Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
File: VIY3awW4olUjKeNhvXJcd-H40Mk.cer (raw, json)
Hash identifier: Pm+UyacKQPEjQe4A9Z4Jct3EZI0rJ2+2xXQ/8qnCFoI=
Subject key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01ED8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Apr 2024 21:52:57 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 135020
IP: 59.152.60.0/22
IP: 103.205.180.0/22
IP: 2404:be80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126346 (0x1ed8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 25 21:52:57 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:73:1f:35:b2:1f:51:26:9a:2d:7a:43:57:
b9:5f:7d:62:1c:60:1e:8a:09:0c:2d:8d:14:c1:ff:
db:2c:0c:0a:a7:97:49:82:f2:33:0e:31:19:5d:6a:
5c:83:db:a1:9a:8a:ab:16:4c:56:3f:3b:64:68:d2:
c8:49:68:ff:60:15:71:3a:66:7a:3b:a6:b1:04:7d:
3e:21:ea:c9:86:95:25:37:e5:09:1a:67:9e:87:1e:
7e:f1:3d:df:37:5f:19:e6:e2:4b:4b:d6:90:c5:10:
f2:a1:d4:90:d8:da:98:5c:20:eb:5f:cb:07:52:31:
37:5a:fb:4a:fe:da:17:8d:16:b1:3f:6e:1c:87:5b:
dc:04:03:ca:34:95:3b:a3:4f:c0:ff:43:fc:8d:33:
69:ab:03:41:af:43:a7:35:7f:43:ff:08:4b:c1:f0:
c2:16:67:d2:c5:40:5a:6d:b3:b9:8d:fd:f5:83:ee:
2e:87:3e:b7:37:bf:09:1b:7a:f3:11:2f:6c:e2:ce:
0f:92:d5:47:2b:30:2e:17:d3:ce:c4:ff:95:81:02:
3e:a2:7c:7d:5c:d8:13:cf:fc:17:58:98:5d:97:d1:
90:4d:b8:08:58:25:f3:90:d8:01:47:c9:49:a6:09:
d9:e0:0e:32:d8:b3:8f:2c:20:d1:72:88:36:86:c1:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135020
sbgp-ipAddrBlock: critical
IPv4:
59.152.60.0/22
103.205.180.0/22
IPv6:
2404:be80::/32
Signature Algorithm: sha256WithRSAEncryption
2b:2c:4f:f5:61:5c:22:ec:3e:f0:b1:ee:a4:ee:43:57:fa:49:
6e:7f:16:af:64:1e:8e:bb:85:61:cd:5d:92:09:ca:d8:d1:3c:
bc:bf:77:42:bd:14:25:e7:f2:86:1d:ed:51:3f:25:09:9c:9b:
1f:8c:a6:0b:83:34:5c:bb:9c:5d:51:d3:ee:2c:3e:63:25:bb:
37:3d:f0:01:43:2e:47:20:ad:93:40:2e:ba:92:d1:f2:1c:06:
05:98:07:26:33:8d:99:31:1a:8a:ad:8a:3f:13:fe:13:5c:b6:
d7:0c:ce:01:b5:2e:9d:78:93:82:b5:cb:e7:e3:22:f2:4a:2b:
8e:f2:90:fa:c5:03:4d:96:e8:11:ef:88:32:3a:9f:38:35:79:
c7:71:ab:1a:d1:b6:07:05:39:b1:20:14:46:e9:8e:9a:d1:3d:
1b:31:c0:32:bc:d0:40:f5:af:7e:c1:7a:de:1b:12:17:93:e7:
95:42:30:b5:a2:83:cd:e0:a1:89:04:6f:0f:55:f0:ce:f3:6b:
22:0d:07:05:25:78:8f:74:c3:37:1d:e3:06:82:d4:3d:22:27:
61:03:c9:0f:7a:eb:08:60:17:7d:0c:73:51:90:73:cd:7a:76:
fd:bf:9b:32:be:25:3b:ff:03:06:33:c2:51:85:e4:65:e5:ac:
2e:a1:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:24:20 2024 by rpki-client on console-fra.rpki-client.org