Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
File: 1ZVULlIPSK9153kD6majnGTB0KM.cer (raw, json)
Hash identifier: Xw4cKyqhRwbAcnTy4PtXOGNSOvemEdpx8KR90bWUmJk=
Subject key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E4B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Mar 2024 07:34:27 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 7598
IP: 103.1.196.0/22
IP: 116.50.56.0/21
IP: 2400:5e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 06:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124080 (0x1e4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 15 07:34:27 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:bc:b8:15:d4:67:c8:46:8d:c3:24:e1:df:
ab:59:b4:31:58:a0:f9:33:fd:7f:15:bb:a0:e5:7c:
e9:d1:41:01:db:17:d9:45:b5:f7:41:1a:53:97:5c:
83:95:9e:a4:0e:56:fc:ae:e7:8b:78:27:b1:09:aa:
de:f0:73:13:26:82:3f:83:e0:d7:ef:55:23:4c:20:
fc:d3:93:c6:8f:5c:a7:49:d8:77:52:5d:74:e3:6f:
79:98:80:9c:51:f0:4f:13:df:bc:ca:af:ff:07:c0:
c8:ac:ef:e6:7b:f5:56:a9:0a:32:ca:ff:b3:e5:4c:
33:92:13:21:8d:37:0f:d9:e3:13:6b:39:30:04:c8:
8d:51:16:df:a3:84:9d:4b:c7:8f:75:1d:53:fd:3c:
2e:ea:67:0f:1d:84:eb:89:a0:9a:df:fb:ee:ab:8e:
52:20:57:32:b2:35:0c:85:a9:77:c1:1a:21:87:ae:
7d:b2:98:ed:9c:59:bb:32:85:2e:cc:bb:cb:46:07:
66:01:39:9c:f5:78:78:85:75:27:1d:7b:85:32:67:
6e:85:37:a7:59:76:6e:b1:9a:95:5c:dd:a7:18:46:
dd:45:00:44:90:28:47:e7:1b:e1:ae:e1:59:50:35:
a6:1b:41:ba:3c:58:36:f3:b9:12:5d:4d:d6:2d:c0:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7598
sbgp-ipAddrBlock: critical
IPv4:
103.1.196.0/22
116.50.56.0/21
IPv6:
2400:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
04:3f:11:1a:bc:7b:2a:69:57:0e:bc:93:ad:fb:7d:8a:dc:96:
a5:77:0c:f2:63:51:d2:76:e8:96:2a:e9:eb:f1:40:df:69:6d:
8c:0b:c9:b4:1a:03:a5:15:8b:3f:c0:39:4f:5b:10:81:87:33:
9b:56:fe:35:42:73:48:7d:39:0a:2d:a5:5a:d3:05:ff:71:98:
f0:92:d5:11:be:63:6f:52:98:41:6d:8e:c5:fb:27:69:44:36:
de:7b:3d:9b:0e:bc:72:89:dc:a6:ce:81:e1:5d:fd:fb:15:d0:
e0:32:c6:36:9f:1f:97:f5:ff:dc:fc:ce:63:7d:4d:f7:3d:bc:
cf:65:1d:dd:bd:37:82:d5:39:25:86:30:b9:1d:6e:74:5f:a1:
6a:3a:b2:d4:e8:7d:c4:27:87:d0:ad:40:bc:8d:47:a7:3a:36:
a5:49:84:54:50:53:90:24:e5:3d:42:65:ac:25:5a:0a:a2:b8:
31:91:6a:2a:02:d1:49:ad:a1:8b:15:bc:4f:63:20:f4:e8:ab:
1c:8c:bc:36:58:59:74:2c:03:bb:04:1c:f6:2e:60:6f:fc:94:
4a:6d:f6:0e:dc:54:6e:5e:82:c6:b5:47:5a:7d:ed:a9:61:6b:
8c:8c:67:8c:d8:51:93:02:cd:1a:fa:0f:15:ad:29:d1:16:c1:
7c:8f:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:03:16 2024 by rpki-client on console-ams.rpki-client.org