Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.cer (raw, json)
Hash identifier: 5JLCPxFSDhU8xYK11IkDAw7rnsGxeK8l672hbt0G/2I=
Subject key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B9D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Aug 2023 16:18:30 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 140679
IP: 103.142.148.0/24
IP: 103.251.168.0/24
IP: 2001:df3:7a00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113110 (0x1b9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 30 16:18:30 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:fa:f2:01:82:66:bc:ee:57:15:49:d0:9c:
84:51:1f:b2:f9:94:c0:fd:9e:4c:32:00:ae:ab:90:
45:09:ad:b7:db:93:90:a8:71:09:1d:59:26:30:19:
ee:6b:64:a3:c3:63:83:7d:64:47:dc:0c:f0:33:f1:
4e:bd:ee:ed:e5:86:59:7f:18:66:19:bd:ee:33:47:
1a:5a:0c:0b:2d:c6:e3:f5:41:88:f3:e2:d9:b2:60:
76:9c:82:98:10:aa:d2:5c:7d:b3:cf:cd:73:77:3c:
46:b9:a8:ad:c1:ca:b4:51:b8:eb:d0:82:64:a3:5a:
ad:70:c1:2b:5e:cc:16:ba:0f:43:95:c8:9b:4b:42:
51:98:7d:5f:8d:80:c4:c4:bc:f0:c7:d9:00:62:57:
55:97:9b:a1:4c:dd:bc:e5:36:a3:fd:bc:0e:7e:54:
ec:f9:ce:48:9c:f2:e6:da:f4:9e:32:ce:04:09:9b:
1b:1c:5a:db:c8:6d:46:10:2f:41:a5:4f:5a:cb:3e:
db:50:6d:ba:b6:67:b1:99:9e:ee:68:9d:05:6d:a0:
9d:1d:eb:fe:ba:00:3d:b0:38:5c:3e:81:66:a9:c1:
e5:31:f9:ea:3e:f7:c0:83:db:39:5d:5a:b1:22:71:
af:f0:c6:62:d1:cf:bb:03:2d:60:89:51:9d:1a:6b:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140679
sbgp-ipAddrBlock: critical
IPv4:
103.142.148.0/24
103.251.168.0/24
IPv6:
2001:df3:7a00::/48
Signature Algorithm: sha256WithRSAEncryption
19:e4:41:f1:f8:f9:cd:f6:19:b1:bc:05:77:55:40:a2:e0:02:
e5:e5:d9:f3:34:22:30:7b:77:5f:b7:92:d1:4e:24:c0:ce:c7:
00:d8:ab:f1:ce:35:86:9f:82:5c:58:97:2a:df:fa:5e:5e:7e:
09:26:bb:29:1f:67:d2:63:2c:9b:71:94:1f:92:a6:29:e0:42:
3f:d4:95:e3:bd:65:e9:12:19:82:b7:39:5b:a7:51:7c:9c:ce:
4e:b3:d6:d4:6b:ac:07:0f:67:86:49:26:2f:97:20:c2:47:78:
02:b0:3d:86:56:6a:92:2c:d0:27:37:13:27:5d:69:f6:4d:24:
0f:bc:13:f8:70:30:dc:6b:25:82:cb:f9:67:e4:6e:47:06:0e:
04:36:fe:6a:76:46:b2:2e:4d:86:db:cb:af:c8:6a:27:01:69:
f5:8e:d4:b6:ca:c1:ce:74:aa:09:22:db:e7:25:63:d5:7b:b9:
ac:7a:5f:fb:d3:0b:db:ca:a1:d8:5b:69:d4:66:be:56:86:b6:
e3:7e:90:92:5b:dd:12:16:db:57:a1:e6:2f:dc:cf:27:1a:a8:
fc:43:44:03:a9:5d:b9:11:f8:ed:05:b8:58:a3:c6:4f:6f:45:
e8:03:92:3e:ee:22:c2:2d:0d:3e:1f:b1:9f:af:4a:7b:f3:42:
35:4f:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:08 2024 by rpki-client on console-fra.rpki-client.org