Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
File: --bA8ysvL8RXYKA0LkO79VK03oU.cer (raw, json)
Hash identifier: tl978dLeTrMfrHbSdrvUW5XQ6hfC9hfQ7mHOmQKFcRw=
Subject key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CB25
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Nov 2023 12:56:45 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 38902
AS: 55448
IP: 27.50.4.0/22
IP: 202.52.56.0/23
IP: 202.174.92.0/22
IP: 2402:f100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117541 (0x1cb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 15 12:56:45 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:15:e7:bb:29:33:b7:98:c3:79:dd:6f:31:
f6:de:dd:17:a8:de:6a:b4:4f:ec:1e:c5:ca:86:eb:
87:76:6b:0f:c3:9d:5b:bd:49:a0:ed:c1:3e:44:81:
8a:13:7c:98:6a:82:07:1f:89:10:4e:4c:f0:00:e4:
03:e3:ce:26:b5:5a:36:b4:28:2d:09:be:bc:c2:a4:
b8:cb:f2:2c:c8:71:d6:ef:43:d4:cb:c9:b6:b6:02:
5c:47:27:a4:3a:18:f9:87:0b:da:b1:48:7b:35:b5:
da:df:43:37:e8:06:21:41:e4:db:a4:86:8e:14:fa:
96:83:54:bb:ea:a4:dc:ac:f8:93:79:69:25:4f:ad:
e8:ab:e6:e3:cf:d9:29:6f:4d:b0:93:41:66:0b:89:
40:c3:61:f6:32:ed:69:37:e3:0c:c7:e0:48:88:25:
43:02:2a:77:f6:3c:ad:06:b5:fe:7e:cd:6a:05:b4:
92:4f:5f:0e:1c:b5:63:cf:78:c3:93:50:7d:c1:21:
c6:93:15:81:0a:98:78:b5:67:af:66:3d:ae:49:49:
21:4f:cb:98:66:5c:15:ef:9d:d3:65:a8:2d:37:53:
e4:55:70:72:85:fb:b5:9d:eb:00:3e:37:a6:d8:dd:
cc:ca:6f:10:ae:3e:bc:9f:7c:be:2f:9f:c2:39:9a:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38902
55448
sbgp-ipAddrBlock: critical
IPv4:
27.50.4.0/22
202.52.56.0/23
202.174.92.0/22
IPv6:
2402:f100::/32
Signature Algorithm: sha256WithRSAEncryption
2b:4d:0f:f4:06:32:f7:2b:d3:22:07:6c:83:b1:a8:be:ec:f2:
71:33:dd:ff:82:9a:22:ba:9d:0e:d1:2f:74:0a:4d:7a:7d:e2:
c3:d3:cf:fe:83:65:15:ee:e2:b4:b1:56:7a:30:63:1c:e1:d9:
c4:d1:5b:c6:75:c1:c5:15:0c:71:b5:b9:1a:32:42:9d:d0:b8:
9a:8c:a3:3e:7a:22:47:55:9e:71:89:41:bb:0a:cc:84:b0:26:
e0:4c:84:66:1d:62:37:07:ac:03:a4:0e:80:63:3f:54:cc:b2:
52:84:04:b2:4c:67:41:e6:45:85:c6:1a:21:c1:73:9e:e5:97:
fb:40:1d:bd:28:ab:05:0d:44:87:1c:a2:28:7b:26:c0:91:e7:
3f:19:22:70:10:5b:fe:1c:c8:2f:13:f6:f1:30:16:1f:3d:15:
0a:13:23:e4:8f:39:a7:d4:c8:6a:76:35:fe:07:5e:ca:aa:e2:
58:08:a2:49:37:80:5a:74:62:e8:37:c8:2b:dc:87:16:ba:ee:
a9:ad:f0:ba:14:5e:c0:d5:48:21:40:c3:c3:0f:fc:de:73:49:
86:d1:3d:37:ed:ef:52:ee:93:95:14:2a:03:fd:a6:bd:9a:84:
2b:f2:7c:db:e0:cc:c3:ca:3a:8d:92:67:d5:7e:73:ba:50:3c:
d9:77:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:35 2024 by rpki-client on console-fra.rpki-client.org