Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
File: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer (raw, json)
Hash identifier: ZZ4JFqiJ5VhQOxUkOzmCAuJGyJA81qoNLzW9KUDoLXk=
Subject key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CAEB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Nov 2023 19:20:54 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 23958
AS: 23960
AS: 24183
IP: 45.125.168.0/22
IP: 103.226.32.0/22
IP: 202.20.0.0/21
IP: 202.68.80.0/20
IP: 202.174.176.0/20
IP: 2402:9e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117483 (0x1caeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 14 19:20:54 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:ce:a8:df:fe:99:c3:09:cd:0d:58:53:ac:
06:54:a7:b7:2b:46:4d:d8:11:32:ff:d5:77:c1:28:
2d:1d:71:47:b7:48:38:06:05:a7:86:ff:b3:8e:54:
b1:ba:ad:a4:e4:09:00:dd:14:3b:d2:63:78:a3:80:
6a:e3:12:95:33:07:31:83:5d:7c:d2:86:90:db:7c:
a3:d6:17:d1:29:64:ca:58:ae:da:22:65:fc:fe:a7:
ef:f7:20:dd:04:6a:3d:31:84:f0:e6:7a:91:42:23:
f5:27:b7:dc:f1:46:bc:09:ca:22:08:19:39:f8:9e:
60:ff:4e:31:b4:e0:36:33:a1:5d:eb:54:74:a3:65:
57:33:7f:23:5e:ae:a0:be:d8:48:ff:71:98:03:fe:
8a:b0:9d:71:e3:5d:d8:62:f9:6a:9f:af:43:78:dd:
71:61:54:1a:a8:c7:0e:73:ec:5c:ca:8e:79:f2:9d:
13:b8:27:f6:cd:ce:5a:73:85:21:e4:93:c4:db:2b:
95:05:2c:8e:bc:9c:3d:2a:20:5c:61:04:9f:40:4b:
c2:f3:cd:23:6d:21:b4:7b:51:8b:a7:42:33:89:4c:
5f:86:c1:45:20:ef:53:e7:74:bc:3b:62:d1:c8:bc:
a8:15:60:ad:7c:35:4f:53:1a:7c:ff:49:68:e6:28:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23958
23960
24183
sbgp-ipAddrBlock: critical
IPv4:
45.125.168.0/22
103.226.32.0/22
202.20.0.0/21
202.68.80.0/20
202.174.176.0/20
IPv6:
2402:9e00::/32
Signature Algorithm: sha256WithRSAEncryption
35:e6:f3:ee:f4:26:d1:12:8a:e6:b4:3b:eb:bd:92:4d:ef:c7:
db:d0:d3:7a:ca:24:b0:86:d3:4b:17:67:58:f9:eb:77:9f:49:
e0:c8:08:1b:26:00:87:70:52:67:d6:52:2c:8c:87:13:c0:9a:
d2:d5:d8:16:58:f2:0b:cd:34:f3:55:3b:92:82:49:36:1f:00:
1c:ac:4f:3d:05:51:a2:bd:c0:0d:b6:71:ab:6c:84:d5:11:93:
00:ce:49:c4:2f:9a:8e:36:de:42:06:2e:2a:dd:bc:a1:11:0a:
b3:44:d2:14:6e:10:76:39:ad:c1:8b:1a:8a:b4:bd:2e:65:ad:
7c:f2:42:d9:d4:64:1f:f7:13:01:72:26:e6:f2:3f:47:6a:8a:
69:05:46:86:6e:fb:2b:0b:1c:a5:f6:55:b4:b8:a7:b4:37:0e:
79:85:af:38:e3:20:c7:72:58:35:8a:c2:7d:9c:e5:f3:ef:8d:
b3:90:80:8d:d8:21:1a:97:22:44:8e:df:88:a2:14:c8:d9:bc:
30:4f:3c:aa:42:04:59:69:7a:e2:a4:33:7d:fc:9c:6a:b7:b6:
fa:d1:c1:f6:ad:b9:bb:1e:43:8e:00:cb:cf:44:77:ee:32:ae:
1e:37:47:72:03:8a:68:96:c9:88:a8:6f:f9:96:1d:69:4f:32:
22:c2:3a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:36 2024 by rpki-client on console-ams.rpki-client.org