Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
File: jVvm9QWF2v57SAa6CeIlsMxvKQs.cer (raw, json)
Hash identifier: R6qR9ryqArgxM4V11+yvlUPkqrUg9krNVwKdMHQr/aQ=
Subject key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C434
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Oct 2023 12:30:27 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 140504
IP: 43.230.6.0/24
IP: 103.20.124.0/24
IP: 103.49.173.0 -- 103.49.175.255
IP: 203.190.216.0/24
IP: 2403:ae80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115764 (0x1c434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 16 12:30:27 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:9f:6d:4c:13:97:9c:5b:e1:f1:da:1a:22:
95:99:cc:a1:8a:55:b3:fc:36:64:db:e5:f0:72:1f:
c8:cb:de:41:50:ac:59:21:45:32:7a:4c:9f:80:b1:
21:4d:0b:94:9d:48:93:70:73:84:d3:96:8c:ca:4c:
34:5e:e1:e4:88:85:b2:f1:f5:92:f5:78:e9:86:2a:
2c:25:fb:dd:87:43:9b:bd:af:ed:51:10:9c:bf:7d:
27:1a:93:93:c8:7e:d3:b3:06:69:94:8b:3e:aa:79:
c0:f4:84:b9:2e:db:93:04:b4:62:11:3d:3e:f6:f1:
ca:d9:d6:83:d5:1e:9e:db:7a:aa:87:6b:42:37:f7:
5e:a2:76:f1:71:03:05:6f:07:eb:cc:aa:78:9f:9e:
bb:ed:bc:14:71:cc:47:dd:e9:15:3d:1d:50:94:93:
e6:df:e8:ea:4e:6a:73:41:2b:53:2f:1f:20:fd:2d:
bb:ae:13:b2:bc:b9:69:43:b4:27:b3:e0:32:f4:45:
37:4b:f1:66:3a:8c:9c:82:83:76:ef:ac:a3:3c:c0:
ad:a2:35:ae:0b:a5:6d:32:04:b6:7a:a3:de:32:60:
f8:8a:a3:f8:7e:b9:1c:e0:b8:04:d0:09:c3:e7:cf:
5a:e6:75:41:51:85:eb:4e:15:bb:1b:62:81:6a:45:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140504
sbgp-ipAddrBlock: critical
IPv4:
43.230.6.0/24
103.20.124.0/24
103.49.173.0-103.49.175.255
203.190.216.0/24
IPv6:
2403:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
88:23:03:4b:6e:d2:87:ac:cb:90:fb:fb:75:b2:82:24:8f:1b:
de:79:5e:fa:f0:11:97:cc:47:b6:10:99:76:5e:3c:cf:1d:96:
0a:26:51:32:af:d5:a9:96:df:9f:70:87:0f:ef:d6:ea:d9:8c:
a5:f7:c7:59:8b:1d:97:a6:c8:1f:36:2c:a0:71:4b:cb:bc:93:
3c:61:81:ea:94:6d:b2:8c:58:c1:e0:bc:3b:a4:7d:9c:b2:e4:
49:5f:d8:9b:d6:b8:7d:43:14:a1:a2:c7:8e:76:5b:bf:80:98:
8c:92:ea:07:4f:f5:62:3e:03:a5:85:45:cd:dd:76:92:bd:6f:
73:45:71:5d:9b:84:5f:59:7c:6a:ce:14:b9:29:92:20:06:e6:
64:4b:9c:55:e6:62:ce:5a:15:45:20:d6:d6:4d:95:e8:42:56:
c1:21:05:da:7c:88:5c:f4:6d:31:71:f8:3a:66:b1:73:78:8b:
56:e0:74:25:b8:8a:2e:50:b2:bd:34:66:82:c5:d7:1b:ff:cf:
e5:56:95:b1:25:87:b6:39:9d:62:b3:07:ed:e2:da:6c:ae:20:
95:c6:77:56:e6:d9:e8:86:c6:42:94:94:75:da:5d:7a:7c:8f:
60:21:16:f3:62:58:9b:62:3f:d2:25:03:75:0f:f9:8f:25:61:
08:cd:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:24:33 2024 by rpki-client on console-fra.rpki-client.org