Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
File: cClGBbAXy3lsrYhC9e-6P0SHB_U.cer (raw, json)
Hash identifier: a83Ka4PNcsoUuEoyiwBSbVpukOep9V7DiaFbnZJIg3U=
Subject key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022470
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Dec 2024 03:01:56 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 142290
AS: 148971
IP: 103.167.134.0/23
IP: 2001:df6:b780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140400 (0x22470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 24 03:01:56 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91E1C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:c4:6a:13:1c:93:b0:34:94:44:82:6f:44:
93:1c:87:60:2e:37:14:d6:05:c8:bd:e9:df:23:83:
70:3a:15:49:69:e7:26:c8:ab:f4:a3:82:58:46:9d:
33:de:7a:c5:8a:3c:7e:5b:eb:42:ad:ba:6c:57:8b:
6e:a5:d8:f1:e1:a8:13:ce:fb:4c:a5:99:8c:ae:b4:
c5:d1:20:16:ff:75:2e:c6:ba:11:39:07:7a:6f:c9:
90:65:a6:e2:5a:ef:fb:1b:70:2d:fd:15:69:a1:1b:
7b:73:69:8d:c6:b3:69:fd:2b:1f:f1:70:0f:88:d6:
ae:77:aa:2f:58:5b:0a:7f:68:ef:14:c4:2d:7e:78:
68:af:6e:15:73:65:c4:e9:b3:b8:e7:5e:91:da:5b:
48:68:db:04:69:c7:fe:63:f2:04:0c:56:c5:b1:33:
1b:92:01:63:4b:84:98:76:c5:dd:1b:3f:38:e5:3f:
19:30:fe:bd:a8:fd:bc:6f:de:2c:db:5a:db:9d:4e:
c1:68:5f:72:ac:dd:8b:47:6d:27:67:c6:60:a7:07:
73:20:5c:e8:1f:fa:88:b2:06:ca:33:94:c2:33:5c:
48:5d:ac:cf:40:dc:6d:de:d8:d6:c0:60:85:1a:1a:
d6:4b:ad:ba:48:a5:3b:d5:d1:32:c8:20:41:51:ff:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142290
148971
sbgp-ipAddrBlock: critical
IPv4:
103.167.134.0/23
IPv6:
2001:df6:b780::/48
Signature Algorithm: sha256WithRSAEncryption
69:0f:04:6f:1a:af:e7:da:df:4a:11:18:9e:49:0c:18:0d:3f:
e1:f0:15:5e:51:03:cf:77:77:75:1e:5d:47:53:be:36:d3:d2:
63:93:b7:47:6e:8a:53:8c:83:7a:fa:11:82:08:53:e6:6a:b6:
66:46:9d:0c:f8:d8:0d:9c:29:b3:f8:d2:22:a7:f1:81:6e:2d:
00:d2:a5:10:e8:33:32:71:ba:9f:6d:3c:7b:b2:4c:d9:18:ff:
fc:2f:70:79:fc:aa:3d:a4:07:45:18:32:9a:f9:72:5f:52:52:
64:56:27:03:5e:1b:75:b4:ae:b6:1f:fc:d5:d1:6c:8f:8a:d0:
30:55:0f:4e:49:f7:ad:a0:5a:0d:02:0a:91:95:ca:75:57:b2:
72:1c:98:c1:f6:82:8f:b9:b3:39:26:c7:e8:b6:9d:b3:1a:cb:
b7:a3:06:7a:1b:73:88:6b:0a:71:5f:a0:98:55:4f:0e:c7:4b:
af:50:0f:5f:c7:96:88:b4:85:e3:54:48:bf:f2:f5:12:ec:fc:
0c:81:78:f0:32:e7:91:be:5e:3a:bf:04:0d:8c:00:58:38:06:
ef:d4:f9:47:1f:ae:da:57:85:0e:36:3e:33:b1:a5:12:0c:9a:
52:7b:22:92:bf:35:c8:06:4c:78:38:5f:f2:f9:76:9b:95:8d:
5a:9f:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:44 2025 by rpki-client