Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer (raw, json)
Hash identifier: FYcYrA6Hz9LP1UCcjQ/dY4ZDgjROmn9Dw4bqI9Tt9Tw=
Subject key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0208DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 Aug 2024 04:39:10 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 9258
AS: 9650
AS: 45837
AS: 153308 -- 153309
IP: 45.64.68.0/22
IP: 103.233.236.0/22
IP: 203.5.10.0/24
IP: 203.9.184.0/22
IP: 203.15.124.0/22
IP: 203.18.108.0/23
IP: 203.21.12.0/24
IP: 203.62.216.0/22
IP: 2406:3c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133338 (0x208da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 26 04:39:10 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:d8:68:68:c8:41:4f:60:d0:d1:91:fa:52:
d1:e0:79:ac:88:07:d5:a7:d8:b7:bd:08:eb:3b:51:
a0:ca:51:c7:45:13:5d:bd:12:7c:07:ba:96:0d:c1:
1e:a4:88:fc:7f:0c:ab:89:4e:cd:0c:0e:49:de:5d:
c5:6d:2a:8f:c3:fc:29:1f:1a:8a:37:69:fd:f7:0d:
20:0e:71:e9:ab:fd:44:6d:64:3b:fc:93:64:f7:9f:
38:02:31:37:31:55:c0:0f:2a:d5:fa:71:4e:72:dd:
a8:90:79:51:cc:b3:ee:48:36:6a:91:da:f0:5d:ce:
d7:0f:b6:2a:9f:a8:dd:c6:fd:e6:96:bb:5a:7e:5c:
5a:ff:51:ae:57:00:e6:40:6f:30:96:e8:1d:ff:84:
75:0d:20:7c:d2:1b:d1:54:75:32:46:87:cf:a4:28:
cd:e8:69:76:da:08:f7:60:d9:b9:54:21:af:92:6c:
ac:b4:00:87:61:2e:da:51:4c:72:e8:84:70:e6:3c:
11:ed:3d:a6:ae:25:0e:f9:3b:39:e9:32:1d:9a:8e:
e3:f1:44:ac:55:1f:c9:ee:d6:73:ae:00:b9:a2:ab:
6e:a3:f5:a4:41:c6:c4:8e:ba:81:ae:ca:60:f1:bb:
37:4f:6e:d7:68:57:4b:42:e4:c6:d4:7b:e6:53:cc:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9258
9650
45837
153308-153309
sbgp-ipAddrBlock: critical
IPv4:
45.64.68.0/22
103.233.236.0/22
203.5.10.0/24
203.9.184.0/22
203.15.124.0/22
203.18.108.0/23
203.21.12.0/24
203.62.216.0/22
IPv6:
2406:3c00::/32
Signature Algorithm: sha256WithRSAEncryption
64:36:4d:45:70:5c:3d:9d:21:6d:6b:ea:a5:5b:1a:15:5b:64:
9c:f1:31:f1:5a:a4:9d:00:70:48:f5:dd:3f:3c:38:eb:c5:c1:
51:af:88:c7:e8:aa:ea:21:e5:4a:b5:29:e7:8c:81:7d:28:eb:
09:e9:f0:ad:ec:a3:d5:fa:83:76:3d:90:3d:7a:44:ba:74:b6:
80:f5:ca:b0:52:c4:53:05:c3:07:a0:bd:06:38:81:72:7f:d8:
fc:a7:6d:24:33:49:9c:ca:fa:13:b5:66:7d:49:ef:d4:b7:f3:
5e:ac:3c:f2:c3:f2:4f:af:49:11:f3:68:b0:5e:25:ae:be:fe:
1f:3c:a6:57:7f:d9:89:16:1a:5e:b7:fb:cc:5d:98:4a:78:70:
93:a2:c0:c6:2b:f2:60:00:ef:67:c3:5f:b0:4e:01:22:10:c7:
39:f9:71:08:46:e0:64:f3:e6:72:94:38:9b:91:40:f7:f1:ad:
b7:c2:f8:5c:22:1e:a3:9d:4a:75:27:2d:09:2e:2d:df:0c:6e:
cc:fa:69:7d:eb:5e:f4:cf:a2:73:11:a9:b4:24:8d:d4:7b:52:
49:b2:19:17:50:73:0c:95:4c:0d:35:55:2d:85:8a:1b:30:ea:
0b:4d:2a:76:2b:0d:c7:be:e7:75:eb:89:2e:6e:78:d1:b8:b8:
6c:cd:f3:92
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIDAgjaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgyNjA0MzkxMFoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2
MTU0NkZBM0ZEQ0E5ODQwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDetdhoaMhBT2DQ0ZH6UtHgeayIB9Wn2Le9COs7UaDKUcdFE129EnwHupYNwR6k
iPx/DKuJTs0MDkneXcVtKo/D/CkfGoo3af33DSAOcemr/URtZDv8k2T3nzgCMTcx
VcAPKtX6cU5y3aiQeVHMs+5INmqR2vBdztcPtiqfqN3G/eaWu1p+XFr/Ua5XAOZA
bzCW6B3/hHUNIHzSG9FUdTJGh8+kKM3oaXbaCPdg2blUIa+SbKy0AIdhLtpRTHLo
hHDmPBHtPaauJQ75OznpMh2ajuPxRKxVH8nu1nOuALmiq26j9aRBxsSOuoGuymDx
uzdPbtdoV0tC5MbUe+ZTzIc1AgMBAAGjggNcMIIDWDAdBgNVHQ4EFgQUqkNqr8aI
BFv1FIhhVG+j/cqYQI4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdFNEJBL0QwNkJGMzI4NTJEQzExRUE4MjYwMUIwRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhh
SUJGdjFGSWhoVkctal9jcVlRSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQgBAf8EHzAd
oBswGQICJCoCAiWyAgMAsw0wCgIDAlbcAgMCVt0wWAYIKwYBBQUHAQcBAf8ESTBH
MDYEAgABMDADBAItQEQDBAJn6ewDBADLBQoDBALLCbgDBALLD3wDBAHLEmwDBADL
FQwDBALLPtgwDQQCAAIwBwMFACQGPAAwDQYJKoZIhvcNAQELBQADggEBAGQ2TUVw
XD2dIW1r6qVbGhVbZJzxMfFapJ0AcEj13T88OOvFwVGviMfoquoh5Uq1KeeMgX0o
6wnp8K3so9X6g3Y9kD16RLp0toD1yrBSxFMFwwegvQY4gXJ/2PynbSQzSZzK+hO1
Zn1J79S3816sPPLD8k+vSRHzaLBeJa6+/h88pld/2YkWGl63+8xdmEp4cJOiwMYr
8mAA72fDX7BOASIQxzn5cQhG4GTz5nKUOJuRQPfxrbfC+FwiHqOdSnUnLQkuLd8M
bsz6aX3rXvTPonMRqbQkjdR7UkmyGRdQcwyVTA01VS2Fihsw6gtNKnYrDce+53Xr
iS5ueNG4uGzN85I=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:09 2024 by rpki-client on console.sobornost.net