Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer (raw, json)
Hash identifier: epRBUoCZFDNzz+ozJYDYPKnAq7MSzOCCYEbsNPzARRM=
Subject key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020122
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Jul 2024 12:51:02 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 38744
IP: 49.0.32.0 -- 49.0.55.255
IP: 117.58.240.0/21
IP: 2404:b580::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131362 (0x20122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jul 18 12:51:02 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9122219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:fe:77:80:c9:cb:46:cc:5a:7e:b0:b6:3f:
96:77:e0:5e:93:cd:3e:83:63:3e:17:c7:a6:6a:5c:
d9:86:fd:ce:d0:f8:85:00:fd:9a:50:b6:71:0d:55:
cf:78:40:ae:4c:cc:07:a6:01:88:01:ce:a4:88:c7:
72:6c:d4:22:65:6e:56:d8:26:3e:1e:60:6c:fd:f6:
ef:89:8e:2c:71:30:c7:62:78:1b:6d:10:76:93:7d:
ed:ac:ec:7d:f3:93:fb:b7:22:85:fc:f0:ed:6a:c9:
84:c4:be:a8:54:25:dc:e2:1f:39:f2:da:ed:60:c1:
ac:bc:03:ec:55:4c:77:db:f9:b2:6a:bc:83:1f:60:
a8:bf:25:55:ea:ae:d5:82:22:c1:a9:9d:09:3b:2a:
e2:89:aa:7a:f7:38:bf:ac:c0:09:80:25:c2:05:ff:
9a:af:37:36:e3:bc:d9:49:d7:e2:03:eb:5d:95:2c:
34:93:06:2a:6c:a7:49:98:d6:9f:66:d2:0b:b2:6a:
28:dc:8d:45:5f:11:8d:8f:f2:8b:8a:21:07:dd:ab:
ae:cb:a7:ea:68:3c:d7:96:a2:df:64:30:36:30:0b:
ac:6c:d1:49:3f:88:fa:b6:a7:83:94:ab:64:5d:0a:
8a:17:b4:34:b1:fd:e9:66:db:9a:45:97:81:74:a9:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38744
sbgp-ipAddrBlock: critical
IPv4:
49.0.32.0-49.0.55.255
117.58.240.0/21
IPv6:
2404:b580::/32
Signature Algorithm: sha256WithRSAEncryption
2b:7b:5b:73:a1:11:ab:17:2d:31:4f:97:9b:86:2c:e4:9d:13:
63:e3:85:25:f5:67:7a:fb:44:d4:46:9e:c4:a7:21:a7:46:b3:
8a:24:0c:3c:62:67:04:ae:c8:d7:01:d4:63:b1:c5:23:8a:dd:
70:0b:67:4b:98:62:ee:07:56:cf:13:9d:3e:1c:d3:c4:19:7a:
64:f2:ce:ec:0e:d1:11:96:40:ce:10:d1:fa:e5:e6:43:1c:1f:
8f:de:3e:d6:29:41:35:c3:82:3b:fb:a3:a2:59:46:5e:13:6e:
da:a0:89:72:37:ad:24:d3:34:43:38:ae:45:cd:40:86:36:ac:
49:50:61:a9:77:16:49:a4:d6:7c:ae:26:eb:b0:84:76:70:bf:
5a:ab:a0:bc:f2:36:00:8f:d4:89:2b:79:34:fc:52:07:20:12:
d4:fa:9d:27:0d:c9:78:f6:86:ad:4f:b7:f8:ab:eb:c5:e2:9d:
4c:b1:c7:95:41:fa:2c:10:8e:c5:7b:71:ac:96:27:41:2a:cc:
75:19:e8:12:db:ac:15:12:da:50:24:54:5c:29:05:75:2b:f2:
36:61:b7:72:32:1a:e6:73:ff:37:18:91:c1:89:cd:89:b0:62:
34:f6:a4:16:cb:db:d0:d8:aa:c3:75:49:b5:04:82:06:49:b9:
1d:92:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:17 2025 by rpki-client