Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
File: 2dCjxqTde6e0VN6uAa9nryxUxDM.cer (raw, json)
Hash identifier: kMk0aV0ok4KIEt2daKkI1iDXjojhyYyaotkPkmUHgfw=
Subject key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0200F5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Jul 2024 14:46:35 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 132890
IP: 103.27.104.0/22
IP: 113.52.148.0/22
IP: 2407:5f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131317 (0x200f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 17 14:46:35 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:a0:da:a1:0a:29:9d:52:fe:5b:60:56:f3:
18:68:7a:70:f9:1a:f6:18:22:62:41:45:95:6e:79:
e8:27:ef:cd:60:29:c8:5a:d6:1a:64:3d:b4:ac:be:
d0:fc:6b:85:73:62:8c:b5:8e:1b:71:b2:9c:0b:ba:
50:e2:89:1f:c1:ad:8b:1c:b0:74:03:4e:5f:b8:f2:
e6:e4:11:1d:71:d3:4d:d0:a0:ca:86:10:20:3e:32:
ce:a1:69:17:b6:3e:09:7d:f1:88:36:35:e7:2d:bd:
9d:8d:ee:3b:26:2e:40:b7:16:53:8f:14:ca:d7:25:
0e:e9:4d:8c:1a:9f:7b:cb:36:9d:1f:32:fa:25:c6:
f4:be:18:06:52:80:5d:c2:3d:a8:fc:05:4a:90:8a:
5a:31:53:f2:f2:a3:16:28:3e:0f:1d:91:bd:ac:35:
bb:90:66:1f:c5:fb:c4:7c:a9:db:28:95:fe:d4:81:
19:50:91:a4:ba:4d:54:0c:ef:0b:2b:42:3e:25:88:
cb:5a:15:61:36:f8:1d:46:43:77:f4:32:33:a0:a5:
69:ae:b1:5f:b8:45:42:2d:94:b6:be:f0:c9:68:69:
7e:9c:8b:95:34:0e:ab:aa:aa:52:9b:f5:f3:6c:fc:
03:52:39:fa:d5:74:4e:18:7d:cf:86:54:4f:24:1b:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132890
sbgp-ipAddrBlock: critical
IPv4:
103.27.104.0/22
113.52.148.0/22
IPv6:
2407:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
d6:d7:89:cd:6d:78:0c:37:72:46:51:7c:16:a3:a9:f6:32:bd:
bf:95:ba:2d:9d:a9:d5:40:14:c5:ec:d9:1b:dc:5f:e1:18:b9:
87:0a:f5:9a:91:a5:66:aa:eb:22:a4:df:8c:a6:60:ec:98:e9:
6e:1e:34:99:98:85:80:22:a8:9a:4b:70:56:28:ce:70:52:6e:
f9:32:e1:a5:c5:aa:71:3e:4a:94:41:eb:d4:64:36:79:53:7f:
82:e6:a8:f3:e3:bf:31:b2:c7:a0:31:d1:8d:1a:42:2d:b2:97:
f8:d3:58:8d:82:ef:68:49:0f:fd:f3:3d:4f:27:2c:29:c9:e1:
4a:49:39:5e:f4:77:50:56:5e:02:be:a6:a5:ad:04:b8:63:7b:
66:a2:da:8f:d2:d1:80:99:c0:ab:24:d8:59:28:38:ac:fb:2f:
a5:bb:56:ef:e2:40:37:d9:8b:6e:5b:d3:c6:db:09:70:29:61:
93:99:cb:f8:55:0f:ae:3e:f3:e5:e1:ed:93:6d:b8:01:50:7e:
d5:2f:ba:4d:de:8e:97:37:52:8c:15:d6:15:e5:1e:00:16:bc:
2a:6c:ea:f0:0d:e9:f6:78:a9:40:e1:da:04:54:1f:37:88:35:
45:cc:31:40:28:33:31:97:d7:7e:06:ba:c4:d7:f3:c4:29:6e:
88:ff:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:06 2024 by rpki-client on console-fra.rpki-client.org