Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
File: HuygOndlK5BwteEzgJoiODDInPk.cer (raw, json)
Hash identifier: p3Ds8PUrHqsUjFVMOqd+2vK3K+RbonF8aWTMA3zM/Ss=
Subject key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D149
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Dec 2023 21:44:34 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 149014
IP: 103.176.90.0/23
IP: 2001:df0:cc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119113 (0x1d149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 11 21:44:34 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:07:6f:44:67:3b:cc:23:bb:d4:7b:ca:f5:
36:71:35:f3:85:b9:7b:35:73:6c:23:5e:8c:41:9d:
6a:8c:69:0d:ee:ce:0d:99:85:4c:1a:3a:4a:f5:a7:
31:e6:ed:61:1b:af:fd:a4:5f:01:2f:ce:3f:0d:d6:
21:66:63:48:bd:16:28:72:62:16:ed:6e:94:eb:30:
dd:11:bf:a6:b3:17:8e:c2:98:ea:bb:9f:0a:bb:a3:
a8:85:d0:d9:cd:ed:23:2d:fc:dc:b1:1f:89:61:75:
bd:d6:44:af:44:ab:40:5e:f1:48:3b:ad:68:d0:aa:
22:69:b3:9c:ef:5e:06:80:b6:b4:24:96:75:75:fc:
60:e9:16:dc:81:c6:6b:fb:2c:95:9f:63:99:af:a3:
e6:cf:09:ff:16:8e:27:ed:48:e7:4d:19:ee:5d:90:
3d:41:03:e9:a8:fc:52:9f:ca:1f:a0:c8:35:20:13:
eb:05:38:15:50:a5:1f:a9:84:a7:df:3c:8d:75:a5:
a2:b4:af:e9:74:32:85:56:b1:ce:3d:03:4d:62:99:
43:6f:e6:d2:03:2e:fb:ec:fd:14:f9:b6:50:72:c1:
8f:82:c6:61:95:37:05:9b:fb:38:4c:b1:43:a8:bc:
8a:65:e6:ff:b4:c0:2f:a9:02:79:c8:5d:90:cf:d5:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149014
sbgp-ipAddrBlock: critical
IPv4:
103.176.90.0/23
IPv6:
2001:df0:cc0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2b:8c:e5:08:1f:31:da:45:89:d7:ca:e1:e3:9c:a2:9f:5b:
e1:00:b3:34:22:1e:81:2f:4b:8f:75:e9:3a:95:e8:04:d8:8e:
e6:f5:f1:55:60:6c:1b:da:95:c2:70:e2:20:62:ed:f0:ee:53:
2e:fd:e1:6e:4b:fc:68:30:88:e5:77:4c:2a:89:5b:f0:5f:8c:
93:41:41:ad:e3:2a:b4:ba:c7:bb:b8:43:ce:ee:01:eb:39:e3:
7a:59:4c:80:c1:22:63:d0:50:88:e5:c4:fc:91:d9:25:f1:17:
c1:9b:86:4f:18:57:98:9f:4f:fa:d5:03:35:69:5e:0d:73:44:
64:25:7d:17:07:40:06:76:aa:0f:37:0c:b7:b5:48:67:d9:03:
84:be:7b:ad:f1:9d:51:07:55:98:61:31:66:ca:55:27:77:d7:
ec:5a:f5:82:79:da:9e:58:bd:84:f9:04:6f:e4:99:b2:5f:ff:
f2:4b:bf:d0:75:59:0c:99:83:aa:3f:59:71:4a:08:ed:09:c6:
9a:aa:bc:2a:1b:12:63:5a:15:2c:4f:d6:a3:12:3d:e6:8e:ec:
5f:cb:24:a4:30:14:45:ac:5e:34:c4:9b:7b:ed:37:5b:2d:dc:
2c:48:4f:08:6c:f3:17:e7:9c:4a:52:c9:b6:cc:cd:e9:80:0f:
1a:c7:93:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 07:42:45 2024 by rpki-client on console-ams.rpki-client.org