Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
File: nAOc5JtXef24TeO2mPZ26EQjZnk.cer (raw, json)
Hash identifier: Ae7JENQTmv8e94zYi0xFtzycDRvRiQDgJ1mgEGCEk9s=
Subject key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F836
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Jun 2024 13:30:23 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 63989
IP: 103.58.148.0/22
IP: 202.9.89.0 -- 202.9.90.255
IP: 202.94.166.0/24
IP: 2402:6880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129078 (0x1f836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jun 10 13:30:23 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9134AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:d3:0f:14:8f:2d:bf:39:27:c4:57:d9:c4:
d7:3b:05:04:f9:ba:99:63:88:2e:7d:aa:b6:63:21:
ca:1a:25:85:14:0a:10:d8:c4:dd:16:2d:ad:07:35:
6e:04:75:82:5e:c0:c9:d0:2c:ea:7c:8e:a8:68:20:
7a:2a:14:49:ef:05:0b:6c:f4:07:1e:10:15:d2:5d:
ca:da:c0:d7:5c:77:44:97:7d:c8:7f:5b:3b:5d:0a:
9b:70:f0:00:42:0b:40:42:a1:b0:6b:f3:26:22:ae:
90:f8:56:57:74:73:37:b3:de:62:62:2c:71:d8:53:
b2:ca:3e:5d:bf:7d:bb:20:03:66:2e:8e:d2:a8:a5:
c8:fe:3d:85:53:b4:ff:86:7a:48:34:1b:25:d9:55:
af:cc:ba:5c:16:ef:9a:8f:9e:b8:ee:81:4f:d8:25:
2a:26:8f:9c:2a:4d:4c:63:ac:c3:1e:d0:26:86:ac:
df:64:73:7f:5f:e4:04:52:f6:19:56:88:06:cb:fc:
2e:bb:cd:d6:10:c6:7c:2c:20:2b:9f:95:aa:42:1f:
55:ab:0e:7a:f9:4d:18:d4:cb:2c:bc:36:b8:a9:05:
0a:95:8a:c1:92:8a:d0:97:89:89:2a:0a:82:42:d0:
77:8a:57:aa:14:fc:4e:7d:bf:ec:08:2d:b2:e5:5b:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63989
sbgp-ipAddrBlock: critical
IPv4:
103.58.148.0/22
202.9.89.0-202.9.90.255
202.94.166.0/24
IPv6:
2402:6880::/32
Signature Algorithm: sha256WithRSAEncryption
5c:09:fd:83:89:14:8e:dd:01:0c:40:6e:48:71:b9:b3:fd:90:
21:ed:c0:1c:17:06:73:dc:40:45:37:54:ce:5f:f0:15:8a:15:
87:33:a5:d9:f0:8d:02:a2:05:c4:7e:29:b0:d2:f4:a4:92:2e:
9a:49:b9:0b:e5:ff:59:f7:b6:8e:05:17:a5:1c:2a:49:f5:0a:
1d:90:d6:c0:de:b3:4c:77:6e:2c:a5:8b:82:f4:75:04:9e:05:
05:e9:66:3c:07:4f:c5:29:08:1d:17:9e:f3:d0:63:18:dd:a9:
b5:d7:bb:7a:16:9a:98:ca:f8:83:b0:3c:b7:3a:d4:93:5b:0c:
25:e7:fa:6f:7f:87:92:ad:c4:f3:01:97:95:7c:cd:9a:a9:c3:
69:24:a0:07:24:f3:7c:f7:76:18:b6:d0:94:21:bd:ce:5b:15:
b3:92:e7:e2:91:99:55:82:34:b6:e2:7b:71:77:8a:1f:85:08:
99:d4:33:5d:f7:c8:9f:bd:af:c1:d1:67:11:2c:21:a8:23:0e:
cb:c9:18:6b:9a:52:64:72:dd:f5:e1:13:d1:e2:dc:15:e3:91:
d7:5f:48:53:64:40:4a:70:4a:95:0c:32:00:8c:34:3d:d8:8a:
f4:a1:5c:94:30:09:68:f2:0e:a4:6e:d4:54:cb:78:5c:e2:9a:
ad:d8:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:09:03 2025 by rpki-client