Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer
File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.cer (raw, json)
Hash identifier: jD8q9SkwdyMs5BiprAzm+Rya1cQv21VexXe9zLMPXJ0=
Subject key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B758
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Aug 2023 05:35:02 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 139304
IP: 103.140.253.0/24
IP: 2001:df0:e580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 02:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112472 (0x1b758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 17 05:35:02 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:2b:a2:70:09:66:ab:08:d6:dc:db:05:d7:
83:82:c2:ba:b8:33:dd:97:dd:76:e2:58:96:7b:4b:
73:60:de:35:6f:74:cb:d2:4d:8a:0b:ee:dd:1b:30:
79:41:87:65:aa:72:86:5b:9d:3a:37:15:e0:ef:98:
9c:4d:50:7e:f0:f2:f1:a2:82:79:1d:15:17:3a:fb:
2c:13:81:f8:61:d0:6e:fb:60:f8:c3:6f:0e:38:72:
ed:08:8f:83:0e:41:62:25:77:04:79:61:22:39:59:
e9:eb:9a:0c:c7:32:c3:33:03:66:b0:61:fb:5c:c1:
e1:5b:3f:0a:81:54:96:36:ad:e6:4c:bd:49:da:bc:
7f:36:8d:51:3d:8f:1a:c1:c3:0e:77:dd:1c:b3:c4:
cd:12:dc:31:5a:bf:16:e6:59:ea:57:51:89:6b:1e:
c6:38:6a:88:96:d2:31:3e:08:22:41:fe:db:60:e0:
00:87:78:9d:37:c6:24:9a:7a:53:fa:bd:c6:e1:a4:
2c:fb:21:ab:e8:89:1e:7b:ca:4c:ac:23:6b:78:7a:
26:04:9a:a8:98:5d:35:ad:c1:85:6d:5b:a7:0d:a4:
ab:c5:40:42:b2:f9:dd:e2:d3:b5:97:2f:70:0d:9c:
c9:6c:51:75:ee:97:28:90:9c:3a:f4:62:d2:f0:e3:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139304
sbgp-ipAddrBlock: critical
IPv4:
103.140.253.0/24
IPv6:
2001:df0:e580::/48
Signature Algorithm: sha256WithRSAEncryption
32:7e:82:87:f1:57:80:bb:63:b5:e1:5c:81:54:2e:6d:74:1c:
4b:98:02:6e:00:5b:8b:22:fd:8e:fb:8b:c8:52:dd:4a:36:3c:
ef:5e:19:4a:0a:81:d5:c3:4f:f8:ed:1e:d8:c8:1a:ca:62:a6:
6a:b3:cf:de:00:37:51:4f:43:7b:cc:35:71:07:0a:4f:0b:06:
b3:a7:10:a4:ce:69:0e:50:ea:00:de:f2:2b:d4:3e:f1:43:6e:
bd:47:da:9f:09:66:0d:59:24:1e:ed:94:08:fb:14:ec:c3:bf:
5a:c2:f2:31:04:fd:1e:7e:28:66:6d:37:6f:8a:ac:5c:32:7e:
cd:a4:cf:65:34:69:07:cc:64:9f:17:36:fe:96:7e:f1:79:62:
29:e0:2d:07:cc:80:c1:4c:46:81:14:25:5c:19:6b:4c:02:9c:
40:f0:12:2f:50:1d:81:63:42:ae:eb:07:c1:e1:a1:f5:e3:3e:
e6:70:df:7d:d5:7e:0e:db:c4:12:bd:d2:9d:2c:31:ae:d7:30:
40:bb:4a:64:b5:bc:f9:b7:9b:1e:69:0d:b3:e1:f0:8b:de:7e:
b4:3d:81:af:10:fb:3a:06:07:cc:9f:d2:c5:89:b0:15:7e:71:
fb:45:7e:b2:8e:15:23:03:99:c5:bf:d8:64:be:13:98:28:5b:
7f:74:7f:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 03:12:55 2024 by rpki-client on console-ams.rpki-client.org