Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
File: R8cEZQRKLhQBRUf6ebt6VP42674.cer (raw, json)
Hash identifier: YhM8Vebl7MqvP1IF9DPXoOdzt1XEgHWoYK9aIUR/A28=
Subject key identifier: 47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E3DC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Mar 2024 17:30:49 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 141728
IP: 103.162.226.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123868 (0x1e3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 11 17:30:49 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A919B80A/serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:1f:e9:75:10:7f:ca:af:82:68:e1:52:3a:
4e:d1:8f:64:a8:98:1a:3e:a9:83:c1:7d:b9:b0:01:
da:c8:cc:e5:f3:68:62:e5:b0:fb:0e:61:8a:05:ab:
99:d2:db:d5:ff:40:4f:20:3e:4e:57:42:0b:bb:af:
41:cb:da:1c:4e:e1:35:94:e1:85:13:80:a7:7b:04:
29:7e:1f:26:8f:ac:82:76:dd:c2:f9:5b:6a:a9:a0:
e9:07:61:52:ad:1a:16:5c:af:97:23:ce:9c:b3:75:
0c:ef:de:05:c2:11:33:82:2f:bf:d3:9e:0e:07:ff:
57:ac:f4:79:7b:63:41:39:9f:94:95:9f:26:11:d3:
af:31:3d:db:65:38:02:b2:7a:ca:80:0f:43:fa:24:
2f:47:b4:86:19:76:8f:b4:86:d1:78:6b:da:94:b5:
01:73:2c:9f:b6:7f:0d:b8:48:9e:c6:3f:ea:3c:3e:
c9:52:2d:9d:f1:81:74:e2:96:e9:62:64:54:c6:01:
ee:9b:8b:6d:db:9f:17:3f:44:7d:25:f5:e7:e9:3b:
53:54:15:f8:4e:f4:78:49:75:ac:e1:e3:b8:a5:df:
3f:3a:7d:d8:54:87:90:62:e7:a3:58:76:58:33:73:
c2:29:dd:c7:f9:19:34:65:fa:9f:cf:c0:4b:7a:86:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141728
sbgp-ipAddrBlock: critical
IPv4:
103.162.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:89:d1:35:65:91:61:b6:29:c1:7a:75:07:ce:91:1f:92:61:
d6:9a:96:aa:ef:c7:70:f2:1a:71:5c:1c:01:a0:2d:fe:95:9a:
5a:e8:e5:f4:b7:13:92:cd:1f:70:a6:17:d2:32:4b:b8:1e:10:
d4:ce:a2:13:d4:36:9f:10:bf:a2:4a:0f:50:26:d9:91:ca:5a:
bd:47:66:14:ae:15:41:66:0c:d9:cd:a3:6f:ed:02:c7:77:c3:
b3:b3:74:d8:0f:ec:a3:d7:25:6e:f0:cc:cd:03:2b:c5:51:62:
e1:c5:4b:f3:fb:d4:84:fd:e4:4b:b9:e5:51:5e:ce:3d:9e:66:
b9:98:57:8f:97:d8:f7:5a:11:37:53:db:07:43:89:36:e4:8b:
6d:e7:13:8e:f5:36:3d:aa:c3:50:7d:2f:a1:eb:2f:07:b0:af:
f2:5f:dc:40:67:7f:12:cc:c3:02:c8:22:93:1d:1f:91:c2:d8:
de:58:ea:e7:ca:16:c7:b3:63:b9:33:8d:3e:63:bf:b5:79:f5:
b3:ce:a0:5e:92:dd:70:07:d9:44:6f:aa:f5:93:f0:3d:9e:ad:
52:9a:a7:aa:38:41:4c:aa:c2:b7:ea:3a:d1:87:b9:b9:99:8c:
b4:16:3e:86:6c:d5:8a:63:d6:64:85:67:8c:af:9f:e8:21:9c:
e8:ab:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:59:47 2024 by rpki-client on console-ams.rpki-client.org