Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
File: -r3gfSxVjb3PPDIAdre1X9-gR0A.cer (raw, json)
Hash identifier: Nq8YlqVujoiJDvtMV3XvW5Qv6UylMvqEJFjdOsdOjus=
Subject key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021EEF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Nov 2024 17:50:11 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 139790
IP: 103.145.64.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138991 (0x21eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 30 17:50:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A918143E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:c0:5c:01:80:22:7f:aa:6d:06:ae:6e:f1:
03:dd:3c:0e:59:fb:f5:cf:5c:00:ee:76:71:a5:6a:
b4:5f:08:f8:c9:cc:2c:74:51:24:bb:76:88:58:c9:
f5:21:bd:9d:38:b2:80:09:f5:5c:27:eb:42:b7:1f:
d1:f3:1d:61:d2:90:fe:64:fb:30:ce:1a:bd:38:a4:
16:65:18:39:6c:d9:25:db:61:0f:1b:11:65:fc:73:
08:12:ef:21:1d:4d:d3:c4:5d:b8:ca:8b:77:e0:67:
c4:40:df:ef:06:1f:e3:58:45:96:8b:a8:28:86:7c:
53:03:4f:b5:6c:9d:ff:b6:37:98:9b:0b:67:e4:fd:
62:4d:2c:8e:4d:f9:68:c9:0c:d9:e1:85:94:93:15:
91:74:99:e9:9b:f1:45:5a:c1:ff:51:53:aa:1d:2d:
ac:3d:80:7c:22:d7:54:48:5b:6f:fc:87:c8:69:9c:
5c:88:54:dd:65:9e:75:af:65:7c:7d:a4:66:aa:0f:
a1:3e:26:c2:86:08:1f:2e:69:ec:c1:c1:61:ab:e3:
21:b8:3f:6c:4a:f5:bc:44:b3:c6:6c:7a:6e:78:66:
a5:89:c8:2e:5a:2f:e4:87:2e:36:43:64:de:57:55:
59:ca:e0:07:a9:e3:52:83:b7:a7:d2:a0:77:c5:d3:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139790
sbgp-ipAddrBlock: critical
IPv4:
103.145.64.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:0c:ed:8f:97:ac:b0:7b:3a:10:41:f2:01:8c:3b:2a:f0:22:
14:f9:3a:20:57:af:8d:fa:dd:cd:5a:37:24:cf:f7:28:06:0b:
e2:a5:7f:6c:e1:a5:bb:ba:1e:ed:8f:07:13:60:0b:f2:5b:aa:
e1:94:19:36:2c:ce:a1:7d:9d:ba:36:aa:fb:6e:a8:6e:9b:3f:
0a:3b:cc:46:c9:ab:ab:89:a0:f7:0a:a3:ba:a5:66:5f:5e:77:
ec:ef:56:4d:70:bc:e1:e2:52:70:e4:4d:62:2b:61:29:c9:10:
b2:5e:80:03:2a:14:9d:35:b0:e0:95:ad:b1:c7:95:38:ab:02:
62:d3:f3:54:36:f7:2a:2a:5c:44:2d:68:9c:a4:5d:d0:30:fa:
7a:3a:30:02:ab:d9:fe:56:3c:f0:d7:e1:b6:f3:eb:95:95:ef:
ce:f3:f6:94:d2:41:2f:09:55:51:1d:41:f9:c4:3f:b4:71:9b:
dc:d0:91:81:6f:00:38:4d:de:6b:d3:20:75:d7:57:d4:1d:73:
42:00:64:51:28:86:ba:b8:df:ac:7c:99:f8:a4:38:45:5b:b5:
c1:64:78:84:4a:12:cf:e8:b0:ad:12:33:dd:a3:e6:b4:79:05:
91:24:7d:be:fd:c0:22:6c:36:83:68:99:ae:f8:8d:9b:02:5c:
d1:d7:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:25 2025 by rpki-client