Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
File: r7CNb36XeFtvMRce-C4xux0G4uM.cer (raw, json)
Hash identifier: v1yBch/tZ0DBLl6rUoe9AAhaJM2FNsFPveGDIhrQuQw=
Subject key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EA56
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 07 Apr 2024 19:17:02 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 37988
IP: 103.108.228.0/22
IP: 2402:7340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125526 (0x1ea56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 7 19:17:02 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:19:a9:d2:e0:6d:ae:f0:fa:d5:f5:e4:42:
37:61:64:22:1b:ae:a9:9a:8a:a7:f1:5c:d1:b0:58:
e5:ed:e8:c4:f6:a2:2c:cd:94:78:c3:f0:86:26:54:
ae:ba:1d:e2:c6:b3:46:13:13:f0:71:3f:10:f1:e1:
e9:18:7c:9b:74:5b:d9:00:07:41:d4:02:c5:24:e0:
34:06:cb:8f:45:fd:3c:54:a0:2d:bb:9d:77:29:10:
9f:4a:a7:5d:8b:27:6c:6b:ba:e8:85:4f:5a:bc:27:
8f:a5:68:eb:8d:ea:fc:43:36:21:eb:ad:46:ce:da:
72:0e:34:fa:6f:83:9a:58:37:2d:94:2a:e1:c4:24:
1e:be:76:9a:e8:91:58:b8:c0:49:13:0e:f3:e8:24:
41:a5:8e:3c:70:90:cf:ed:15:bf:b0:5e:db:a0:bd:
56:8d:64:e4:bd:4b:cd:80:d6:e1:54:4e:4f:49:4d:
d6:46:2d:0a:8c:a1:ff:9e:83:1c:6c:e7:8f:e7:7d:
85:ff:4a:c3:22:2e:b7:b3:1e:cb:bb:bc:6c:8c:84:
44:a7:51:88:e3:44:31:78:4c:7b:d5:9a:f6:68:f2:
28:48:5f:e6:31:08:b0:69:be:5d:2d:ea:1e:e9:84:
3c:7e:e1:30:80:68:d8:34:ef:b9:14:59:e4:16:c6:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37988
sbgp-ipAddrBlock: critical
IPv4:
103.108.228.0/22
IPv6:
2402:7340::/32
Signature Algorithm: sha256WithRSAEncryption
8c:07:33:ac:ee:c1:81:68:3f:bc:db:81:5a:50:36:23:4c:dc:
e4:39:0f:bb:22:87:34:97:e1:3f:ee:e2:95:a7:ce:9f:4f:4a:
56:9f:02:a8:2a:0e:77:0f:40:a9:81:33:b0:e8:bc:58:34:b1:
2c:ca:7f:9c:bf:2b:95:e9:81:87:e5:9b:df:e6:5f:e6:1f:58:
0c:11:09:ae:4a:1c:28:c6:68:75:bd:b2:e2:0b:9b:16:a3:00:
6d:f3:47:28:17:08:77:e9:0d:b3:af:2f:4a:b2:c7:8f:74:71:
3d:aa:d6:7e:40:24:bc:25:ef:df:57:de:72:0b:37:f1:7c:f5:
03:49:04:53:98:8a:25:a4:3c:3e:38:8c:32:4d:04:d7:62:59:
38:39:59:0c:52:aa:39:87:df:f7:55:c1:37:6a:5c:60:7b:d6:
d4:e4:d5:7d:6e:94:c5:9c:2a:f8:f5:f7:e2:a0:bf:1b:54:0e:
99:01:35:31:86:fb:34:69:1c:95:09:26:55:c2:23:79:91:a9:
4f:ba:df:34:5a:cd:75:48:2a:e4:e0:c1:63:f1:0f:0d:ef:42:
93:02:5b:42:37:f0:e4:97:b5:67:1c:4d:bc:c3:11:eb:14:42:
8f:61:73:a0:e5:76:0c:22:81:b2:7d:3f:4e:99:c6:3e:18:45:
de:26:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:59 2024 by rpki-client on console-ams.rpki-client.org