Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
File: m0G07JA0ytKB1baCVnQwWQMlK94.cer (raw, json)
Hash identifier: ogz1dQO8zW/sFo0OXbQvHTHllGapWKfbHQO2i6FVi8A=
Subject key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DB80
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Jan 2024 18:01:36 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 142010
IP: 203.14.208.0/24
IP: 203.29.89.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121728 (0x1db80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 18:01:36 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A915E39C/serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:59:6d:bf:5a:9c:5c:22:ba:b9:2a:dd:9b:
09:ff:ee:f6:95:7c:b2:6e:b9:95:d6:32:91:06:00:
66:43:61:b5:a5:0b:b6:6b:27:bd:27:f6:34:b0:cb:
dd:86:51:cb:fa:74:df:10:72:07:2e:da:bf:70:c7:
d7:02:4b:6c:bd:3b:dd:a0:68:a9:ad:74:1d:b9:a6:
83:04:65:e9:f4:52:09:81:c8:47:de:b2:bb:49:4b:
89:06:38:df:f2:19:de:35:b6:ba:c2:f6:d7:e5:19:
89:20:e0:1e:27:b6:33:ef:91:f3:fd:57:f2:da:82:
15:a4:b1:8d:e7:dd:88:59:88:49:8a:1d:48:94:35:
d5:ae:54:f0:b3:c5:d0:37:1e:cc:41:c1:82:d8:f2:
46:54:9e:86:52:72:4f:52:6d:b1:b5:1a:32:9d:b7:
39:6d:4f:1b:ff:b4:87:da:1f:e7:f8:c3:a4:c9:57:
08:7c:b1:95:3b:ed:ef:36:90:9e:f6:90:34:eb:31:
53:2e:d6:07:f2:d8:77:e2:2f:23:89:f1:37:4d:66:
38:f8:6a:80:ac:32:bf:49:ec:bd:f6:19:5e:66:ab:
f0:9d:c7:34:f3:72:8f:ed:28:29:bb:8b:e4:d3:b4:
57:37:ee:7c:99:58:d0:38:80:39:59:f7:9f:a3:33:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142010
sbgp-ipAddrBlock: critical
IPv4:
203.14.208.0/24
203.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:8b:0b:a1:41:92:a3:58:c0:72:ba:d8:3a:fc:48:6a:12:cb:
68:31:92:8c:46:bb:3d:11:75:68:2c:b7:d7:1f:73:e1:c0:17:
3d:66:0b:3b:6d:36:fc:61:56:bd:fe:ff:dd:f9:e0:38:c6:93:
f2:75:54:ce:49:1b:d7:70:ad:a9:72:4e:41:63:da:56:81:37:
75:21:2d:fb:8d:69:3c:b1:d1:47:11:75:a6:dd:15:32:b7:ee:
63:f3:39:d6:f2:b4:b1:f8:a5:64:60:ab:40:d5:be:2f:7c:f3:
88:25:62:14:f8:3a:0b:46:47:37:d2:5b:17:d3:0e:47:7b:96:
b8:66:82:63:3c:c6:b6:99:59:80:0b:f7:db:72:55:ce:ee:a6:
eb:d9:f3:98:09:d9:a3:0a:84:16:4f:f0:65:00:a4:3a:df:38:
3b:bb:7e:b8:0c:eb:59:ce:77:01:ac:d8:ba:3b:ec:b3:ea:bf:
39:ad:1d:da:c5:8a:14:8e:e9:c9:4d:f6:09:85:b2:f1:c0:ab:
9e:d2:c0:3d:8f:f3:c3:9a:c3:84:46:1a:87:f3:fb:1b:dd:4d:
43:bf:8c:db:bb:d2:ce:70:96:61:a5:fa:5b:af:90:11:1e:2a:
b7:a1:ef:31:28:9d:77:ab:0a:47:14:45:21:37:02:a5:f8:fb:
55:25:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:24:36 2024 by rpki-client on console-fra.rpki-client.org