Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
File: 125W2VTMXAD-XW6t2N9QJypb3yk.cer (raw, json)
Hash identifier: ZhBbhhj1RqJ3+K3QbjPhas+clBsliqk9PVGguG3w304=
Subject key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CBD4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Nov 2023 18:24:30 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 138427
IP: 103.125.82.0/24
IP: 2001:df7:2700::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 18:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117716 (0x1cbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 20 18:24:30 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:a7:f2:04:c4:c0:51:95:0c:88:76:62:6f:
e9:f4:b6:8d:28:1e:14:23:b0:46:4a:c5:12:b2:98:
9b:1a:27:f8:cf:cc:ee:67:d9:70:60:22:f3:f0:11:
c8:c4:d7:d0:75:47:28:52:0b:b1:c5:24:0d:a4:30:
2d:c8:9e:e1:8f:30:5a:fa:42:ce:b3:cc:28:38:8c:
1f:d3:1a:72:1c:af:51:f8:d4:2c:3e:12:17:c7:5c:
7e:f4:71:76:38:25:f2:22:27:4e:7d:22:45:04:52:
4c:a0:8e:1c:32:88:00:f0:f4:f6:3a:c2:ae:a7:2d:
a8:47:7a:23:6d:69:e2:49:a4:ba:15:09:35:15:5b:
b8:1e:23:47:36:1d:c2:77:3f:97:de:88:a0:35:32:
36:7d:52:55:78:d0:f6:e0:be:72:cd:41:c8:4e:74:
eb:88:64:4b:39:f1:bc:ff:ed:73:07:05:f9:fb:32:
0c:81:ab:ba:a3:f0:23:52:f5:84:77:82:b0:7d:f6:
be:9d:9d:98:45:11:3f:68:a3:3d:b6:f4:4c:ab:ff:
dd:4a:0b:f1:49:22:9c:01:d7:05:ab:1f:1b:32:32:
f9:c8:9d:38:54:cd:c5:08:a3:76:1b:19:95:f8:f2:
44:be:a0:7f:de:3e:85:f1:7b:e8:88:05:ef:5d:75:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138427
sbgp-ipAddrBlock: critical
IPv4:
103.125.82.0/24
IPv6:
2001:df7:2700::/48
Signature Algorithm: sha256WithRSAEncryption
24:0b:c0:40:f7:cc:5a:57:ff:03:cb:9f:6b:d2:a9:d9:66:c0:
1e:f6:4e:74:95:ef:5d:d8:2c:09:33:b3:da:e6:b8:7f:ae:7a:
63:e7:50:8f:11:23:61:59:90:a6:d9:40:f7:79:a9:25:c5:95:
ad:21:31:fb:32:67:7e:b1:07:25:6d:08:f2:6c:e0:2b:0b:9e:
a1:69:d0:81:19:d0:16:69:0d:96:70:bc:73:94:59:35:0a:5a:
35:13:22:ea:f8:77:c0:db:c1:14:65:bb:ae:2d:13:23:13:dd:
15:dd:3d:6c:44:d7:68:26:73:5a:5a:fb:85:2d:db:c3:75:9f:
46:2c:09:03:93:a1:6a:94:9a:10:4a:16:34:b6:57:3d:b1:66:
19:02:f2:5a:dc:af:71:fd:d2:de:d1:dc:e2:43:36:43:f6:ee:
1d:84:6a:f7:82:8b:fb:b0:a6:c4:ae:20:38:c0:f5:a9:0f:6b:
97:12:dc:68:30:a8:bb:0b:4d:93:55:5c:a1:cc:25:a2:ce:f3:
af:b5:a2:a6:10:8c:4a:3c:f5:dd:88:23:5c:e7:1c:0e:65:df:
76:12:76:c6:77:7d:90:71:94:2b:68:61:29:e7:4d:88:d2:fe:
90:dc:0c:1d:04:e5:f0:57:cb:b0:81:1b:2c:ec:ec:41:4c:47:
42:24:fa:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 19:13:36 2024 by rpki-client on console-fra.rpki-client.org