Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer (raw, json)
Hash identifier: L2tuPHQ8TM2eaK7FqHwuNcH6EWI0wxNOAqkj2qJK94M=
Subject key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01ECC5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Apr 2024 12:52:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 142006
IP: 103.164.86.0/23
IP: 2001:df6:4280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126149 (0x1ecc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 12:52:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:a5:83:f8:c0:f1:36:93:19:61:e9:0f:7e:
b2:4c:ce:e9:43:47:c7:53:36:b0:8d:7d:c8:64:df:
9d:f7:b4:fe:95:17:54:7f:54:1d:3d:9a:26:f1:c7:
27:63:c5:f5:ef:c0:ee:66:23:44:a5:9f:93:f0:5e:
62:b9:47:12:b7:72:3d:39:ef:1a:a1:d4:c2:ba:3a:
71:90:f1:7f:34:b3:bb:b8:39:13:1c:41:a2:ae:d7:
e8:b6:dd:d5:24:af:77:f7:1c:58:82:e8:86:d5:a6:
ab:2f:1f:b7:14:d2:52:2e:ce:d7:3f:f0:18:1f:bf:
a6:3d:e0:7b:6e:b8:f1:44:c6:b6:d8:1f:c4:b8:44:
2a:15:e8:a6:73:d0:f2:4a:df:47:d1:58:9c:4f:67:
73:97:23:e3:9d:bc:bf:e9:3d:d8:6d:bf:c5:31:e1:
1a:b7:02:2b:b9:a6:ed:b5:87:b0:ab:dd:61:0a:7f:
83:79:73:73:9f:fc:f9:e9:a8:14:d7:83:70:3c:d8:
ab:d7:f6:52:12:d8:8b:a2:33:c8:44:a2:be:dd:c5:
fa:f1:a6:32:76:e6:75:04:ac:38:f9:61:35:b9:ca:
fa:3d:75:1e:8c:07:52:d2:e1:27:6a:75:d8:5b:2b:
3c:a4:0e:d3:5b:da:6c:09:46:76:33:60:c3:f9:e2:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142006
sbgp-ipAddrBlock: critical
IPv4:
103.164.86.0/23
IPv6:
2001:df6:4280::/48
Signature Algorithm: sha256WithRSAEncryption
72:97:81:14:f5:42:fa:d4:43:99:3a:1e:46:bb:39:46:aa:22:
19:cb:46:b5:92:40:97:81:fe:6e:9c:27:0f:a2:de:22:cb:dc:
d7:4f:bb:00:fa:71:a3:1f:f8:9c:82:ea:15:a4:c4:ce:2c:f1:
9d:0c:ff:e0:71:2c:1d:f0:b5:c7:8c:51:e2:4e:05:a1:41:32:
5f:dd:e3:95:6f:dd:98:df:01:c0:e5:09:a8:05:5e:5b:3d:40:
94:ef:48:a7:c7:41:20:b4:6c:70:67:74:43:e4:be:8e:cb:33:
96:ee:ef:36:00:42:6a:67:fe:e4:45:96:53:a0:15:3a:a6:66:
fb:9d:65:37:0e:ab:0e:86:bc:3f:98:30:3d:71:51:78:23:b0:
28:62:8b:c9:82:31:63:60:94:5f:8d:e3:68:c5:1d:9a:c7:51:
91:8c:1e:a6:9d:2f:26:07:91:bd:60:47:9e:0e:24:7a:4c:da:
84:ed:0a:79:0e:91:60:c3:90:89:28:14:43:b8:ce:b1:c8:79:
7c:30:b3:c9:1d:ce:03:6f:6f:11:4d:37:e6:a3:49:1c:7d:fc:
53:1e:3e:88:b6:24:ad:77:e3:f1:8f:5e:ab:ec:14:09:67:71:
7c:a5:70:01:2e:cb:bd:21:6c:9f:5e:43:1a:b6:a5:e4:71:10:
d3:62:8f:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 9 03:38:40 2024 by rpki-client on console-ams.rpki-client.org