Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
File: 08ZsJqn9G558RVvds1FZaI0BQP4.cer (raw, json)
Hash identifier: Bd6v8Hgo4h0dQO2Z3K1O4/c6DIS0W647ww0NqAHhS+U=
Subject key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF1A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 May 2024 16:10:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58869
IP: 103.248.128.0/22
IP: 2001:df5::/48
IP: 2403:5f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126746 (0x1ef1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 16:10:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:fc:b5:d7:8c:bd:3f:3d:6b:86:17:18:a9:
86:0f:f9:45:0a:13:c8:0e:50:1d:c5:86:8e:46:a1:
7a:25:30:f3:ac:55:d2:1d:ce:16:67:82:a8:40:0c:
44:5a:90:c6:7c:3a:b5:dd:20:cf:4f:b0:f9:26:0f:
5c:2d:cc:3a:f6:d1:a7:ec:53:02:a5:08:23:a5:d8:
52:8e:f2:a9:a6:6f:56:35:ad:72:9c:fa:76:28:b7:
40:2a:84:e4:78:88:82:0b:3f:24:4c:49:d1:05:31:
c5:cf:91:c2:e0:8f:5c:a8:c1:e6:d7:8e:4c:80:aa:
3c:87:6d:ed:b7:96:b6:48:c5:95:f6:fc:1a:a9:1c:
5f:89:b3:62:96:92:f3:84:9d:aa:82:f5:66:d3:6d:
13:ae:02:d8:f4:f6:08:44:b0:74:20:f5:08:99:1d:
44:8c:a3:48:fc:92:73:d9:9e:73:90:0e:a9:cd:1a:
6b:04:25:1b:96:b0:ea:00:47:93:e8:13:f5:90:67:
34:94:c3:05:fc:9b:e4:3d:94:d7:cd:0b:2f:94:27:
2a:e7:18:65:6b:4b:bd:23:d6:6f:9d:b0:fa:44:0b:
80:59:70:c7:21:e6:04:8d:88:6d:3f:44:b6:a3:2e:
da:74:b4:95:9b:46:40:18:2c:76:19:9f:75:c8:e1:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58869
sbgp-ipAddrBlock: critical
IPv4:
103.248.128.0/22
IPv6:
2001:df5::/48
2403:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
27:a7:67:d0:a2:89:b8:c9:95:58:2e:78:4c:a6:99:83:19:6c:
12:0e:18:5b:36:2c:92:5d:75:e0:f7:40:7e:99:78:ca:c3:cf:
3d:f1:42:a1:62:ff:95:f0:75:05:36:c2:95:8b:48:79:82:ef:
96:9d:9e:8d:e8:66:ac:0b:7d:cb:6c:b3:66:35:92:2e:b9:77:
ff:9a:4a:f1:d3:39:01:42:b8:95:4e:0b:21:b9:8d:74:31:eb:
4d:7c:d2:87:c9:27:3b:b3:2a:94:4e:85:80:60:a0:b9:85:fc:
e2:8a:51:a3:af:e1:8f:b4:85:24:17:43:ab:c7:76:b5:e8:e5:
88:73:66:ae:a9:db:27:8a:98:44:04:1d:55:ca:a6:22:e8:43:
c0:56:18:8f:fd:d1:11:fe:20:fa:8c:24:b2:59:55:97:c0:ef:
c7:2f:8f:25:1b:eb:9f:48:e9:20:e0:0e:fa:6d:e4:18:c9:50:
32:09:44:a8:5c:8f:53:d0:28:86:c0:85:15:ef:06:8f:00:e6:
52:c7:51:38:67:be:b6:c2:d1:be:53:35:79:ce:2a:bb:07:33:
74:e0:7c:fc:30:97:21:20:d3:e0:eb:47:f9:a6:1b:7e:71:66:
10:9c:dd:8c:f7:10:9c:75:6f:56:25:54:fe:30:c8:cb:e4:d3:
6d:28:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:23 2024 by rpki-client on console-fra.rpki-client.org