Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
File: yyk1oUeLT4tEYxANsulbBlRAZ3M.cer (raw, json)
Hash identifier: L1NqI/UHmvevLQVao2tzBGbIlIiyqyqRXPkNhkylZXg=
Subject key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F5EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Jun 2024 05:53:26 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 152705
IP: 103.23.148.0/23
IP: 2401:95a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jul 2024 08:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128490 (0x1f5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 1 05:53:26 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:42:fa:e0:e6:f7:80:5a:4c:5e:c5:bf:a4:
3a:dc:64:43:d4:67:93:62:c7:06:51:68:f4:9c:06:
09:09:e8:2b:bf:f1:5d:d0:ef:50:f0:67:9a:20:fe:
52:1b:5f:6e:72:c5:bc:63:b0:0f:c1:76:40:93:ec:
df:32:59:af:5e:a2:1c:61:51:e8:f8:71:de:fd:e1:
48:4d:60:70:04:8c:c5:19:8a:b0:87:e7:ad:b9:cc:
03:7b:0b:6d:a4:b5:bf:d0:5e:9b:d5:d9:ef:17:f0:
93:2e:d2:de:cb:9a:21:ba:74:e2:db:2b:3e:5d:61:
73:95:10:4a:78:bd:31:87:e2:bb:50:1c:ba:fa:03:
c7:fc:ca:1d:da:a0:a8:06:4f:6b:96:fe:d4:4f:07:
36:e2:3f:a0:7b:81:61:a2:b5:97:22:7e:b8:ef:bf:
44:dc:be:e3:1e:3a:6d:1e:32:cb:d3:a2:b1:f1:07:
0f:77:cc:e0:d6:27:91:19:42:c9:44:0b:7f:b1:21:
58:e8:61:27:4e:96:a6:a5:f9:2c:7f:9d:f8:55:ed:
3d:48:99:f8:bc:4c:7b:1b:9f:3d:f9:05:45:b9:91:
84:18:f5:8c:97:dd:dd:8f:a4:73:be:d6:4e:b3:4b:
07:65:ba:6f:e7:8c:42:33:a5:5e:cb:29:8c:e6:df:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152705
sbgp-ipAddrBlock: critical
IPv4:
103.23.148.0/23
IPv6:
2401:95a0::/32
Signature Algorithm: sha256WithRSAEncryption
09:61:52:43:1b:b7:9e:9c:9e:bb:d5:f4:74:aa:29:ce:ed:f1:
81:f8:03:9b:1e:1d:33:f4:ee:5c:0f:22:86:64:56:87:c2:49:
8c:11:cd:48:fe:c6:f7:4e:8c:ec:10:b6:65:6a:9d:8a:2f:af:
1d:29:87:c4:a5:ac:cd:39:af:84:14:28:16:b2:d0:f1:69:ca:
e0:61:63:02:7c:de:ac:de:08:0b:31:34:37:9c:8c:d8:f1:37:
67:1d:a6:53:50:bd:78:40:bd:ed:b1:04:58:84:30:d3:2f:7c:
d1:f7:73:5e:ad:28:47:f1:b0:62:9a:2b:6d:c8:be:33:3c:cc:
ee:d5:fa:e1:59:2a:a9:b6:5b:32:0e:cf:6d:77:34:19:ac:45:
4e:13:7f:35:ba:24:b1:73:53:80:e3:8e:5c:17:e1:d5:03:5c:
4a:92:fd:46:ab:ca:dd:ae:11:9d:90:e1:fd:b2:ce:a2:e5:b9:
6c:8f:70:14:7e:70:b0:22:0f:53:c1:4a:01:8e:6f:f2:c3:b2:
28:2f:7a:a5:6d:f0:87:63:f2:b8:2f:28:08:80:0e:a4:01:ea:
e0:51:c4:1c:5b:d8:e8:f5:1b:f6:a3:4e:76:5b:98:63:5f:c5:
40:ac:88:ba:53:a0:ae:9d:f9:3e:2d:d1:65:6b:78:71:29:49:
d1:70:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 10:08:18 2024 by rpki-client on console-ams.rpki-client.org