Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.cer (raw, json)
Hash identifier: nDnkyEItxY72qnw+dSyzT/+/GctDRAxUhBR/RVOSVtY=
Subject key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF4F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 01:06:06 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 139846
IP: 103.186.144.0/23
IP: 2400:71e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126799 (0x1ef4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 01:06:06 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:9d:3b:fc:fe:1d:72:a4:aa:c4:82:f9:78:
86:77:f1:84:3b:f7:93:6d:bf:a1:d0:8f:98:dd:1b:
e2:4b:4c:ce:fc:df:e3:a5:a4:03:95:f9:63:8d:0b:
0e:6f:6e:09:8d:e1:37:7e:af:cd:c7:f8:33:11:71:
9c:ca:1c:de:42:61:6f:15:30:e7:7f:ee:ef:f7:0a:
8e:d6:27:e8:f4:94:85:df:85:3f:40:a3:47:fa:cb:
3c:c2:10:af:a3:e5:a9:96:58:7f:d3:1e:f2:e5:e3:
cb:40:0a:c2:46:50:05:47:18:33:9a:1a:74:c4:1e:
e0:85:14:fd:2a:08:ce:67:e3:12:f4:dd:15:e7:4d:
30:97:38:a7:ef:31:95:f3:34:9c:6c:d1:3d:43:c1:
5d:45:0c:66:26:60:b4:6c:92:be:8d:1b:ba:b7:34:
a7:ed:aa:cf:7c:86:38:b9:3a:b3:19:c8:96:1c:f5:
34:9e:eb:96:7d:d3:ac:82:57:82:ce:9d:2d:90:87:
3f:e2:4c:38:23:d0:d7:8e:5b:e9:27:79:25:41:16:
37:ff:a9:96:b0:85:91:b9:78:2b:91:e5:76:66:82:
c0:83:bf:8b:56:0c:d3:3f:1c:3d:11:44:a0:b4:6a:
66:94:fc:a4:da:7d:76:ee:53:29:93:e7:74:35:c9:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139846
sbgp-ipAddrBlock: critical
IPv4:
103.186.144.0/23
IPv6:
2400:71e0::/32
Signature Algorithm: sha256WithRSAEncryption
c8:62:70:26:9e:cd:5c:40:ce:9d:7a:2c:28:81:ae:c0:28:61:
b2:46:37:8a:cb:02:8d:22:64:18:d5:7f:31:54:41:55:cd:fd:
7e:f5:ad:4e:b0:62:7c:fb:ec:cf:63:2a:d2:14:63:20:66:26:
8e:06:4b:14:f6:6c:04:76:26:9a:dd:5a:1d:b5:b1:b3:87:16:
ee:64:b2:68:29:e0:03:4c:43:d6:27:90:f3:c3:4c:a4:d8:c3:
80:b4:ea:a9:cf:06:22:f7:27:5c:db:ea:99:22:c3:4e:d9:d9:
64:df:36:f1:0d:3b:37:e0:e2:aa:5e:1f:be:b3:8a:cc:0e:57:
b1:e8:6e:18:10:b4:d6:8c:c6:28:b4:a3:ad:b2:33:eb:17:d6:
68:50:77:1f:9d:1e:99:4d:d8:75:f5:92:31:e6:fc:5b:30:38:
98:a0:25:48:8f:fe:89:5a:3b:59:07:6a:23:a6:f9:d8:69:b4:
83:d3:d1:ce:74:3b:c3:de:88:e6:88:34:d5:7a:bb:62:ad:6d:
b3:17:9d:17:dc:0c:65:fc:91:c1:d2:c1:03:41:15:59:1d:74:
12:b6:61:9d:b5:52:43:36:02:56:12:05:9e:c5:c4:6b:c5:8e:
32:2b:23:e5:5e:bf:4d:69:95:ab:52:ab:64:d3:63:af:cb:59:
0d:d7:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:13:40 2024 by rpki-client on console-fra.rpki-client.org