Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer (raw, json)
Hash identifier: 4kHuao0xQ0x6q/F0Ql0+80u95M1NKU1lL2t+CZC4REY=
Subject key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F04E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 May 2024 06:59:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 141766
IP: 103.163.156.0/24
IP: 103.184.129.0/24
IP: 2407:2940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127054 (0x1f04e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 7 06:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:11:64:20:25:77:d9:a8:6e:de:08:e4:fc:
26:92:0e:17:7b:ab:90:43:7e:44:f8:9a:b4:c3:52:
bc:ad:0e:61:d5:1a:e4:83:a2:9f:37:68:8b:c0:e6:
26:8c:a2:66:12:93:1d:ba:0f:af:e0:24:71:47:8a:
a7:ca:c5:2f:fe:c7:83:a1:94:b6:2b:50:5c:99:53:
40:2c:fb:c5:ff:f1:d2:1e:26:11:bd:f2:90:9c:ce:
ee:de:69:63:99:57:a0:26:ca:b2:98:b3:aa:e8:6e:
8d:4f:ae:36:79:6e:8e:93:a2:cc:c4:a3:57:0b:4b:
27:8a:f1:e0:e2:fa:ca:57:8a:f0:ec:93:20:c6:d2:
ff:bd:d6:fa:35:ce:0d:ce:25:39:15:45:83:f0:a1:
bd:c5:38:4c:d8:70:eb:5f:e1:38:23:ef:df:cb:d8:
5f:2e:be:22:aa:a5:46:bb:2b:92:53:95:f0:34:f1:
fb:41:9d:1f:bb:fc:f3:e4:d9:88:23:56:d3:81:38:
1a:b6:00:a9:ad:04:09:35:37:1c:fa:b2:ca:6b:09:
85:3e:b9:b5:44:02:e3:1e:87:0d:98:eb:42:41:fa:
5f:33:b6:9a:b4:d7:fd:02:c6:09:b6:a3:a0:85:79:
69:58:e9:c2:68:08:2b:d5:2f:ba:ba:d9:d4:3a:80:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141766
sbgp-ipAddrBlock: critical
IPv4:
103.163.156.0/24
103.184.129.0/24
IPv6:
2407:2940::/32
Signature Algorithm: sha256WithRSAEncryption
2f:28:4a:34:34:e8:71:9f:69:c8:06:19:68:82:52:e6:31:ae:
bb:53:6c:e9:50:4c:1f:94:3e:13:28:15:72:fb:15:d3:78:1e:
84:92:74:e5:6c:7e:d9:d2:98:71:6d:e1:7b:b5:ad:71:a6:aa:
db:99:14:60:e4:98:64:0d:7d:a9:03:47:b8:6e:06:77:57:f8:
a6:33:ec:e6:64:d7:22:c5:13:57:10:e0:a8:16:11:0f:f3:4d:
73:1e:72:06:de:5d:4d:86:d5:5e:2c:79:f3:02:3c:8d:1c:60:
2d:d8:4a:73:3a:43:ba:f9:66:d2:af:3a:38:9c:39:a5:3c:90:
89:7c:41:4d:2f:50:e9:e7:f1:4d:cf:7f:b4:30:cf:8d:26:a2:
77:af:d2:17:bf:14:c0:38:27:f5:b8:fc:3e:12:4b:8e:3e:44:
cc:54:90:c6:f2:43:77:c9:de:cf:71:b8:f6:cc:1e:76:bb:d5:
f4:5b:46:bd:a2:41:a7:38:71:61:ba:b8:bb:0b:43:ac:db:8e:
8b:1a:57:58:f9:40:04:73:f5:0e:48:12:a3:61:82:e5:05:1b:
b0:a9:23:4a:1d:0a:a3:90:dd:f1:65:3c:13:ec:ba:38:3d:64:
0b:8b:85:39:8e:10:8f:7b:b2:c8:9c:08:d0:51:13:d7:b9:50:
8e:69:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:42:58 2024 by rpki-client on console-fra.rpki-client.org