Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
File: GHAMs9ZQejMEuusnDe7RMBzj2QI.cer (raw, json)
Hash identifier: QAUi5segNeqP89KyAQjlL3NG89dwhfM4+bOWHV9E9aM=
Subject key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C918
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Nov 2023 13:38:04 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 134410
IP: 103.101.248.0/24
IP: 2001:df2:bb00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117016 (0x1c918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 13:38:04 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:f2:c0:96:69:0b:ea:07:da:42:62:59:ce:
60:09:24:d8:3e:cb:25:92:a2:ad:56:bd:8d:10:e9:
b3:04:a5:df:82:25:8d:95:b1:7b:84:a3:b0:5b:e0:
2e:df:ac:08:d1:32:58:d6:55:21:2a:4c:43:78:e8:
f7:f9:43:9b:83:09:f7:f7:c9:c7:dc:9f:18:24:71:
0a:4d:a5:75:de:41:8c:9c:32:23:9a:d6:e1:84:f5:
e5:54:2d:94:78:a5:c6:4c:78:0b:9d:e6:38:a7:5b:
c3:92:09:92:2c:3b:23:11:93:2a:08:bd:b4:a7:96:
71:c9:52:9c:16:5b:8b:30:3b:40:dc:cd:af:5a:09:
57:8a:ec:50:25:92:57:f5:55:ea:ba:0a:04:17:9e:
08:6c:b8:f1:9d:9a:f8:42:ac:ba:1f:09:0c:7f:a0:
73:54:d9:18:e5:cc:4b:80:2d:02:c9:91:95:b4:94:
8c:1d:d0:c6:ba:37:74:20:3d:17:1c:5e:59:64:cd:
6f:83:b3:75:bf:01:00:f1:4d:5b:22:ea:5a:cf:7a:
fd:01:2d:4d:b1:c0:2b:89:4c:ae:0c:cc:b3:46:a6:
0e:5e:ad:c4:79:f8:6a:28:3a:d6:10:0a:de:6e:7d:
4b:c1:51:62:11:a2:90:44:0f:dc:81:62:10:ff:2e:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134410
sbgp-ipAddrBlock: critical
IPv4:
103.101.248.0/24
IPv6:
2001:df2:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
24:cc:68:cc:a5:29:db:fc:1e:0d:e2:5f:64:d8:c0:44:8a:f5:
e7:32:aa:c1:44:89:45:94:26:fd:7f:e4:a9:d1:70:78:78:85:
c9:f5:f4:ce:dd:19:4f:15:b5:1d:23:c6:6d:e7:51:48:04:aa:
15:08:5a:e8:85:79:de:b4:e3:9f:83:56:6e:39:be:fe:f7:86:
4f:ab:fb:b7:f9:c6:90:be:f3:f0:c3:9d:a2:6f:da:b0:94:ba:
6f:07:92:b1:7a:68:d0:48:03:13:77:6a:14:64:7b:9a:14:87:
fb:5b:4b:05:a2:19:8a:77:da:4d:fa:ef:69:8a:ee:c0:f1:a7:
43:27:25:f5:da:62:94:19:37:b3:51:4e:bf:03:aa:01:e6:70:
56:fd:c4:df:56:ab:e3:16:e9:0c:f9:6d:45:92:dc:71:93:af:
14:61:b2:a2:72:b1:b5:de:90:79:50:8f:2a:19:91:73:93:f3:
89:a7:5c:99:38:20:67:b4:50:95:37:4c:c9:75:30:33:8e:89:
11:29:26:5f:df:7f:7e:75:a9:d0:78:21:61:ec:0a:c3:3b:e5:
bc:d7:91:ad:71:b4:5a:41:93:21:1a:28:1b:db:41:d4:0e:21:
d6:20:61:92:51:26:28:27:bb:43:de:13:38:a0:2d:b0:ce:98:
05:4b:d7:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 15:09:22 2024 by rpki-client on console-ams.rpki-client.org