Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer
File: YqbV7cWNU--YCAi-ztUZ6AWx5Aw.cer (raw, json)
Hash identifier: DibWwToV30fT/Mmm3N4g/JMDhP3B27ryDzEDwaHB9s4=
Subject key identifier: 62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D73B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 08 Jan 2024 14:47:09 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 24501
IP: 202.77.137.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120635 (0x1d73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 8 14:47:09 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A915179D/serialNumber=62A6D5EDC58D53EF980808BECED519E805B1E40C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:e4:bb:03:32:7c:35:60:75:80:8d:26:fa:
20:27:15:b2:f1:a6:dc:35:fb:2a:50:f1:2f:8a:b2:
3d:4c:8a:cc:56:e0:9d:70:a3:10:01:e1:e9:e9:45:
6c:f1:f5:02:f9:3c:bb:62:e5:c9:17:b5:29:67:61:
89:ef:75:58:53:29:af:0d:6d:7b:5f:42:53:9d:f6:
12:66:04:d6:9b:94:70:da:35:34:0c:6f:8b:15:18:
df:8b:b4:a4:96:78:a8:fc:42:fe:fa:df:18:ec:c9:
27:59:e5:57:82:9c:11:61:cf:3c:c4:58:f7:36:56:
2e:49:5a:95:15:37:20:99:73:56:a3:62:9e:3c:d0:
2b:a2:9c:00:ab:d0:e8:6f:99:a0:1b:32:7c:c4:6f:
f5:cb:88:ed:d9:9c:f2:f4:ed:08:c5:05:7c:ed:32:
97:d8:e7:65:77:14:60:d8:41:d7:58:a4:e0:1e:a4:
1a:15:56:7c:74:c9:36:1c:58:7c:22:ce:8f:50:13:
b5:e8:33:6e:c8:9f:ea:19:a9:7f:e6:f2:71:fc:5f:
9e:82:81:b2:66:81:66:ff:a4:b7:40:ab:93:b6:fa:
ff:60:3a:22:bb:0c:0c:e9:3f:05:1c:db:b5:0b:f2:
da:63:d4:ae:aa:2d:f1:52:f6:7f:5e:ef:5e:71:4d:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:D5:ED:C5:8D:53:EF:98:08:08:BE:CE:D5:19:E8:05:B1:E4:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915179D/AC6A168C1D9011E2A39195F008B02CD2/YqbV7cWNU--YCAi-ztUZ6AWx5Aw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24501
sbgp-ipAddrBlock: critical
IPv4:
202.77.137.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:08:74:50:be:65:d6:83:82:27:37:f9:09:63:d0:0d:45:56:
15:02:e5:9d:c7:91:9b:2e:a8:d3:e0:93:0b:65:63:49:36:9c:
4d:b6:ce:e2:da:e4:55:fa:7c:8d:93:c4:d4:e7:ce:c8:dc:a4:
06:90:d3:d0:9a:f6:cf:5e:a5:2d:33:0e:8e:8c:76:0b:66:54:
92:9f:51:f8:b5:d1:c9:93:92:1f:a6:8a:82:8a:ce:45:71:fd:
b7:d0:58:59:ea:f0:a4:10:d8:0d:a1:6d:76:d1:95:5a:e7:2f:
12:ee:3d:53:42:3f:6c:28:d4:eb:38:fc:d1:5c:75:a8:cf:45:
3e:69:8c:43:c3:89:4c:0a:77:09:94:50:18:72:ce:37:16:c0:
ea:61:cc:aa:ac:d8:de:c9:06:17:25:f4:96:ff:f1:38:ce:c8:
7b:40:f3:2b:1c:f6:a8:7e:d6:c1:18:4a:92:23:98:c6:a8:7a:
03:08:69:47:87:6c:18:ba:b5:84:ef:5a:ce:9f:ee:15:ef:9b:
c5:51:e1:4d:ff:13:f3:61:aa:a1:d8:37:d9:16:01:47:e7:0c:
84:d5:14:0c:01:0a:94:1a:31:fc:63:25:d0:d8:0d:58:18:7c:
08:a8:31:24:a1:f9:9e:ff:69:7e:f7:80:cc:e9:5c:f0:2e:35:
67:9d:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:46 2024 by rpki-client on console-ams.rpki-client.org