Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
File: scWMB4UVntc2lq-zEtI1z0DzxEE.cer (raw, json)
Hash identifier: tubjGkCJPo8XtUBorcs4ZPUFVXiKoCtA6ZHvtayT0B4=
Subject key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F9F7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Jun 2024 07:33:21 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 9792
IP: 203.1.240.0/21
IP: 2406:11c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129527 (0x1f9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 19 07:33:21 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:c5:1a:7c:7f:27:55:23:7c:ce:3c:13:3b:
1b:0e:60:d7:f2:48:54:96:fe:5d:4a:86:e8:55:65:
54:8c:09:99:da:42:2f:87:5f:9c:12:cc:91:75:18:
83:6c:ed:5e:67:45:8c:b5:18:10:fa:61:69:47:e8:
14:03:52:5c:33:8a:a1:c9:ad:6d:1c:58:62:dd:a5:
ab:e6:21:91:db:d2:fe:e1:57:02:e3:bb:ef:64:a3:
d3:85:a7:2e:97:ab:b7:67:ec:aa:06:eb:54:ba:9e:
3a:3f:92:99:bc:75:bd:b4:45:79:10:86:1b:09:bf:
83:1f:a3:1d:a3:33:2e:5e:d8:8f:03:c6:e2:55:1c:
b8:30:5d:c0:57:77:90:22:10:60:d7:7e:20:15:9c:
49:11:16:9e:c5:0e:22:62:93:52:62:93:54:3a:dd:
d4:3f:9a:c5:58:1f:ad:e7:d4:08:01:3b:32:f4:27:
a1:a7:cc:15:fc:5c:02:04:64:d6:f2:ac:ef:91:09:
ef:12:d8:6a:34:a4:5e:18:7c:5d:6f:f1:df:ae:6e:
6c:bc:d7:d7:f0:c8:60:93:49:d6:27:a3:b8:d3:c7:
47:a2:b7:59:a1:51:97:e9:fb:78:1f:77:30:47:09:
de:a2:3e:f3:85:d4:93:cc:82:a5:de:34:a1:4d:2d:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9792
sbgp-ipAddrBlock: critical
IPv4:
203.1.240.0/21
IPv6:
2406:11c0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:4e:e5:f3:31:4b:78:3b:08:7b:01:d1:b5:a1:d0:e0:25:33:
f1:f9:ef:55:7e:cd:fb:db:23:ac:57:55:e6:68:67:c2:d1:7e:
b2:b0:8a:07:5e:36:00:7d:a0:74:32:c1:42:91:22:01:59:47:
6b:e3:f2:0b:97:94:26:a8:4d:65:a5:7b:54:6e:9d:40:d1:74:
87:cd:19:c2:24:54:88:87:54:11:ab:53:ea:c6:63:19:21:2e:
c3:3d:ee:88:2c:d0:13:e2:29:1b:cc:fe:22:0c:ed:00:87:d8:
ba:00:71:3b:9a:f2:fe:bc:57:d1:6d:ec:5c:18:ee:36:33:70:
6d:0b:78:0f:ae:0c:6d:67:ed:78:be:ce:1f:9a:46:c7:91:dd:
e6:55:4a:e0:a7:a1:c4:81:0a:b9:27:3e:32:db:75:7b:21:7c:
ee:4f:d7:ac:21:9f:99:ba:f2:ae:7b:31:84:11:26:96:96:93:
ae:e1:0a:84:a3:b1:07:c1:7c:ec:b7:02:65:dc:db:4b:ab:f4:
bb:97:52:78:4e:36:b2:27:ef:a5:e4:b5:2e:e7:3a:06:c9:15:
95:95:7d:42:e5:4d:c7:3f:3c:94:74:df:a5:8f:80:3d:6b:bb:
53:35:b3:70:fd:3b:ce:dd:24:e5:55:11:da:b6:6a:f1:d6:d1:
89:78:69:43
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIDAfn3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYxOTA3MzMyMVoXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDZEQkQxMTAvBgNVBAUTKEIxQzU4QzA3ODUxNTlFRDczNjk2QUZC
MzEyRDIzNUNGNDBGM0M0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7OsUafH8nVSN8zjwTOxsOYNfySFSW/l1KhuhVZVSMCZnaQi+HX5wSzJF1GINs
7V5nRYy1GBD6YWlH6BQDUlwziqHJrW0cWGLdpavmIZHb0v7hVwLju+9ko9OFpy6X
q7dn7KoG61S6njo/kpm8db20RXkQhhsJv4Mfox2jMy5e2I8DxuJVHLgwXcBXd5Ai
EGDXfiAVnEkRFp7FDiJik1Jik1Q63dQ/msVYH63n1AgBOzL0J6GnzBX8XAIEZNby
rO+RCe8S2Go0pF4YfF1v8d+ubmy819fwyGCTSdYno7jTx0eit1mhUZfp+3gfdzBH
Cd6iPvOF1JPMgqXeNKFNLWZLAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUscWMB4UV
ntc2lq+zEtI1z0DzxEEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ2REJELzAyQUE0OTUwNzkwQTExRUU5OUVERDExRkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENkRCRC8wMkFBNDk1MDc5MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRV
Vm50YzJscS16RXRJMXowRHp4RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICJkAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAPLAfAwDQQCAAIw
BwMFACQGEcAwDQYJKoZIhvcNAQELBQADggEBAFxO5fMxS3g7CHsB0bWh0OAlM/H5
71V+zfvbI6xXVeZoZ8LRfrKwigdeNgB9oHQywUKRIgFZR2vj8guXlCaoTWWle1Ru
nUDRdIfNGcIkVIiHVBGrU+rGYxkhLsM97ogs0BPiKRvM/iIM7QCH2LoAcTua8v68
V9Ft7FwY7jYzcG0LeA+uDG1n7Xi+zh+aRseR3eZVSuCnocSBCrknPjLbdXshfO5P
16whn5m68q57MYQRJpaWk67hCoSjsQfBfOy3AmXc20ur9LuXUnhONrIn76XktS7n
OgbJFZWVfULlTcc/PJR036WPgD1ru1M1s3D9O87dJOVVEdq2avHW0Yl4aUM=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:11 2024 by rpki-client on console.sobornost.net