:35:9e:1a:cc:9f:b5:e5:99:8c:b5:27:94:a8:
e5:c9:22:bc:3a:db:46:19:6f:1f:b9:c3:90:04:59:
23:24:79:5c:c8:da:3e:e3:b3:8b:b7:df:fd:22:cb:
ac:c9:1b:91:e9:e9:5c:a3:7c:62:06:34:7f:a3:5f:
f1:9e:07:c1:4b:73:de:ee:af:98:9d:f2:40:fa:5f:
e4:06:1c:eb:91:8a:4b:6c:d0:04:06:48:f3:8f:ed:
09:e7:24:46:d0:08:ac:45:53:ec:58:34:99:6e:3d:
3f:8d:7f:85:85:ef:4f:2d:ed:7e:f3:0e:ed:a6:b9:
06:c4:c4:8f:b5:d5:ad:d9:23:fa:9f:45:2e:00:4e:
ea:f2:6f:0e:90:47:c8:f7:bd:7a:66:26:c3:0a:78:
fc:00:9b:61:93:39:a5:c1:b8:f2:92:2e:82:b2:a9:
06:ab:42:42:5c:af:4d:8a:cc:98:ca:da:ef:26:56:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24341
sbgp-ipAddrBlock: critical
IPv4:
180.178.120.0/22
IPv6:
2401:8180::/32
Signature Algorithm: sha256WithRSAEncryption
1e:e6:0b:be:1a:8a:42:00:6f:78:5b:0a:35:49:b6:75:7b:80:
92:4b:dc:23:47:d8:bd:2d:6b:d3:2b:fe:46:b3:d8:a2:c9:d2:
ce:2b:31:e8:73:0c:52:c4:89:ca:b1:16:da:6b:9b:ee:7a:39:
42:ed:5f:3f:9d:4a:3a:73:a5:d6:5e:9b:0c:78:00:76:a9:33:
21:9c:8c:8b:06:c9:08:34:c1:ef:4d:c0:58:2c:22:4a:ec:48:
ca:c1:17:6f:97:2b:12:ae:af:43:00:8e:d2:ae:7e:70:b2:8d:
9b:df:e2:e1:c0:77:36:1e:a4:a9:d4:20:da:3e:63:79:fe:55:
73:f1:18:d7:1b:05:89:b0:aa:cc:a7:fe:3a:25:65:eb:9d:11:
77:93:94:5b:fe:4a:77:74:25:69:67:c2:68:b3:c6:54:fd:fc:
96:3b:c3:a5:ca:2c:b2:08:a0:65:8a:d0:ad:00:5d:7b:c8:76:
ba:77:18:93:48:c4:33:d2:e7:1d:e7:59:ad:fa:bc:72:14:8a:
d4:96:64:60:e1:61:15:6b:05:3d:fc:62:b7:c4:55:3b:6d:23:
ae:38:5c:d2:be:37:89:f3:3f:dd:45:33:71:4d:7f:dc:76:a3:
73:b8:4f:a6:5c:90:f0:33:db:1f:17:00:21:6f:27:9b:95:c9:
c7:9d:04:da
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIDAhIZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAwNDAxNDcyMloXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0
NzdCQUFCMzZFRTcyNDZCOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx3P1aFpf+10PiIOwkRefeaBGEI21zBH4c9WIHy6b3SYjQ0X+DmwEey+e7rYXn
IqIkv40XVsG+W4gzrX4pc+6HIRd82bSnT9nuaeajNZ4azJ+15ZmMtSeUqOXJIrw6
20YZbx+5w5AEWSMkeVzI2j7js4u33/0iy6zJG5Hp6VyjfGIGNH+jX/GeB8FLc97u
r5id8kD6X+QGHOuRikts0AQGSPOP7QnnJEbQCKxFU+xYNJluPT+Nf4WF708t7X7z
Du2muQbExI+11a3ZI/qfRS4ATurybw6QR8j3vXpmJsMKePwAm2GTOaXBuPKSLoKy
qQarQkJcr02KzJjK2u8mVmkxAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUhHdPRraS
CgXa3UJHe6qzbucka5QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ5MTYyLzI2QTgyRTBBRERDMTExRTk5ODRERTgxMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEOTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJh
U0NnWGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICXxUwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK0sngwDQQCAAIw
BwMFACQBgYAwDQYJKoZIhvcNAQELBQADggEBAB7mC74aikIAb3hbCjVJtnV7gJJL
3CNH2L0ta9Mr/kaz2KLJ0s4rMehzDFLEicqxFtprm+56OULtXz+dSjpzpdZemwx4
AHapMyGcjIsGyQg0we9NwFgsIkrsSMrBF2+XKxKur0MAjtKufnCyjZvf4uHAdzYe
pKnUINo+Y3n+VXPxGNcbBYmwqsyn/jolZeudEXeTlFv+Snd0JWlnwmizxlT9/JY7
w6XKLLIIoGWK0K0AXXvIdrp3GJNIxDPS5x3nWa36vHIUitSWZGDhYRVrBT38YrfE
VTttI644XNK+N4nzP91FM3FNf9x2o3O4T6ZckPAz2x8XACFvJ5uVycedBNo=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:03 2024 by rpki-client on console.sobornost.net