Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
File: 4190GdVyqG920uv3gpq22dA0CQU.cer (raw, json)
Hash identifier: hDATOM1adDiBHePmYfNMh1eO/Eo8yFtoMOSsq2I+gmU=
Subject key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EFA7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 23:22:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 151342
IP: 103.219.146.0/24
IP: 2001:df2:2840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126887 (0x1efa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 23:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:f4:f8:99:a3:43:2e:4e:28:0f:0e:03:d1:
c9:a6:4e:ae:16:dd:62:d6:4c:9f:ef:5c:69:3e:38:
75:a1:65:ce:0d:76:65:88:d8:2c:3b:35:68:fa:95:
61:8e:ee:df:df:fd:6c:2c:99:eb:f7:de:bc:a5:76:
b3:7d:71:71:34:7e:e2:31:c4:83:ea:a8:79:b8:3e:
3d:d7:74:fc:35:c3:cb:38:b5:3e:74:f9:30:83:80:
2c:1c:31:39:c7:dc:e4:bb:6f:47:1d:91:f7:47:db:
e1:51:e0:b1:b3:1c:a2:53:c5:31:3a:18:ce:0d:7d:
79:c7:c3:fe:77:63:13:8a:68:79:75:e5:9e:b2:50:
64:a1:11:b2:91:b2:bc:d7:ee:5b:c4:94:6d:96:6f:
8e:02:67:8d:be:ad:ce:27:00:ad:66:0b:a5:05:e8:
b4:1c:20:dd:98:c8:f4:93:37:27:89:78:83:a1:49:
69:f5:c7:c7:c0:fe:92:ee:88:46:44:76:71:83:52:
d6:ce:1a:3c:a8:0d:1a:f3:56:39:4c:f0:38:44:ca:
ca:b9:b7:a5:ab:b6:09:43:f5:0b:2f:4d:06:f5:64:
24:30:2d:73:ba:0a:d1:b0:56:41:0d:69:7c:3c:91:
96:e8:f8:2b:87:e2:6c:f3:28:db:80:ef:c4:f4:f9:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151342
sbgp-ipAddrBlock: critical
IPv4:
103.219.146.0/24
IPv6:
2001:df2:2840::/48
Signature Algorithm: sha256WithRSAEncryption
47:66:4e:f2:31:04:e3:8b:01:96:91:bf:be:8c:4a:d1:38:23:
ce:49:72:c1:51:75:f6:26:07:85:e2:6b:b4:05:be:0c:66:06:
15:f8:53:bb:5f:9c:7e:b2:2a:80:c9:35:fb:5b:3e:b0:48:fa:
cb:a9:b4:bb:19:6e:f0:a3:f4:ea:3d:00:43:36:cf:d0:41:f5:
c4:27:65:32:f7:2b:0e:84:e8:bc:36:3d:ad:bc:35:a2:c5:e2:
fc:8d:dd:c7:86:8d:9d:a3:63:42:0d:28:fc:db:33:e9:a7:59:
a0:4b:97:03:54:11:f0:17:4f:a3:53:2c:a3:39:63:1b:85:a2:
bc:8e:f8:c7:53:d5:9d:32:c4:69:f1:5b:94:1e:70:9e:b9:86:
4c:97:7a:c8:76:fe:de:7e:f7:97:4e:23:aa:1c:93:38:f5:77:
95:59:ca:ed:38:c1:55:b7:13:95:50:b1:f5:19:fd:9b:3f:97:
3d:a7:9b:3f:2d:1d:4d:7f:3a:fc:e8:98:3d:d0:f6:fe:b1:83:
9c:fe:0c:71:ff:cb:ec:7a:0e:99:e1:ee:52:ad:e5:8d:0f:6b:
63:f0:8e:b1:fa:43:18:e8:66:d3:81:66:a2:40:38:2e:c0:78:
23:a4:33:28:3a:aa:70:c0:3b:bd:c1:4d:72:97:ab:d6:70:13:
d8:bb:36:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 15:20:49 2024 by rpki-client on console-fra.rpki-client.org