Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
File: Ci5d8bLD15feoVNn-qncOITNGzM.cer (raw, json)
Hash identifier: LkVBQR1hju3CG5WwcRzj5O3r+pKfEUmDP4oEjMby8qE=
Subject key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F02A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 May 2024 18:53:36 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 138983
IP: 103.138.30.0/23
IP: 2001:df0:2b80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127018 (0x1f02a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 18:53:36 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:4a:a6:15:e6:ae:31:31:bc:96:6d:40:58:
99:d9:34:59:39:d7:34:c9:36:a8:05:05:41:3b:bc:
72:45:fa:0e:fb:99:d2:c6:5f:22:7e:2b:80:1c:c0:
8a:47:b2:e4:b9:eb:1c:d5:11:c1:be:f8:5b:11:ef:
33:64:c7:70:e1:33:f3:eb:91:6c:7a:59:f8:e9:e1:
11:aa:5d:a9:e1:de:94:ca:11:b7:f5:c0:53:0a:97:
0e:9b:7d:a8:0f:8b:f3:6a:7b:f2:b4:97:31:28:60:
34:cc:0d:ea:ac:b8:9b:8e:82:66:b8:24:a4:64:f3:
fd:0e:12:8d:8b:f7:1a:09:a3:60:13:a0:50:ee:25:
fa:60:e8:47:98:58:c7:15:6b:60:72:7f:ca:c4:60:
e2:2c:37:00:39:df:60:f0:4e:7b:6c:b6:7f:75:5e:
49:97:25:e2:db:1b:90:70:cf:58:4f:ec:72:45:78:
ea:dc:76:1e:b1:ec:d5:9a:9f:55:80:6c:d8:c0:42:
b9:63:d0:9e:e1:24:22:05:75:26:a0:4a:a8:f6:13:
41:22:fb:d0:64:c0:31:c4:56:3c:1e:df:1e:74:bf:
c1:8c:17:61:db:3e:b1:f7:c4:13:3e:72:17:d7:78:
0a:f3:a9:8c:91:37:06:06:7e:f9:54:23:a8:0f:b2:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138983
sbgp-ipAddrBlock: critical
IPv4:
103.138.30.0/23
IPv6:
2001:df0:2b80::/48
Signature Algorithm: sha256WithRSAEncryption
01:4f:a0:44:6d:4c:9f:33:24:6a:21:81:c0:4c:98:80:75:4b:
ff:83:01:ad:ee:9b:0f:b5:4c:ec:9c:33:93:de:7f:1f:66:6a:
26:0b:d0:eb:8e:33:86:08:6c:74:d6:ad:1d:a4:ca:a7:ff:e7:
24:76:3e:a4:84:8c:b0:f0:c5:0f:10:5a:64:13:6e:27:55:a5:
4f:de:66:e0:71:5a:a4:95:63:53:96:12:39:10:43:20:ac:a8:
af:e0:18:79:28:08:cd:25:9d:bf:1c:dd:28:8c:c5:68:d2:62:
2a:49:ba:14:ef:85:20:04:ba:12:63:f9:e7:dd:fd:f1:17:54:
cc:8d:61:98:b8:5a:2f:6e:cc:a9:cd:75:c2:dd:c8:9d:63:e5:
01:67:69:7f:1a:b2:2e:fb:71:85:47:8a:d5:f9:fa:f3:06:9d:
5a:f1:f3:22:e1:e9:2d:35:07:9c:0e:62:af:82:c6:3d:2e:ad:
fa:38:d4:ac:60:0e:0c:ce:f8:8a:47:1a:b3:01:21:57:5b:32:
bc:34:3c:c9:6d:75:73:c5:d2:06:5f:69:d4:b8:e1:6d:08:27:
f4:bd:e4:29:8e:56:e7:c8:c5:7c:2a:eb:a7:07:b8:f4:a6:40:
47:02:b5:0e:a0:8d:b9:a3:bf:ad:d7:dd:ff:d8:3e:43:08:11:
01:56:00:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 10:10:32 2024 by rpki-client on console-ams.rpki-client.org