Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
File: aPPOswXHv_fe-qaMB-tBwLjjcWw.cer (raw, json)
Hash identifier: w1q1If8AJU5LVvgo2RsOppMpc3LMZL494jp4dLlFH3c=
Subject key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BA99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 31 Aug 2023 19:27:21 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 131312
IP: 103.69.31.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113305 (0x1ba99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 31 19:27:21 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:82:96:75:0a:6c:0e:37:17:58:d9:66:a0:
f9:c2:a5:1e:b5:83:a6:9c:88:c1:34:32:40:8c:0d:
23:41:52:97:46:c4:7a:b2:1d:d1:ed:6d:03:af:94:
76:ec:06:a3:5a:7f:f7:3a:9e:b1:b0:3e:9c:79:74:
d2:68:ec:73:21:0d:5b:a4:9d:75:f2:5f:e3:38:00:
13:71:78:a2:b8:cb:f4:a1:32:29:59:98:f8:1f:38:
ce:b9:a3:7c:2c:2d:77:70:98:b3:c4:67:f7:0f:91:
56:f1:11:f5:af:77:f7:a6:d3:df:74:f0:0c:c7:d7:
79:24:e2:94:74:b6:9d:10:4c:2f:8b:90:74:39:81:
62:0a:3a:9a:69:ff:6e:a2:a2:36:bc:27:3f:c9:0d:
49:23:7f:e6:de:c2:9c:b8:57:d5:c1:72:f7:84:91:
6d:49:97:66:7a:ac:e4:97:5d:4e:dd:c3:bd:a0:55:
67:f1:92:a8:52:69:1a:44:09:e3:f8:01:cc:26:2c:
dd:02:ec:db:67:85:e8:34:c9:94:9f:aa:7e:f3:31:
32:d4:1e:bd:9e:96:e7:7b:57:02:db:b6:e7:9a:1a:
34:03:ab:b2:50:a9:47:f0:09:fd:55:1e:b9:63:78:
4a:d1:39:e6:c2:94:07:be:28:d9:d1:e7:0a:4c:83:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131312
sbgp-ipAddrBlock: critical
IPv4:
103.69.31.0/24
Signature Algorithm: sha256WithRSAEncryption
98:27:99:71:96:38:eb:05:0f:96:4d:6f:dc:01:5d:45:b9:8f:
2a:b0:61:f8:3d:0a:29:c1:dc:d1:6f:23:8e:cf:a9:81:96:a0:
49:65:28:98:27:1f:8d:72:2e:2b:61:8b:70:79:7f:4b:13:92:
38:02:96:42:2e:96:e8:cd:74:6e:0c:56:e6:55:99:10:47:4a:
f5:a2:c0:66:52:a0:18:03:a0:19:b5:df:ed:0e:bb:1f:cd:67:
2b:f8:58:90:41:fe:82:af:2a:d7:30:f3:5a:44:07:10:6a:01:
ed:ca:ec:09:2f:34:d4:b2:9b:db:be:34:90:09:a1:0b:75:d0:
d7:a4:ed:f3:e6:84:74:c3:77:37:fb:bd:fe:d0:30:04:3d:31:
bc:d8:ae:76:ad:6b:73:80:0c:ab:86:2d:03:30:c0:2c:7a:2f:
18:b1:e7:ff:ae:6a:8c:f3:19:8b:d3:47:20:48:4d:92:19:cd:
1a:5e:53:0c:04:c3:43:64:b7:4a:99:75:0f:d5:d9:6e:bc:99:
f0:a6:a6:e7:42:1f:76:d5:b8:df:75:7f:67:e8:30:c9:1b:9e:
b0:a6:13:7e:61:3d:46:09:80:f7:88:8b:5c:1d:ee:d5:a2:e7:
e5:0e:2a:c5:83:28:60:3f:65:18:2f:36:9f:e8:bf:fa:f2:21:
00:e2:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:04:43 2024 by rpki-client on console-fra.rpki-client.org