Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
File: YgCxV626JWn6e4i32i-1rj_2o7Y.cer (raw, json)
Hash identifier: 11LDT9oJ0rIIzXtOl0zeSCE+jfm9r4y9ZAbvNLBWQwM=
Subject key identifier: 62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BA95
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 31 Aug 2023 19:02:57 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 23930
AS: 38491
AS: 38539
AS: 38581
AS: 132209
AS: 132301
AS: 132495
AS: 132913
AS: 133140
AS: 140708
IP: 43.243.124.0/22
IP: 103.38.212.0/22
IP: 116.93.0.0/17
IP: 121.127.0.0/19
IP: 203.99.232.0/21
IP: 203.208.24.0/21
IP: 2401:9800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113301 (0x1ba95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 31 19:02:57 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:11:ad:70:0a:e1:82:27:5a:00:54:de:bf:
84:41:cc:b2:06:ba:9b:eb:dd:4f:fc:5a:4f:59:b5:
7a:f9:03:12:d1:95:08:da:38:8f:a1:e7:2d:7c:cd:
47:85:17:8b:25:67:8c:21:08:d7:a5:e3:ba:d4:f8:
bb:b8:bd:d5:f0:94:59:c9:6b:a1:19:b9:aa:11:f2:
d7:59:a0:60:9d:cb:ad:a9:0b:8e:06:fa:72:37:67:
1f:be:b8:1b:50:27:d5:12:c0:b6:80:c2:c0:96:cc:
57:64:3f:1a:3a:e9:88:dc:f8:ab:ca:c0:e8:de:3a:
b5:ad:05:ed:31:22:92:3e:e0:15:2a:f4:ed:4c:e5:
a8:cd:d5:da:eb:77:0b:9d:10:59:03:18:0e:22:4d:
b8:ec:b9:65:df:c8:31:75:f5:a2:4f:4a:79:f7:e7:
4f:ca:eb:c4:b4:30:c3:5d:23:19:36:13:d2:2a:d2:
64:12:2c:bd:6a:dc:a5:5e:3d:14:dd:c7:f3:d3:75:
2d:c3:41:53:7f:f8:5d:f7:f3:46:0e:a3:40:77:26:
4e:13:2f:a2:79:1f:fd:6a:0c:5c:74:64:3e:1a:5e:
64:1c:03:41:98:6e:ad:ea:41:e2:c6:6f:63:57:e6:
29:8d:28:f4:9b:f7:73:a2:44:e9:11:51:68:59:c1:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23930
38491
38539
38581
132209
132301
132495
132913
133140
140708
sbgp-ipAddrBlock: critical
IPv4:
43.243.124.0/22
103.38.212.0/22
116.93.0.0/17
121.127.0.0/19
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
86:49:4a:1d:62:40:6f:47:49:1b:87:2a:79:f6:83:ad:e7:df:
4e:35:23:22:4e:cf:29:3f:bb:68:f0:92:fa:14:57:a0:2b:01:
cd:58:e3:9c:1a:23:31:34:2c:aa:f0:66:35:09:a1:36:80:65:
f0:22:0f:16:e0:52:e9:13:18:81:2b:eb:dd:a2:38:96:7c:24:
a7:7b:b8:9d:4f:57:fe:56:fb:34:ed:33:d5:a8:22:d0:65:e5:
54:16:3e:2d:6b:11:a6:9e:ce:41:55:92:a7:98:05:3c:24:cc:
e6:c8:20:03:c9:5d:89:e2:5e:8e:f4:80:37:5f:72:7b:b0:66:
81:d6:d4:39:41:d5:57:fb:21:0d:34:69:00:32:9f:cc:99:b3:
ba:41:9f:6b:cd:fa:d1:84:0b:e2:91:e2:e4:15:81:3f:d3:0a:
c9:55:5b:b3:20:a1:7c:40:0a:eb:3f:6a:8d:53:67:a1:12:36:
28:ac:1b:95:6f:74:4a:85:7b:35:c7:3c:43:45:7a:3b:54:9c:
85:f5:84:69:38:4e:d6:a5:90:9f:ec:54:3f:e0:d4:bf:35:ec:
b0:d6:50:f7:2a:b0:bf:99:2f:18:a3:dd:0e:31:94:76:90:cb:
48:be:02:7a:07:21:ae:db:c3:59:3d:a7:70:cd:f8:31:3f:85:
a9:87:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:09:38 2024 by rpki-client on console-ams.rpki-client.org