Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
File: -XxrnwabbALLPY6tWvc-UGwIyjg.cer (raw, json)
Hash identifier: 0BlM9ktMeGDmYJMcILQiOOi+ipEBEthU5VJZku64Nnw=
Subject key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021936
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 16:37:55 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 141210
IP: 103.173.188.0/23
IP: 2001:df7:a780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137526 (0x21936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 16:37:55 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:eb:9e:5c:3e:dc:48:00:76:d6:4e:e4:24:
98:6d:c3:57:17:fa:35:91:a2:f5:ff:72:57:22:41:
53:36:6e:21:ef:83:15:7d:fe:6f:80:91:71:b5:5c:
98:29:72:ce:c6:3e:3f:7c:25:2c:a7:42:7d:83:0d:
1e:65:71:47:d3:9a:8a:25:7b:58:58:e6:07:8f:58:
13:55:6e:f0:14:e8:4b:68:0f:2a:73:ce:6a:37:aa:
fa:53:f1:dd:f4:c3:93:e0:a4:78:98:28:7e:ed:e9:
00:8a:33:9e:c3:2c:06:10:8e:3f:a5:09:8b:63:7e:
55:1b:d1:2b:70:ff:31:58:58:18:bd:a3:9c:5f:75:
c3:db:37:b0:99:b6:1d:d2:d4:5a:ec:e2:9f:06:b1:
5e:65:dd:80:cb:09:76:7e:0a:bc:44:61:07:71:8a:
f2:68:0e:eb:03:6b:91:16:a1:2a:c3:f6:2d:6f:c3:
a3:fa:e4:90:17:6e:4b:ee:d2:3b:c7:1f:4e:24:ab:
c3:c2:3a:a2:ab:78:4e:50:b4:af:7e:e5:ba:a8:e1:
dd:77:bc:7a:1a:20:b3:b2:92:cc:38:85:64:11:4e:
d0:de:49:0c:c7:62:81:36:3f:44:03:f9:b6:9c:07:
66:4e:3e:fa:8d:89:d6:63:1f:18:bf:04:eb:28:1c:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141210
sbgp-ipAddrBlock: critical
IPv4:
103.173.188.0/23
IPv6:
2001:df7:a780::/48
Signature Algorithm: sha256WithRSAEncryption
35:46:d1:fd:e0:e3:b3:35:09:df:ac:8d:1a:2c:9e:e9:ce:69:
c8:af:79:b9:ad:e2:29:22:e4:04:89:e5:0f:9b:83:5d:3e:51:
64:ff:b3:e7:ee:4f:61:54:5e:05:2f:f9:e7:23:82:f7:9b:0d:
8e:96:f3:f4:cf:42:40:b2:c1:18:cf:f3:1b:2a:c3:e6:c1:25:
fe:f8:3a:bd:79:04:78:a0:71:1a:64:87:53:bf:cd:b8:e9:b3:
d2:c5:9d:78:ae:cb:a3:b9:46:25:12:00:cc:63:1b:3f:da:a0:
1b:b0:23:d6:c1:07:7d:ad:3b:54:5b:6a:a8:c6:d3:ca:d5:67:
69:33:2f:bc:9a:91:e9:6b:dc:99:48:ad:37:12:a2:af:76:98:
84:ac:35:d7:9b:3e:c4:ff:7d:cb:86:a4:7e:fd:ef:17:77:9e:
8e:7f:85:f6:c5:8d:26:3d:77:99:88:b1:66:be:13:bf:47:17:
2f:d0:a5:68:59:16:c9:f5:a0:a5:77:eb:0a:d9:5b:f3:fd:d7:
fa:08:6e:06:66:54:a3:1d:14:69:3a:bf:3b:41:b5:12:de:fc:
f5:c9:cc:ff:95:a8:65:df:4e:38:99:a3:5c:6b:93:61:cb:df:
12:65:b3:a9:d8:ab:57:4d:cb:f7:55:f6:12:92:37:d1:fe:0d:
eb:3d:28:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:28 2024 by rpki-client on console-ams.rpki-client.org