Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer
File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer (raw, json)
Hash identifier: m0iNQVyQRLycc5jXpUHjBeJCiASQH5+KnMtG7ZQn3cE=
Subject key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D6F2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 05 Jan 2024 14:43:03 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 137404
IP: 103.107.80.0/22
IP: 2402:4f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120562 (0x1d6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 5 14:43:03 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:dd:7e:ed:b0:33:39:65:b3:05:8d:54:4e:
f5:86:67:21:ee:5c:4e:59:1e:e8:69:7b:51:b9:cd:
ff:6e:83:46:34:bd:6c:5c:a2:71:82:64:f6:a5:9f:
75:21:63:3c:6c:a8:a4:85:be:64:62:6b:0f:67:97:
d9:b1:b3:7b:12:79:9d:a0:e5:36:5a:69:b7:92:9b:
92:2b:d7:3b:b1:63:e7:b9:77:fd:6a:99:3f:8e:52:
1f:03:3f:bc:81:2c:5c:9c:c7:b4:f8:0c:94:44:d5:
ad:26:8b:fd:a2:37:fd:ab:86:e2:2b:cd:3c:c7:64:
55:79:66:1d:63:a7:ca:16:29:a2:50:34:ba:10:a3:
7b:a9:20:aa:88:eb:ef:81:b4:c2:f0:ea:df:78:3f:
71:d7:2a:9e:3b:9f:07:4b:8d:62:dd:aa:6d:48:d2:
1f:bc:91:43:63:98:f4:fd:aa:5a:96:ea:82:50:da:
c7:80:fe:70:d9:1f:9d:38:9d:d7:58:02:c4:23:c8:
55:5f:6b:ce:ed:f8:9d:bf:d7:bc:02:91:94:2a:9c:
e6:06:79:0f:b2:1d:b1:ce:7a:75:16:53:af:20:01:
6e:96:14:35:86:f1:b3:e3:eb:2c:4b:ee:c6:f9:15:
0b:62:f9:6d:63:4f:08:b0:b3:60:47:02:5a:75:4e:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137404
sbgp-ipAddrBlock: critical
IPv4:
103.107.80.0/22
IPv6:
2402:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
cd:de:ae:33:4e:ba:be:f9:4c:95:2f:47:c9:5f:ea:47:cd:88:
a7:1e:80:1e:64:69:73:24:f6:08:46:74:f4:be:b0:39:ac:38:
fb:d2:a2:57:1a:bf:4c:3c:11:0b:7e:97:d4:b1:c4:5d:12:2a:
99:2a:66:8e:ff:09:ae:46:af:f9:a9:e5:ca:ac:73:6e:a5:5b:
66:94:3e:f0:10:e5:78:46:8c:bf:d6:ac:63:d5:65:a4:6d:04:
fc:ea:b1:8e:10:e5:52:fe:92:8f:93:2c:e8:2c:45:bb:dd:8e:
fa:8f:34:73:6c:be:17:1b:73:c7:78:2b:11:c0:da:db:3a:c2:
e0:a9:a3:c8:4b:41:85:10:a5:23:eb:7f:a5:37:03:df:60:93:
7c:9b:fc:27:5d:8e:a7:1f:a5:47:be:0c:d6:f1:a7:10:d3:41:
22:8b:79:f0:da:2f:76:8a:a5:78:a0:e7:7f:d6:a2:d5:56:ac:
79:24:c5:03:27:29:89:e5:6d:53:e7:2a:74:c1:15:31:d4:6d:
15:7a:5d:28:b3:4d:fe:bc:a9:d1:95:19:01:42:bf:e2:13:6d:
ef:2b:4f:22:4a:94:55:a1:9e:af:ed:b2:75:9b:0f:e9:ee:87:
a9:9b:a6:bc:3a:59:7b:ed:f0:b7:4c:41:52:e3:43:bd:0f:a8:
ad:8b:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:23 2024 by rpki-client on console-ams.rpki-client.org