Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
File: -gEnQNykk8ziA6-q3o68cZqsI7Q.cer (raw, json)
Hash identifier: WRzaik9DFxsAltdvKFzcMF8OFJDcWv+30PwOAojUaf0=
Subject key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02014D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jul 2024 05:09:35 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 135327
AS: 151328
IP: 103.197.104.0/23
IP: 2400:fe20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131405 (0x2014d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 19 05:09:35 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:a7:c4:ac:3d:c8:4d:02:d2:04:56:4d:03:
1a:5f:d0:e8:23:b2:78:00:4d:9c:26:77:04:67:9c:
08:52:4a:d0:d5:99:08:82:c8:d6:e1:e1:58:fa:ac:
87:d7:f5:73:de:8e:5a:49:25:fd:21:53:4c:39:7b:
5c:72:05:6c:42:c6:ee:76:9b:c8:9e:7f:42:8e:3e:
30:9a:30:59:b9:ee:f5:f8:08:1f:e7:1a:e4:c7:e8:
d8:e8:05:3a:b2:7a:48:da:48:95:95:f4:cc:e7:da:
d3:76:25:1a:e8:98:1d:55:67:3a:4c:d7:97:f7:17:
8a:c5:a5:5d:17:bb:09:fd:2a:34:a4:af:c7:7a:4a:
01:48:eb:8e:65:27:de:14:41:53:2f:23:dd:78:eb:
5d:e1:e8:47:f4:ca:1f:8d:83:fe:91:75:35:eb:6b:
e3:31:36:bc:49:e2:8e:b6:ad:3a:5e:43:3d:cc:ae:
dc:dc:c1:66:34:b6:d4:d3:58:81:2a:21:22:d4:43:
a2:4c:9b:90:b2:b0:f6:e8:63:70:1b:52:d7:01:f1:
d8:d7:61:01:d6:af:52:02:39:e7:43:ec:07:76:33:
6f:88:9f:08:c4:b9:0c:65:97:76:aa:41:67:11:cc:
ce:5f:84:16:3b:6c:b1:ef:fd:b6:ee:7f:42:41:8c:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135327
151328
sbgp-ipAddrBlock: critical
IPv4:
103.197.104.0/23
IPv6:
2400:fe20::/32
Signature Algorithm: sha256WithRSAEncryption
31:6a:9b:a5:63:6d:dd:ca:36:14:79:2c:24:4d:2b:91:94:ad:
ee:64:e5:5b:c9:28:14:37:61:53:61:0c:47:e4:b3:57:9e:26:
f1:d3:25:9e:f7:2f:29:ef:00:74:c5:77:c7:ef:3d:f6:e4:29:
22:9b:64:ab:ea:ed:3a:ef:43:d9:bb:9e:de:75:cd:13:b5:95:
f2:04:69:06:17:97:14:2e:79:78:a1:e3:a2:7e:e2:f6:e8:fa:
48:75:cd:85:b1:85:73:0f:49:6b:c3:b6:30:59:d2:93:26:78:
45:cc:95:36:a0:a5:e4:81:0b:be:02:cf:b4:e3:8e:d5:61:35:
0c:b0:4b:56:8b:04:d8:48:1b:0b:1d:ea:7a:ba:0f:69:e0:b0:
ac:a1:a5:c0:a5:e2:ee:c5:9c:e6:33:db:4d:56:b7:4f:8d:1f:
43:81:02:65:53:c4:8c:78:20:61:5b:9e:ba:09:01:33:54:1c:
1f:8f:1c:72:59:75:9d:fd:2c:a4:59:fd:34:61:c5:9f:23:2f:
fc:59:64:65:5f:ba:d9:9f:95:58:b5:e1:d2:67:ef:84:f2:e1:
a3:d2:bc:94:3c:19:75:40:55:21:75:58:3b:6b:fc:40:ae:8e:
13:91:c6:cd:35:45:62:da:2b:e7:36:9d:d1:9d:f4:5c:c7:ce:
f9:e2:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:07 2024 by rpki-client on console-ams.rpki-client.org