Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
File: 1Hn1NF93o5en0pzMzvEk3B3_cro.cer (raw, json)
Hash identifier: jqFEzTCtt+bZ4iSI3ta5LlicfVR7QkJxVAFSINvUGl0=
Subject key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D0BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Dec 2023 17:57:54 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 131254
IP: 202.137.224.0/24
IP: 2001:df3:9e00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 13:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118973 (0x1d0bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 8 17:57:54 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:68:24:e4:9f:47:df:15:34:ce:e4:48:07:
53:0a:77:c6:a7:d5:e1:da:5f:e0:37:bf:be:8f:d3:
0c:d1:cd:bf:5c:e5:b8:0d:3d:22:49:c4:e3:ec:cf:
6e:de:a8:20:61:fc:4d:27:1e:f6:43:cf:58:1f:6c:
1d:53:94:a0:ff:89:65:78:50:09:35:e8:a4:6b:bb:
57:b2:b2:6a:ee:40:6f:83:24:24:6e:03:6d:60:8b:
e9:e4:2e:60:54:a8:36:92:89:c3:0f:0c:c3:97:8a:
cf:f5:5e:b9:35:46:a4:a7:02:f8:3e:af:5c:ef:a5:
71:57:08:47:58:bf:c2:57:92:f8:91:2b:d0:79:92:
70:9e:41:0f:a1:5b:40:2a:1f:90:e6:b6:f0:95:77:
b9:36:4c:60:47:b7:55:c3:a0:97:17:db:7e:11:16:
dc:50:73:f2:15:f8:a5:67:d4:46:bf:47:50:81:fe:
6f:6b:a1:75:2c:01:3d:ce:04:0e:01:9b:57:58:b4:
4d:90:bf:42:7e:c9:07:f8:6f:bf:03:0f:4e:ea:ad:
5f:cf:a7:c5:8f:93:e3:c1:ed:e3:19:ec:f3:09:5f:
1e:44:a3:48:e3:57:d9:12:f4:9b:b4:6d:e4:a6:cf:
08:a9:9b:f1:07:b4:4e:29:03:ba:79:12:32:70:95:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131254
sbgp-ipAddrBlock: critical
IPv4:
202.137.224.0/24
IPv6:
2001:df3:9e00::/48
Signature Algorithm: sha256WithRSAEncryption
3b:36:e4:56:44:5d:28:f7:68:dd:15:ac:63:bb:34:2f:bd:06:
9c:fb:99:f5:91:7c:c7:cc:73:60:f0:f4:ed:fc:43:87:c1:7b:
a3:7c:cf:b2:93:ec:85:a9:fe:19:fe:ce:cd:0d:a2:ca:ec:e5:
04:7a:69:98:56:53:19:76:c5:cb:b0:66:a5:10:3a:8e:f1:80:
1f:e3:ce:c0:c6:ee:71:0b:85:f2:3f:47:56:dc:44:06:38:17:
8a:01:7c:02:90:ed:aa:92:8b:d7:1c:7a:ee:22:15:8c:80:67:
d9:a0:bb:5c:65:63:7c:d0:66:17:cd:2a:f9:af:5f:f7:7f:c5:
9c:e3:f0:37:0f:19:d7:62:a1:98:20:e3:c9:e5:9b:c4:f3:ef:
b3:94:78:b4:34:19:02:c5:ae:5e:8d:6f:13:1b:01:12:4c:a4:
1a:0e:68:05:f8:6c:79:ea:30:e4:55:98:84:6f:93:75:93:cb:
0d:54:fb:0a:1b:44:5b:b3:2f:c2:03:7f:92:60:cf:08:39:4b:
14:b9:06:87:9a:eb:2d:25:6d:a1:e2:2f:1f:4e:ae:77:60:d4:
47:22:96:63:a2:4a:9b:d3:29:17:3c:a8:df:73:52:74:6b:3c:
0d:f5:d3:8d:54:70:6d:e7:76:56:fc:b7:57:b1:74:01:1e:e5:
b6:7b:96:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 13:42:54 2024 by rpki-client on console-fra.rpki-client.org