Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
File: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer (raw, json)
Hash identifier: ZImJ6+lka4/NMPrOM24BPofBwFsHM7yND4c8wHpKHTc=
Subject key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A2C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 May 2023 12:46:58 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 138961
IP: 103.137.178.0/23
IP: 2400:b860::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107201 (0x1a2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 11 12:46:58 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9119635/serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:2d:b4:71:d4:81:82:65:ee:97:81:0a:85:
11:94:ae:e1:52:12:22:14:02:8c:43:7e:38:f6:49:
fa:f6:08:56:86:bf:d2:ea:75:c1:2c:c0:53:7f:22:
9b:44:0e:a8:b8:40:44:a7:c1:e8:2b:04:f9:0e:86:
67:73:02:95:9a:85:2b:39:01:4e:e7:d6:b4:04:80:
54:f4:0d:42:1d:d0:1e:e6:10:f9:a9:8c:bd:7e:75:
30:40:74:86:70:3c:27:05:b1:d2:86:0e:74:cf:04:
c0:2f:04:cf:98:5c:b7:aa:40:35:ab:8a:d2:68:a4:
95:a2:89:63:f1:e8:9c:16:25:e6:b4:e6:50:9f:be:
54:e8:64:08:fc:b3:5f:3a:18:a1:a2:94:d6:23:97:
83:70:02:60:c4:3a:80:b1:e2:11:0b:86:01:36:b4:
2c:e9:14:f0:11:c8:47:9e:14:48:19:7e:96:83:de:
c8:b3:8b:fe:8f:40:7f:7f:bd:be:90:ea:bd:72:43:
ad:37:b7:87:00:e7:72:72:de:eb:d3:27:fd:eb:1a:
46:78:5c:ca:f0:9b:5e:06:99:31:dc:a8:bc:eb:68:
f5:bc:56:34:1b:bd:fe:ed:fb:b4:f8:95:40:47:1c:
f5:34:99:7c:be:d0:48:65:5f:28:dd:dd:bc:12:1d:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138961
sbgp-ipAddrBlock: critical
IPv4:
103.137.178.0/23
IPv6:
2400:b860::/32
Signature Algorithm: sha256WithRSAEncryption
15:1a:bb:9e:84:75:58:e7:71:77:80:c9:cb:af:16:60:b3:ca:
d2:db:bc:a2:d2:e7:09:74:de:05:27:47:ab:ac:82:21:34:81:
fc:a1:14:4c:39:5a:1b:98:c9:72:60:6d:bc:11:17:32:6a:e8:
d1:22:6c:f8:4b:e0:a6:aa:f7:48:8e:94:7d:9c:d3:7f:2b:ac:
15:b1:60:a5:d4:64:e7:6c:5e:08:a8:ed:4b:bf:5c:32:b5:93:
93:e7:da:90:74:7e:cd:c1:15:22:70:de:cb:bc:de:8c:4a:ca:
28:a9:15:c2:46:d1:c2:c9:f5:14:7d:23:91:3d:f1:62:3f:01:
9f:20:bf:00:af:db:ac:44:dd:95:ed:26:8b:61:fa:d8:0a:5c:
79:6a:93:c3:c6:69:9a:7a:9a:82:2b:39:da:ec:78:91:b9:3e:
37:ba:04:f3:f1:05:1a:14:67:52:17:77:c6:06:1c:ea:be:c6:
88:4a:d1:27:cd:85:32:ce:0a:18:f4:69:ee:e9:bd:29:fd:58:
0d:bd:ea:71:ca:de:ea:a7:4d:df:fd:e0:dc:2e:f4:49:a7:1f:
ed:83:4f:a4:db:8c:2b:2f:5a:3d:db:aa:0b:8b:ea:20:13:ca:
6b:04:75:33:80:fa:9f:b3:3a:9d:f4:34:30:b8:26:73:f5:79:
3b:a0:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:15 2024 by rpki-client on console-ams.rpki-client.org