Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer
File: 0Iw24m8k-51RTztAqON6mgS1gCU.cer (raw, json)
Hash identifier: gKLi8SQRhOWAut09ItqVMlwQt+GD516DRG0vi4a/1hI=
Subject key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CEB4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 14:37:12 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 45500
IP: 123.108.104.0/22
IP: 203.89.156.0/22
IP: 203.118.243.0/24
IP: 203.217.141.0/24
IP: 2402:ee00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118452 (0x1ceb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 14:37:12 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:a9:72:59:fb:a3:93:83:54:f9:25:65:1b:
5b:34:7a:63:f2:7b:b4:6e:e1:75:78:e5:c2:ac:de:
03:67:83:42:f4:3b:bf:77:07:67:d8:45:26:19:21:
e2:b2:a3:85:b4:48:45:d5:2d:e1:fd:a0:4d:af:a0:
f8:84:88:c4:4a:3d:5d:de:96:57:70:ca:d8:48:91:
42:79:8d:1c:f8:6e:2c:3d:05:af:fc:fb:10:df:75:
e4:20:1f:f0:bf:be:b6:6f:f3:c1:29:f2:7d:74:15:
ce:a1:15:01:a2:1e:bb:57:e1:2e:68:e4:86:e6:f3:
ec:4b:14:e3:4a:88:9b:9d:69:be:37:b5:c1:68:f9:
47:d8:56:ab:51:9a:92:92:ac:c2:29:7d:7f:45:f2:
b4:99:6e:64:97:27:c6:22:5f:56:f1:03:0d:5b:ca:
b0:b7:62:e4:32:7c:e1:8e:92:3e:de:1f:ea:82:6c:
f5:44:64:95:0e:86:ec:e4:9f:03:c1:91:c9:63:f4:
7f:78:60:1f:09:4d:6b:76:d7:97:11:95:f3:dd:70:
ac:9a:7b:78:12:67:75:23:8e:57:fd:5f:cf:42:55:
61:93:e1:23:44:24:18:ec:f2:9c:bb:89:49:34:da:
d7:74:51:6c:b5:2b:f0:17:0f:20:ce:55:7e:eb:97:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45500
sbgp-ipAddrBlock: critical
IPv4:
123.108.104.0/22
203.89.156.0/22
203.118.243.0/24
203.217.141.0/24
IPv6:
2402:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
42:07:b0:bd:95:e4:50:4a:79:31:34:f4:41:c0:c4:e3:a9:dd:
d9:06:2c:fa:11:75:48:77:50:4c:2d:4b:b3:7e:61:75:2f:fa:
d7:77:44:07:09:31:52:66:11:c7:d4:c2:cc:e2:9d:92:b6:80:
9e:95:62:66:7a:a0:db:86:e1:85:37:b0:b9:e6:2d:93:58:6f:
1c:41:a7:df:b7:51:30:4a:d8:2d:cd:2a:44:5a:52:09:c3:8c:
1b:99:88:5e:b4:10:8a:47:ac:90:b6:c5:7a:65:e1:fa:37:af:
ef:2c:c5:8a:6a:d5:39:5d:20:05:05:92:a4:fe:61:b5:1c:1d:
2c:65:4f:8f:c0:c4:f6:04:fb:dc:8b:f9:0d:ba:78:03:81:20:
9e:4a:bc:7b:00:72:b4:f2:22:86:df:b7:dc:f1:f3:42:af:a6:
4c:5c:e0:fe:98:ed:d1:ce:20:47:31:d3:55:57:d7:b4:0d:59:
33:5c:02:a0:b9:5c:d7:c1:e4:67:5e:4c:18:b8:dd:ce:27:c7:
3b:a0:e9:bd:17:c9:76:1b:9c:09:8b:56:d6:d8:5b:d4:1d:72:
36:b3:b3:a7:1a:86:0a:59:f3:37:ff:31:e7:36:65:d1:ce:b8:
fe:76:e0:30:dc:9a:83:2f:9c:74:ec:47:ea:d1:52:45:b6:29:
5a:5e:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:44 2024 by rpki-client on console-fra.rpki-client.org