Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer
File: bMOGDamHeDpQBVpRk5gw980cgms.cer (raw, json)
Hash identifier: IMNS8OH+tfaecfhqs6L7Nqs29Wjf4Miz7CTHd3c08Mc=
Subject key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D888
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Jan 2024 20:20:10 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 2772
AS: 3689 -- 3693
AS: 4058
AS: 5017 -- 5018
AS: 9440
AS: 9538
AS: 9665
IP: 202.66.0.0/17
IP: 202.66.192.0/18
IP: 202.72.0.0/19
IP: 202.73.0.0/22
IP: 202.76.0.0/17
IP: 202.80.0.0/19
IP: 202.85.248.0/21
IP: 202.88.0.0/19
IP: 202.88.96.0/19
IP: 203.85.0.0/16
IP: 210.184.0.0 -- 210.184.95.255
IP: 2403:2c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120968 (0x1d888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 15 20:20:10 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91EA623/serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:72:36:a9:04:73:6b:27:92:68:8e:d2:27:
97:8a:83:34:e5:40:ef:2b:48:8f:bf:e9:d0:00:84:
63:3b:bc:eb:17:5c:ae:64:a5:94:d3:fa:30:73:aa:
17:62:7b:93:18:bc:79:e7:65:d6:5a:e8:c2:0f:15:
28:5a:13:3d:7e:06:47:11:cb:b6:a3:b7:d8:d8:4e:
cb:08:d0:f7:da:6a:b3:44:b9:bb:1c:a4:cb:a5:0d:
67:4b:f4:4e:37:ec:1b:4f:bc:88:a5:39:ab:6c:c9:
d2:e5:61:a2:70:55:bf:6a:59:81:48:28:46:76:1a:
16:f9:81:77:39:c2:34:b6:a8:0d:25:cd:19:6e:ad:
5d:bb:52:09:70:4b:e3:e4:b2:3e:4f:89:df:18:6c:
25:17:4e:c9:8c:f7:e2:f9:5c:43:64:7a:0e:b6:70:
ee:41:90:e0:87:7a:71:3f:de:55:ab:c9:d9:cd:0a:
c2:cb:34:47:a8:d3:70:23:77:79:4a:52:18:9c:2f:
f3:41:73:f7:9f:ed:db:2c:54:44:b1:ba:c1:da:e6:
33:f9:65:6a:84:45:e6:98:f9:e9:f4:d3:b2:c1:c8:
e0:84:1f:22:46:f8:b1:e3:6f:c1:bd:51:ea:73:40:
04:63:74:a2:dc:82:a6:6f:99:f6:1c:85:d8:f8:e0:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2772
3689-3693
4058
5017-5018
9440
9538
9665
sbgp-ipAddrBlock: critical
IPv4:
202.66.0.0/17
202.66.192.0/18
202.72.0.0/19
202.73.0.0/22
202.76.0.0/17
202.80.0.0/19
202.85.248.0/21
202.88.0.0/19
202.88.96.0/19
203.85.0.0/16
210.184.0.0-210.184.95.255
IPv6:
2403:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
ca:ad:25:7c:15:d0:a6:13:b9:d6:66:1d:23:26:b1:e0:a6:17:
31:84:25:65:e4:5a:bb:0b:ab:10:d9:c3:2c:2b:f0:73:ee:1e:
a3:bc:7e:36:74:e3:86:52:b1:4f:5a:09:38:c3:70:d6:66:fe:
a1:a8:71:f1:d0:6b:0b:96:f0:bc:27:7f:ed:95:d2:72:29:28:
23:df:b5:30:8a:44:30:05:69:36:d9:fe:db:88:7d:58:e3:e6:
49:86:7e:f7:17:b5:30:1c:9c:2b:14:93:d8:e3:42:31:bf:00:
18:1e:1e:f7:7a:ca:5d:61:d2:e8:d9:68:83:ad:b8:dd:31:eb:
bd:78:20:ac:9c:06:8e:69:89:78:17:07:f3:35:79:b8:ee:ef:
4e:1b:3f:93:ab:fd:18:10:c1:b2:9d:5a:5b:38:20:7e:81:3b:
7c:47:73:59:87:8e:b5:39:49:e4:c5:cc:f1:17:8a:a8:4e:ce:
7e:72:27:fe:8e:44:b1:87:af:ac:9a:6e:04:43:27:c6:93:ce:
c2:dc:e8:d2:f4:be:18:69:ff:5a:2d:8a:3d:3f:12:6d:9c:0c:
e5:4f:f2:e4:63:c0:b4:4c:b4:27:7c:06:67:8d:99:eb:c3:5f:
15:09:38:62:08:d2:f7:24:53:ae:46:43:6b:5f:be:53:0d:ca:
d1:06:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:14:04 2024 by rpki-client on console-fra.rpki-client.org