Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
File: -r3gfSxVjb3PPDIAdre1X9-gR0A.cer (raw, json)
Hash identifier: Dzj3S85eqT4Un1r4CHqopnWrOqmJj8jV+PbqHXSGWvo=
Subject key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CE51
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Nov 2023 21:19:09 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 139790
IP: 103.145.64.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118353 (0x1ce51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 30 21:19:09 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:c0:5c:01:80:22:7f:aa:6d:06:ae:6e:f1:
03:dd:3c:0e:59:fb:f5:cf:5c:00:ee:76:71:a5:6a:
b4:5f:08:f8:c9:cc:2c:74:51:24:bb:76:88:58:c9:
f5:21:bd:9d:38:b2:80:09:f5:5c:27:eb:42:b7:1f:
d1:f3:1d:61:d2:90:fe:64:fb:30:ce:1a:bd:38:a4:
16:65:18:39:6c:d9:25:db:61:0f:1b:11:65:fc:73:
08:12:ef:21:1d:4d:d3:c4:5d:b8:ca:8b:77:e0:67:
c4:40:df:ef:06:1f:e3:58:45:96:8b:a8:28:86:7c:
53:03:4f:b5:6c:9d:ff:b6:37:98:9b:0b:67:e4:fd:
62:4d:2c:8e:4d:f9:68:c9:0c:d9:e1:85:94:93:15:
91:74:99:e9:9b:f1:45:5a:c1:ff:51:53:aa:1d:2d:
ac:3d:80:7c:22:d7:54:48:5b:6f:fc:87:c8:69:9c:
5c:88:54:dd:65:9e:75:af:65:7c:7d:a4:66:aa:0f:
a1:3e:26:c2:86:08:1f:2e:69:ec:c1:c1:61:ab:e3:
21:b8:3f:6c:4a:f5:bc:44:b3:c6:6c:7a:6e:78:66:
a5:89:c8:2e:5a:2f:e4:87:2e:36:43:64:de:57:55:
59:ca:e0:07:a9:e3:52:83:b7:a7:d2:a0:77:c5:d3:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139790
sbgp-ipAddrBlock: critical
IPv4:
103.145.64.0/23
Signature Algorithm: sha256WithRSAEncryption
74:1b:fb:aa:c9:40:9a:45:08:ee:0e:2e:85:99:ea:d5:37:56:
31:99:96:eb:1c:11:46:9a:cf:a0:5d:50:cb:54:78:40:22:00:
b7:d7:18:11:c2:31:2e:d0:0f:81:64:9f:42:fd:7e:c9:d6:c5:
94:74:0f:82:90:e3:07:0e:8f:4f:b1:07:b2:cd:0e:b7:79:ca:
41:85:9b:6a:0e:26:27:a1:19:ca:69:d3:6f:7c:23:d6:fc:9c:
24:20:e4:b1:40:2f:5a:65:0b:9e:ea:a0:34:9d:3f:57:ce:00:
74:ec:04:fe:78:6e:27:de:14:df:ef:a3:c7:64:41:86:58:84:
f2:c0:82:f1:ab:cb:ba:01:f2:96:2b:a9:5e:6b:07:02:65:09:
0b:e0:36:e7:f4:7e:f7:8b:41:a5:2b:ee:67:4d:12:d9:eb:f5:
d3:56:fb:21:cf:20:51:f2:23:40:63:2f:9f:39:00:a9:eb:49:
33:da:d3:4f:2d:f3:34:b2:1f:8a:75:64:00:64:94:ac:77:18:
ce:93:7f:41:06:6d:ba:39:15:55:76:3a:81:15:57:34:e8:8c:
02:32:ae:83:d5:6b:5f:10:0a:4a:3b:ec:23:a4:3d:5f:ac:25:
2e:48:1a:71:36:84:c1:6b:f1:75:f6:df:6c:6c:af:59:bc:85:
37:a8:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:40:20 2024 by rpki-client on console-fra.rpki-client.org