Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
File: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer (raw, json)
Hash identifier: oa7JzignKOamSHcz5ZPrXiYA2NU9wNJK8srGlWnIbkM=
Subject key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A8E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 Jun 2023 13:02:39 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 134356
IP: 103.140.10.0/23
IP: 2405:4c40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108774 (0x1a8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 8 13:02:39 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:9e:c6:59:cf:23:4f:2a:e9:f9:d4:27:a1:
ff:46:f8:38:f2:78:a4:56:84:01:59:88:ae:12:df:
c6:7a:e0:19:9d:26:e4:42:88:a8:d2:72:75:ab:77:
47:f3:0e:5c:66:22:5f:a9:84:7a:88:ea:23:1e:7a:
25:f0:1d:9d:88:a6:74:41:67:86:dc:55:5a:75:4f:
aa:d7:37:39:54:b7:66:be:89:a4:41:f2:63:f0:40:
db:9b:07:da:0a:c9:45:24:dd:97:e5:e8:d3:47:af:
86:2f:59:22:85:52:c1:ea:c7:79:12:0c:be:73:4c:
28:91:58:cf:a5:c5:e3:8a:32:69:95:01:fd:4f:0a:
e0:15:71:ae:bf:a8:10:f1:95:f9:44:40:3a:36:7b:
92:8f:3c:6b:55:bd:91:af:55:59:04:18:d0:94:ce:
59:78:a6:96:6a:3e:2f:bc:2b:3f:19:0c:a5:b7:27:
13:7d:19:5b:50:91:e0:2f:7c:b4:31:da:14:a1:5c:
d9:f5:5e:bd:c2:3c:4d:18:5a:8e:50:4f:ee:23:e2:
21:41:85:b5:71:92:da:b4:0a:53:10:b6:f0:17:47:
bd:c2:cb:6a:87:cc:a4:58:41:11:06:08:1a:d9:27:
d1:a5:6c:ae:01:0e:86:bc:74:fc:80:33:b8:d5:aa:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134356
sbgp-ipAddrBlock: critical
IPv4:
103.140.10.0/23
IPv6:
2405:4c40::/32
Signature Algorithm: sha256WithRSAEncryption
6f:e9:bf:b0:fe:1d:ea:c4:d9:ce:79:ef:86:63:97:ea:90:72:
9d:f2:3e:37:99:f8:49:22:03:b3:76:96:f9:28:bb:4f:90:8e:
8e:35:1e:0f:0d:d1:93:3c:c1:6d:cd:f0:74:57:bd:90:fd:fd:
f0:d4:83:81:06:fc:d4:77:b4:55:45:19:ce:b0:f6:ec:52:47:
61:4f:48:8c:ef:4a:fa:61:ca:23:28:cc:c9:b0:83:18:9c:45:
a8:60:0b:8e:25:cd:f5:2f:37:e8:fb:2c:91:c8:59:92:7c:33:
4c:3a:34:cb:f0:3c:1e:e6:89:f6:1c:05:6f:d2:8d:10:6c:c0:
e6:48:b7:9d:c1:81:55:db:e8:dd:51:6f:f3:5d:0f:31:d0:ed:
33:f1:a6:bd:d7:84:f7:70:21:ea:33:4d:2c:b5:5f:10:6d:f0:
4e:72:45:07:23:f9:2a:0e:6b:7b:ac:a6:1b:0b:f5:9a:0d:92:
33:78:16:a2:d2:29:fc:9e:17:68:95:39:d0:a7:ff:27:9f:40:
be:e6:03:55:90:c6:dc:2c:00:8d:a2:03:fb:cb:98:50:24:59:
13:2f:ff:af:d7:ab:72:56:13:d4:2b:a1:01:cf:e1:d1:73:c3:
35:56:be:bd:b6:4f:e2:24:52:df:fc:9c:99:af:60:ee:41:44:
1e:93:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:24:32 2024 by rpki-client on console-fra.rpki-client.org