Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
File: -9GoSKH4mo0k2wtoF6CH-y313wg.cer (raw, json)
Hash identifier: sd34oDz2UQjvw4wqhesuST2zjke5veiqu3pkqmbM8VE=
Subject key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E627
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 24 Mar 2024 18:29:22 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 150779
IP: 103.93.34.0/23
IP: 2400:e260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124455 (0x1e627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 24 18:29:22 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:52:20:a2:aa:44:80:ab:94:7c:ab:7a:1b:
f8:d8:03:5a:9d:94:a7:40:a2:69:3e:02:e1:db:e1:
26:86:24:10:ab:ca:80:13:71:28:11:a8:d0:5b:0a:
02:9a:58:36:2b:df:2c:8b:50:62:fd:0c:2f:4e:57:
ec:5a:58:c3:f5:31:aa:8b:83:59:7c:4d:25:4b:b9:
3b:4b:9a:e6:1c:7a:dd:dd:8d:87:e0:82:13:20:2c:
7d:ea:97:1c:09:aa:1f:20:b2:dc:39:98:bc:fa:4d:
1d:49:8b:88:c4:c9:87:2e:51:aa:18:b1:8a:37:2e:
ac:6d:72:3c:32:98:e8:cd:aa:d3:a6:ac:51:cf:02:
f4:92:49:a5:b8:1e:23:9e:99:fb:f8:21:ea:32:27:
d7:64:a4:a4:34:82:31:e3:eb:d0:53:3c:0e:e7:67:
83:05:41:87:52:fd:d9:da:e5:2c:0e:98:d6:6b:5b:
da:c8:c4:01:e7:40:73:57:11:2f:5e:9f:11:cc:b5:
4b:87:22:8f:bf:45:80:26:e0:a6:52:99:a3:d6:13:
4e:85:37:37:46:b5:0e:e5:01:24:a0:d6:bc:8c:8c:
b8:f9:4d:b8:87:08:63:dc:e5:4d:5f:a9:ad:d2:43:
a8:65:aa:d8:a8:7c:c6:41:af:df:27:ea:2a:ef:5d:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150779
sbgp-ipAddrBlock: critical
IPv4:
103.93.34.0/23
IPv6:
2400:e260::/32
Signature Algorithm: sha256WithRSAEncryption
75:2b:f9:ca:66:e7:a3:b9:07:d5:10:ea:97:d1:ea:0c:05:8c:
a4:ac:97:27:9f:c0:65:1b:d1:b5:8f:b6:29:17:26:98:f7:58:
bc:4a:22:30:3b:1f:63:bb:51:6b:88:3a:3c:93:55:3f:f0:88:
d0:4a:c0:3a:6a:34:23:8e:52:33:56:88:ea:cb:66:e7:88:0f:
a1:65:b8:f4:71:62:45:57:fb:c1:ea:66:25:42:5f:7d:df:61:
44:5b:02:79:da:e6:df:61:3c:1c:be:97:22:44:60:c8:f7:a3:
44:8a:e3:23:a0:3b:51:49:ff:4e:80:be:54:c3:81:05:b4:14:
c8:fe:b3:de:ad:13:ca:0b:71:56:b5:80:e8:c2:e6:3b:26:38:
93:dc:7e:39:02:01:c8:73:bb:25:7f:73:16:98:a8:49:6f:2d:
9b:07:16:2b:ec:5f:e4:15:a9:f9:81:60:73:80:fe:06:da:54:
c7:e9:99:29:22:d4:81:73:e7:60:79:6c:9d:5d:bf:50:71:bb:
1d:1f:68:89:00:fb:5c:e3:df:2e:b6:a0:de:4a:78:e9:1f:61:
ec:2f:1a:c9:9b:4e:03:de:26:de:41:44:3f:54:6c:6a:5d:de:
50:a5:ec:b6:a4:6b:a4:f4:d2:1c:0d:69:36:d1:a1:6b:46:c1:
78:e9:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:08 2024 by rpki-client on console-fra.rpki-client.org