Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
File: --bA8ysvL8RXYKA0LkO79VK03oU.cer (raw, json)
Hash identifier: TYRWap0F115+gva8d2Nddc5gTrZF3Wfcn0FfUDhNmQg=
Subject key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021698
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Oct 2024 13:21:37 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 38902
AS: 55448
IP: 27.50.4.0/22
IP: 202.52.56.0/23
IP: 202.174.92.0/22
IP: 2402:f100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136856 (0x21698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Oct 28 13:21:37 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9124BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:15:e7:bb:29:33:b7:98:c3:79:dd:6f:31:
f6:de:dd:17:a8:de:6a:b4:4f:ec:1e:c5:ca:86:eb:
87:76:6b:0f:c3:9d:5b:bd:49:a0:ed:c1:3e:44:81:
8a:13:7c:98:6a:82:07:1f:89:10:4e:4c:f0:00:e4:
03:e3:ce:26:b5:5a:36:b4:28:2d:09:be:bc:c2:a4:
b8:cb:f2:2c:c8:71:d6:ef:43:d4:cb:c9:b6:b6:02:
5c:47:27:a4:3a:18:f9:87:0b:da:b1:48:7b:35:b5:
da:df:43:37:e8:06:21:41:e4:db:a4:86:8e:14:fa:
96:83:54:bb:ea:a4:dc:ac:f8:93:79:69:25:4f:ad:
e8:ab:e6:e3:cf:d9:29:6f:4d:b0:93:41:66:0b:89:
40:c3:61:f6:32:ed:69:37:e3:0c:c7:e0:48:88:25:
43:02:2a:77:f6:3c:ad:06:b5:fe:7e:cd:6a:05:b4:
92:4f:5f:0e:1c:b5:63:cf:78:c3:93:50:7d:c1:21:
c6:93:15:81:0a:98:78:b5:67:af:66:3d:ae:49:49:
21:4f:cb:98:66:5c:15:ef:9d:d3:65:a8:2d:37:53:
e4:55:70:72:85:fb:b5:9d:eb:00:3e:37:a6:d8:dd:
cc:ca:6f:10:ae:3e:bc:9f:7c:be:2f:9f:c2:39:9a:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38902
55448
sbgp-ipAddrBlock: critical
IPv4:
27.50.4.0/22
202.52.56.0/23
202.174.92.0/22
IPv6:
2402:f100::/32
Signature Algorithm: sha256WithRSAEncryption
5e:77:50:da:b8:13:f1:93:29:c5:5d:22:40:4d:ef:e3:fd:84:
c8:d1:10:6d:39:96:5d:97:f8:36:17:9b:0c:c2:19:aa:95:a9:
af:d8:91:b8:9d:c1:48:11:65:5e:a7:ac:e1:0e:e2:9b:e5:a4:
19:e8:19:4f:f8:04:5a:17:8d:da:46:85:da:a5:28:6b:f0:0d:
51:df:0e:66:10:4f:75:fd:ce:09:35:d5:4d:bf:10:13:b9:40:
85:25:5a:2d:46:8c:68:e4:00:26:53:b6:ab:18:52:0a:64:5a:
0a:4c:9e:ee:9d:57:ca:40:4c:10:c9:d4:ea:26:cc:6a:ba:81:
75:30:9b:f8:e2:8c:84:6c:dc:28:5a:67:f0:50:fa:2a:4a:47:
b2:f0:b6:98:bd:76:7a:e8:43:3d:4f:3c:02:bd:f1:20:55:7f:
e6:cd:16:67:97:b2:e6:08:7e:a0:5d:0b:17:f5:68:70:18:63:
f8:63:43:31:f9:55:11:84:b6:37:82:4f:80:c1:be:8d:2b:08:
ff:a3:29:1e:e2:93:59:92:64:ad:cd:63:0a:8d:d9:bf:f9:ef:
07:34:10:71:6c:4e:c4:42:21:42:bd:6a:6c:f6:c1:6f:3b:86:
a1:0a:5c:8c:41:8a:9b:1b:a3:aa:43:f4:8d:fb:58:55:69:36:
bb:c6:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:34 2025 by rpki-client