Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
File: -rpT9D2gDiGn6veS1I_bdpV6gLw.cer (raw, json)
Hash identifier: 7JxN1xfqYZCcfEJUaw5lJ5XcKo66H3kIkEqgBuTlL+Q=
Subject key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B017
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Jul 2023 19:45:40 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 103.26.148.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 15:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110615 (0x1b017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 13 19:45:40 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:40:d5:7e:fa:90:1d:47:b7:55:0d:6c:8a:
0b:39:48:e9:b4:fe:24:d5:85:8c:d2:cd:71:2d:46:
3c:2d:52:a7:74:67:25:d1:8a:56:56:58:51:c6:b5:
55:91:8c:b2:e3:3b:ec:c2:3b:72:2c:51:b1:35:ba:
d3:74:05:97:2e:a1:9a:d5:15:4f:02:86:bc:7d:50:
23:ed:4b:b3:7d:9b:7e:93:00:f3:a6:64:af:45:28:
61:88:67:c5:2d:a4:de:77:2e:07:b5:ae:b1:bb:80:
57:c6:50:c7:80:5b:16:54:2c:d8:cb:c8:39:77:06:
11:8f:3c:f7:6a:25:ff:79:f7:9a:18:88:70:6b:b0:
32:31:da:52:55:53:1a:43:28:3b:41:25:5e:d4:82:
77:5b:4e:6d:0b:fc:0f:7c:ab:64:95:6b:1e:7d:d4:
b0:e8:87:25:52:11:6f:1a:7e:a8:fb:de:da:07:4c:
dd:58:0e:8a:47:3f:66:e8:a1:09:70:47:e5:1b:6f:
2f:41:f0:3e:8e:8b:79:9d:b3:9a:fe:bb:30:f8:ee:
98:9b:7e:ab:80:68:f6:f7:42:3c:0f:63:f9:60:ae:
0e:e5:b1:c2:23:a5:77:99:02:01:47:d8:1f:ab:c3:
88:9c:cf:0f:92:b6:d4:3d:b9:01:2d:0c:47:29:be:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:fc:a0:63:2a:50:55:4b:c0:bc:cf:d0:68:f1:24:84:d0:98:
12:e6:ad:7a:b0:77:45:3d:92:42:1b:b4:31:4c:38:fb:78:e8:
05:e0:b0:c9:df:73:e4:5a:b8:eb:fc:d8:55:13:07:fb:18:65:
05:c0:75:93:c4:0e:ad:de:98:85:9e:25:4a:17:9d:17:e7:0b:
cf:40:08:5d:06:54:8f:71:fe:ef:88:f8:1a:2f:a8:ab:81:69:
cf:35:1d:b8:2e:d9:6a:8f:81:06:cb:da:63:5c:d1:8b:0b:cf:
77:00:49:07:56:af:00:ab:56:47:20:18:ce:89:d4:0c:54:9e:
ea:00:6d:5d:e1:6a:90:0d:47:94:0f:cf:9b:e9:fc:9b:dc:06:
8a:e4:c4:2a:95:d1:72:21:f2:a4:02:53:f3:c5:86:de:81:b4:
6c:36:d6:b8:a4:22:7e:12:3a:3c:5d:2d:b5:21:36:86:0f:52:
08:17:97:b6:c1:d6:50:fd:b5:4b:76:04:4f:22:bb:a9:ea:dc:
b0:ce:17:bc:a3:5c:f4:46:be:d4:4d:37:e3:e1:c5:ef:57:3b:
5c:24:2e:81:d8:63:40:9a:ac:15:47:52:65:7c:2d:dd:1b:23:
63:ba:26:9a:12:22:8e:92:2d:20:a2:07:a3:a5:48:16:88:6d:
18:cc:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:40:35 2024 by rpki-client on console-ams.rpki-client.org