Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
File: 125W2VTMXAD-XW6t2N9QJypb3yk.cer (raw, json)
Hash identifier: MUTST/YGnrsW2ssC4H5GI5yBe0rvAL+wlb1igRoMPb0=
Subject key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021583
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Oct 2024 19:32:35 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 138427
IP: 103.125.82.0/24
IP: 2001:df7:2700::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136579 (0x21583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 23 19:32:35 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:a7:f2:04:c4:c0:51:95:0c:88:76:62:6f:
e9:f4:b6:8d:28:1e:14:23:b0:46:4a:c5:12:b2:98:
9b:1a:27:f8:cf:cc:ee:67:d9:70:60:22:f3:f0:11:
c8:c4:d7:d0:75:47:28:52:0b:b1:c5:24:0d:a4:30:
2d:c8:9e:e1:8f:30:5a:fa:42:ce:b3:cc:28:38:8c:
1f:d3:1a:72:1c:af:51:f8:d4:2c:3e:12:17:c7:5c:
7e:f4:71:76:38:25:f2:22:27:4e:7d:22:45:04:52:
4c:a0:8e:1c:32:88:00:f0:f4:f6:3a:c2:ae:a7:2d:
a8:47:7a:23:6d:69:e2:49:a4:ba:15:09:35:15:5b:
b8:1e:23:47:36:1d:c2:77:3f:97:de:88:a0:35:32:
36:7d:52:55:78:d0:f6:e0:be:72:cd:41:c8:4e:74:
eb:88:64:4b:39:f1:bc:ff:ed:73:07:05:f9:fb:32:
0c:81:ab:ba:a3:f0:23:52:f5:84:77:82:b0:7d:f6:
be:9d:9d:98:45:11:3f:68:a3:3d:b6:f4:4c:ab:ff:
dd:4a:0b:f1:49:22:9c:01:d7:05:ab:1f:1b:32:32:
f9:c8:9d:38:54:cd:c5:08:a3:76:1b:19:95:f8:f2:
44:be:a0:7f:de:3e:85:f1:7b:e8:88:05:ef:5d:75:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138427
sbgp-ipAddrBlock: critical
IPv4:
103.125.82.0/24
IPv6:
2001:df7:2700::/48
Signature Algorithm: sha256WithRSAEncryption
c3:c4:75:76:74:8d:f0:6d:63:88:c7:10:3a:f7:76:05:46:12:
5e:33:61:f5:da:9f:12:3a:b1:b7:bb:70:59:7a:c8:42:f4:2c:
85:ab:26:a0:10:8f:3a:2e:60:c0:97:d2:49:e0:8c:4f:c7:5c:
13:7e:61:51:fd:8d:aa:fa:15:ad:e1:f8:9a:9b:b8:17:ea:e9:
c0:97:4a:42:2f:e6:4c:28:67:af:1b:d7:b6:3d:38:cc:5c:28:
87:47:77:ed:0e:ac:43:9e:53:68:07:f0:82:d2:07:33:7a:d1:
0b:91:17:5c:8b:a5:0a:70:d7:55:9b:31:76:a7:b1:3e:2b:81:
c3:47:f1:f3:7e:1f:fd:a9:6c:f1:69:6b:09:0f:b7:01:6a:50:
77:9d:f7:b0:9d:31:c1:9a:65:fd:42:c4:ed:99:b1:bc:34:1d:
fe:e5:f5:bc:29:b5:33:c9:6c:db:d8:1d:ac:db:ca:82:e8:57:
56:f5:65:72:6c:da:de:e3:21:70:56:05:18:77:c1:34:5c:1a:
9b:52:ab:79:22:36:7a:7a:e5:fb:78:1e:69:3d:fb:44:47:db:
c5:5e:d7:5e:8b:5e:2d:12:69:2f:b8:25:a0:53:c2:3c:94:d9:
03:e7:94:a7:e5:76:a7:02:8f:3f:71:70:58:0a:17:ed:b0:68:
1d:b1:6e:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:09 2024 by rpki-client on console-ams.rpki-client.org