Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
File: pDc5u18gwUzF_EnjdVh9s7ciN68.cer (raw, json)
Hash identifier: vJr3e0e0YhlPsYCfFStDFCa9dAHMpLrXqDAxPqaJsyk=
Subject key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FA69
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Jun 2024 05:49:33 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 55523
IP: 27.96.24.0/21
IP: 2402:7200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129641 (0x1fa69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 21 05:49:33 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:9d:fe:98:7a:f7:29:1a:1c:6a:35:b7:65:
4f:cd:5d:3a:1c:a5:a4:31:5f:ec:c6:ff:45:ef:00:
85:07:55:55:da:a2:e9:47:c4:13:59:c8:91:2d:9a:
5c:ef:d2:db:2b:c5:1e:c7:d8:24:2d:f6:fd:dc:a3:
ef:9e:77:a3:c2:bb:f2:f4:b5:95:b5:4a:a5:7d:61:
8e:3b:46:78:01:f6:eb:7d:61:02:c6:ca:1a:dd:d5:
fc:05:bc:0d:ea:8d:88:99:48:a1:a2:c7:81:8d:73:
26:dd:3b:56:7e:f3:ea:a3:7c:f1:ad:cb:7d:55:14:
a9:d1:82:6b:5d:08:7a:35:bd:cf:42:d6:28:1d:cb:
7d:57:fa:63:d6:1e:a6:01:53:56:d8:52:45:57:ee:
67:12:ab:45:84:f6:3b:74:ed:99:f6:40:c9:6e:cd:
72:67:58:e3:99:6b:e9:39:bf:ee:23:2e:ee:a9:6a:
f5:d3:3c:8f:82:fa:cc:84:15:00:f2:ad:83:ed:be:
40:ea:1c:f9:7a:b0:6a:98:e3:bd:62:b0:09:23:3c:
f2:5a:08:08:cc:43:98:8d:ec:1a:a0:bf:9c:1b:20:
a0:82:40:7d:21:75:49:05:2f:a8:15:2d:fa:7a:dd:
0b:75:b3:64:17:c4:89:89:13:09:60:3b:93:16:4d:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55523
sbgp-ipAddrBlock: critical
IPv4:
27.96.24.0/21
IPv6:
2402:7200::/32
Signature Algorithm: sha256WithRSAEncryption
5d:06:22:c7:ba:27:0b:19:26:cf:d0:84:4a:cf:6d:03:dc:fa:
95:34:f5:2e:88:11:be:73:33:f4:e5:c0:48:62:fa:65:cd:f2:
ef:b4:e5:1d:27:8f:67:1e:0c:d4:fb:e4:9b:56:40:b7:a6:47:
bf:61:cc:84:24:d9:ab:b2:a5:9b:3d:38:ed:39:7f:c0:80:21:
10:9e:66:15:c4:36:70:b8:2b:4f:c4:d7:4d:07:20:9b:49:fb:
a0:53:5a:3a:20:57:95:a1:b8:ef:10:57:cc:d2:e0:e2:09:ba:
f3:3a:5e:16:14:7f:4d:b8:93:00:3a:da:e2:70:17:09:04:82:
74:b8:c9:00:b6:00:80:9b:07:a4:a7:4f:f2:2e:20:17:1a:d2:
da:b9:0b:cb:ee:e2:09:57:53:71:9c:cf:50:74:02:37:9a:02:
52:ec:8f:88:d3:95:02:a8:11:e7:0f:9d:40:66:8f:a7:e0:df:
fc:b4:88:2d:32:66:f2:0b:a9:f1:84:8a:34:0e:fe:19:d3:7b:
d6:31:e1:35:17:bb:fc:0f:31:e1:70:70:8d:80:e4:19:60:56:
d3:91:95:d5:4c:c7:0f:b6:e1:05:a3:c1:83:e2:ea:ea:1e:3b:
95:fa:c7:d1:54:8c:e0:e8:5a:6b:62:3b:70:fc:fa:05:13:2a:
be:b9:84:4c
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAfppMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYyMTA1NDkzM1oXDTI1MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlF
Mzc1NTg3REIzQjcyMjM3QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFF53+mHr3KRocajW3ZU/NXTocpaQxX+zG/0XvAIUHVVXaoulHxBNZyJEtmlzv
0tsrxR7H2CQt9v3co++ed6PCu/L0tZW1SqV9YY47RngB9ut9YQLGyhrd1fwFvA3q
jYiZSKGix4GNcybdO1Z+8+qjfPGty31VFKnRgmtdCHo1vc9C1igdy31X+mPWHqYB
U1bYUkVX7mcSq0WE9jt07Zn2QMluzXJnWOOZa+k5v+4jLu6pavXTPI+C+syEFQDy
rYPtvkDqHPl6sGqY471isAkjPPJaCAjMQ5iN7Bqgv5wbIKCCQH0hdUkFL6gVLfp6
3Qt1s2QXxImJEwlgO5MWTeW9AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUpDc5u18g
wUzF/EnjdVh9s7ciN68wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTcyQjdFLzczQkM3QUFDNDcxNzExRUVBNDQ2RTM0NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4
Z3dVekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANjjMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDG2AYMA0EAgAC
MAcDBQAkAnIAMA0GCSqGSIb3DQEBCwUAA4IBAQBdBiLHuicLGSbP0IRKz20D3PqV
NPUuiBG+czP05cBIYvplzfLvtOUdJ49nHgzU++SbVkC3pke/YcyEJNmrsqWbPTjt
OX/AgCEQnmYVxDZwuCtPxNdNByCbSfugU1o6IFeVobjvEFfM0uDiCbrzOl4WFH9N
uJMAOtricBcJBIJ0uMkAtgCAmwekp0/yLiAXGtLauQvL7uIJV1NxnM9QdAI3mgJS
7I+I05UCqBHnD51AZo+n4N/8tIgtMmbyC6nxhIo0Dv4Z03vWMeE1F7v8DzHhcHCN
gOQZYFbTkZXVTMcPtuEFo8GD4urqHjuV+sfRVIzg6FprYjtw/PoFEyq+uYRM
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:08 2024 by rpki-client on console.sobornost.net