Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.cer (raw, json)
Hash identifier: wqIYhQa6ubrrcEjhZQPjtQ9JYGOv3fXff7hLKlKM6dw=
Subject key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C76C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Oct 2023 17:53:41 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 138403
IP: 103.124.180.0/22
IP: 2403:e3c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116588 (0x1c76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 17:53:41 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:c7:ed:69:cb:58:a2:cc:f4:71:33:ab:06:
a5:32:4d:e7:1d:b5:77:f9:40:27:d8:38:13:18:a9:
59:bc:f8:0d:fa:59:2b:61:4d:89:4d:96:3b:44:e0:
e5:c2:9a:c6:06:f6:b0:a5:90:9a:14:84:7b:9f:08:
b1:84:51:7a:4f:f6:48:4c:8e:fa:de:40:8a:61:a9:
49:64:2f:d1:5b:79:e0:ba:a0:01:0c:fc:d4:b2:4f:
87:d9:fe:9e:1e:b4:99:ae:52:28:c0:80:fb:10:2e:
26:db:5c:18:e5:1b:bd:07:8f:7c:79:24:70:17:38:
f3:d1:2a:9f:dc:4c:90:5e:e9:1a:2f:7d:b7:cc:c7:
17:14:c3:67:6e:e6:07:9f:d4:c9:ed:8a:c9:2e:47:
45:45:a4:c8:f3:6a:8e:68:0a:34:db:9e:00:5e:b5:
75:9f:6e:91:93:29:b6:5b:1b:9f:50:7a:0e:30:e6:
27:e4:67:b2:83:fb:27:e5:c8:f0:3c:92:6e:3d:28:
9a:d5:f7:38:d1:2b:df:3f:93:7d:5c:dc:47:b5:14:
5a:f0:65:fe:1c:49:41:f2:0c:dc:9c:17:be:9b:19:
5b:78:f8:45:27:b3:a0:41:19:67:85:38:78:fd:e0:
ea:8f:6c:7d:1f:2a:82:b8:dd:7f:b8:08:c4:55:dc:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138403
sbgp-ipAddrBlock: critical
IPv4:
103.124.180.0/22
IPv6:
2403:e3c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:c5:5e:83:73:01:c5:21:be:19:78:ba:94:bd:a8:ae:31:e9:
be:d7:70:31:43:47:86:0c:9a:54:7a:66:a3:fb:59:f8:eb:e2:
7e:ed:44:5e:0b:7e:67:3c:cc:32:3c:50:a2:c6:0e:d1:81:01:
85:80:ff:77:ed:e6:f9:46:64:13:2f:98:5b:22:df:35:f7:33:
22:e1:29:a8:36:13:7b:f4:17:cf:c2:9e:09:86:e4:0f:26:b0:
7c:c8:ef:17:ea:7d:4a:95:ae:f8:63:3a:67:f8:63:98:3d:8d:
d6:bc:da:9d:7c:85:d1:44:9a:3a:82:26:61:f5:1e:5c:35:cc:
2b:3d:d0:df:cf:b9:4c:a4:39:0e:ce:43:24:80:d6:f8:dd:22:
b0:19:74:1b:f8:d8:6e:9c:02:15:68:db:16:84:51:0a:12:cb:
46:bb:36:90:1d:f0:5d:20:d4:78:d5:d1:68:8d:74:fd:9d:f3:
d0:9b:88:c5:98:4b:64:23:c0:6c:d5:0a:d6:eb:90:55:68:aa:
25:01:6f:9d:10:66:30:be:9c:0f:ca:85:fc:3a:1b:3b:da:cc:
06:23:71:45:13:6c:f5:93:3b:4a:b1:9f:e8:34:09:18:10:59:
70:c3:50:59:5a:1d:95:b4:20:db:fb:ca:d9:8b:24:be:2c:45:
76:fa:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:42 2024 by rpki-client on console-fra.rpki-client.org