Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer (raw, json)
Hash identifier: 2Z6FrHjo+2kBNPqKIEd2OhhM57K8UQ3/AJzijwubKMc=
Subject key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EC75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Apr 2024 14:03:05 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 38175
AS: 38194
AS: 38206
AS: 38208
AS: 133086
IP: 103.10.57.0/24
IP: 103.163.20.0/24
IP: 2001:deb:c000::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126069 (0x1ec75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 19 14:03:05 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:3c:37:7c:a0:ac:11:fb:09:26:72:05:a1:
c5:47:11:da:31:11:9b:89:59:b0:2f:61:0e:26:3d:
52:e3:b6:5c:f4:57:a6:34:6a:96:7f:19:ae:97:a4:
35:77:c9:67:69:03:83:98:b0:0b:9d:06:52:88:b5:
04:62:e2:1b:9b:77:8c:7b:12:b2:03:9f:d9:47:a1:
6b:12:92:2b:39:db:02:0a:f8:72:27:52:34:48:76:
62:4c:8a:4e:db:8d:21:ab:37:85:cd:a9:3e:fa:4c:
58:a7:80:fc:28:5a:ec:12:3d:9e:fa:8b:69:bd:7e:
68:c9:8a:18:fc:f3:5e:2f:88:4a:4d:00:f2:00:e6:
e7:de:15:c5:76:97:f4:24:a8:bb:64:d7:e7:8b:73:
dd:8e:76:74:f0:dd:ca:a0:2e:20:be:fa:49:0a:7e:
bc:64:0a:16:cd:46:84:2e:b6:3c:4a:6c:e1:cc:26:
59:30:76:2b:c1:15:6e:f5:c3:e2:ef:78:b0:db:41:
20:a6:e1:4c:55:7c:93:da:19:d6:9f:da:bc:66:f7:
fa:4e:ab:2a:2f:1e:ea:2f:b3:51:1b:f7:13:29:c9:
6e:f7:a6:dc:b7:8e:e7:a6:06:2f:2b:a6:38:db:c1:
89:75:32:a9:76:df:5b:0e:b0:5e:cb:0b:74:7e:66:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38175
38194
38206
38208
133086
sbgp-ipAddrBlock: critical
IPv4:
103.10.57.0/24
103.163.20.0/24
IPv6:
2001:deb:c000::/47
Signature Algorithm: sha256WithRSAEncryption
3e:45:29:94:45:81:72:0b:4e:e3:4c:7f:6e:ff:a7:47:3b:ec:
3f:1a:34:c0:f9:fd:b2:23:5d:fd:8d:61:c5:b2:b8:10:12:c2:
a2:76:48:54:92:85:d5:a4:dc:12:84:d6:4b:5f:9e:d7:e5:1a:
da:14:c9:ba:ec:1d:33:6f:aa:59:dd:d6:28:ba:93:96:c0:d7:
15:56:92:34:e5:a0:ae:b1:8a:2a:43:bf:51:b7:a8:3b:e8:f4:
6f:33:82:23:d3:ef:d4:4f:26:67:e9:11:18:ce:93:d7:c4:b9:
ad:3a:e7:50:32:e8:96:db:95:4f:29:a7:0e:10:6c:c9:ed:77:
b6:60:94:57:7e:b8:97:3c:ef:9a:f8:21:6e:70:dc:c4:70:85:
60:17:7c:a9:f0:11:23:49:06:c3:37:ed:5c:4d:57:70:52:db:
40:ba:36:c7:5b:09:18:13:c3:f2:e5:13:f0:99:2e:7a:e8:e2:
c6:24:a2:cc:23:a9:f6:cb:5b:81:ed:d3:28:4f:3c:21:35:4b:
c5:86:5a:25:36:4c:70:7d:cf:8d:9a:f7:b7:d9:ff:c3:09:02:
5f:f1:98:6a:f4:2a:0d:8a:b8:b2:a6:05:c3:cd:71:1a:89:45:
7c:89:9d:95:f7:02:06:59:19:01:de:c7:20:db:75:3c:1e:01:
22:61:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:21:20 2024 by rpki-client on console-fra.rpki-client.org