Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.cer (raw, json)
Hash identifier: ZO0LvZo/VK1KnQXPN84HsjBrzsP0rVOwiDyvwkOVlH4=
Subject key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A845
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Jun 2023 14:54:49 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 142133
IP: 103.166.172.0/23
IP: 2407:59c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 19:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108613 (0x1a845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 14:54:49 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:ca:95:19:db:32:8a:1e:fb:f3:66:8d:ef:
1c:12:05:50:01:ac:4c:05:cf:37:08:a6:12:b5:b6:
b1:d0:43:ba:ca:7d:20:14:32:a7:c4:38:10:ba:60:
03:43:ef:9f:64:06:c8:ec:fb:73:2f:c7:13:55:b7:
24:f5:cb:8d:7b:91:02:7b:76:04:14:fe:ed:47:51:
05:2d:e5:83:04:80:c7:c9:5a:bc:f3:89:4a:50:04:
96:f4:d8:7d:02:79:7f:4a:98:cb:9d:f9:25:16:a4:
f6:9a:2d:7a:8e:a6:02:1f:97:97:27:d9:ec:d8:7e:
6b:bd:eb:69:16:cf:d9:6c:39:c9:91:42:3d:0c:e6:
8c:76:4a:d6:aa:16:2a:e9:41:d4:69:d0:1f:54:03:
0d:ae:38:a7:64:ba:6e:06:4d:ad:2a:e7:34:59:ac:
f3:ae:d4:38:a3:05:46:be:ef:ba:6d:47:fa:a6:f8:
20:30:72:1a:e4:ea:96:76:f9:e6:3a:91:1e:55:f8:
e0:8c:8a:d9:f0:a9:4b:65:df:40:62:e4:ca:6f:47:
03:cc:a6:81:76:91:01:b7:16:74:9d:e4:2f:7a:fb:
6a:99:8e:7a:42:9c:29:f4:e0:96:f8:c8:d1:57:ef:
be:ca:3b:79:e5:62:39:bc:c5:cf:37:95:c1:a6:62:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142133
sbgp-ipAddrBlock: critical
IPv4:
103.166.172.0/23
IPv6:
2407:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:66:e0:cb:ba:9c:f3:16:55:31:39:d3:ac:ec:15:a7:07:76:
5c:3a:d2:a3:8d:3f:41:c9:69:18:4e:aa:f7:05:df:65:3e:3e:
fb:ca:2f:7f:f8:e2:00:db:c9:34:ce:23:dd:c7:06:d4:03:32:
6d:d8:0a:42:62:b2:a3:9f:0c:63:4a:93:25:ad:4d:7e:2c:db:
0d:9e:36:bb:ba:d7:cc:12:fd:29:88:be:68:f1:7b:26:8a:ed:
3e:68:18:8c:aa:4d:f4:3a:76:5b:64:98:2d:39:26:83:51:00:
23:3c:88:4d:4a:3a:b2:ce:0a:b6:2f:dc:78:82:c7:f0:64:47:
9d:72:dd:dd:5a:e1:d5:55:9f:6c:e7:c9:02:e1:4b:07:13:86:
66:35:9e:cc:4e:2c:80:ea:f6:a1:45:7f:95:7a:0c:6b:89:3a:
f3:49:70:3f:a1:5d:2e:cc:56:f6:12:63:fb:c1:3c:aa:f6:9a:
35:3d:6d:0a:dd:a9:db:ee:d8:33:a6:9a:9e:a5:d3:91:8d:aa:
2c:0c:4b:f6:d8:2c:dd:f4:ac:63:a3:fa:58:62:54:ba:59:d8:
e7:07:83:2d:5a:58:a6:76:9f:ac:2c:57:fc:43:40:15:d8:b9:
3f:f7:fb:11:5e:6a:5d:cf:4c:d0:4d:f5:75:4f:51:f4:60:4c:
44:00:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:27:06 2024 by rpki-client on console-fra.rpki-client.org