Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer (raw, json)
Hash identifier: TKtY01/fV7Cy1m9VYFhxj+jfQRSDs5zw/N/+G3jWn6M=
Subject key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B4E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Aug 2023 18:15:34 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 103.97.228.0/23
IP: 103.106.202.0/23
IP: 2401:8f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111840 (0x1b4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 3 18:15:34 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:e2:1a:2a:2d:21:be:8c:e3:89:34:1c:64:
ee:a3:38:a6:71:df:55:6e:27:61:be:dc:98:26:dc:
cc:8f:4d:dc:2e:cd:2e:eb:af:c2:f8:e3:e4:a0:e2:
74:e9:f0:3d:8b:39:f2:a2:db:5e:6b:9a:b2:17:7b:
bf:35:de:3f:79:48:37:f6:b7:60:5b:37:ce:d1:fe:
f1:11:eb:cc:09:73:e2:bb:e6:e4:6f:4e:cb:51:d8:
5c:ec:6b:1e:47:7c:c3:4e:e1:48:0a:ea:eb:2b:96:
4e:f6:54:44:94:c2:0b:5f:2f:54:e8:05:6a:21:c9:
77:43:a2:79:54:ab:90:9b:54:62:6c:aa:ea:ec:85:
b8:18:97:98:55:12:69:aa:69:d7:3b:8e:2a:0d:42:
67:9a:f2:0f:5b:91:57:a4:26:4e:aa:2e:9d:19:30:
42:60:b0:27:b9:48:a3:b0:d4:df:5c:42:38:65:a3:
b1:2a:ad:dd:65:4a:08:d2:f4:b5:8d:58:dc:99:a0:
97:e4:af:b2:e1:df:6a:4a:cb:2f:22:ab:af:35:06:
57:d2:b0:40:26:bd:07:10:09:89:da:0a:5f:4c:a1:
c5:b4:4d:d8:d4:df:d5:46:95:4c:1a:51:01:07:7f:
4b:26:8e:d8:44:f1:e1:50:84:61:c3:20:c3:86:b5:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.228.0/23
103.106.202.0/23
IPv6:
2401:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
60:5f:17:e2:90:8d:cc:ab:d2:b5:f4:c1:cf:e3:c1:6b:26:7d:
5a:d2:0e:9c:1d:ca:66:2c:fa:3f:cb:36:39:53:5d:4f:7a:06:
5b:6d:fb:08:dc:4b:92:f4:e0:24:f5:c3:ab:5c:c0:21:0d:e3:
a3:a6:a0:cb:65:90:35:fc:52:3e:02:e8:c0:65:cf:51:88:ca:
60:69:b8:4d:80:a2:b2:1e:3a:f7:b8:26:23:2e:93:b4:36:2e:
2e:fa:33:d0:01:97:13:bb:3c:3b:31:a8:ee:3b:1d:dc:94:c9:
5b:ae:35:2e:d6:cb:cf:b1:7c:ea:15:b5:34:79:6f:1b:d1:fb:
23:3c:82:f8:06:36:27:78:68:04:fb:08:d8:85:00:9c:c3:ef:
48:95:bd:4d:d8:5e:22:ee:5a:e3:bc:40:b6:be:47:80:f5:67:
9c:97:86:20:cd:8d:34:78:54:7b:4d:85:01:5c:0d:ed:44:18:
bd:d2:72:65:05:35:22:30:62:d4:e4:c9:1b:e7:ed:b2:af:79:
c6:69:37:1d:f7:80:f0:b1:da:c2:93:b5:d1:52:82:04:9e:d4:
49:2a:2c:0d:a5:4b:51:42:5e:44:73:57:ed:b1:ab:1e:e6:d2:
c6:8e:2f:b3:1b:70:ab:54:bb:d1:28:3e:b8:2c:71:39:3f:4c:
ef:f8:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:39 2024 by rpki-client on console-ams.rpki-client.org