Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hN_AdcLsdPnUS4d6UFzAiXTlXA.cer
File: 2hN_AdcLsdPnUS4d6UFzAiXTlXA.cer (raw, json)
Hash identifier: EWKr/muThMTJZOZpuIZsn0T+zj0LXCV7ZwCbNsI4jUs=
Subject key identifier: DA:13:7F:01:D7:0B:B1:D3:E7:51:2E:1D:E9:41:73:02:25:D3:95:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A242
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 May 2023 13:45:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 151209
IP: 103.134.32.0/23
IP: 2400:fb20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 12:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107074 (0x1a242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 13:45:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91C7DFB/serialNumber=DA137F01D70BB1D3E7512E1DE941730225D39570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:ff:76:93:c0:f2:c4:02:ec:a3:05:34:38:
9d:d5:ea:40:88:44:4f:bb:24:25:3d:70:ad:f5:63:
46:c6:e5:55:4a:71:5b:69:33:ce:81:28:7e:b1:ab:
eb:02:98:77:4d:fb:87:2d:3a:1f:49:75:0a:ab:1f:
c8:cc:9c:43:6a:9a:d3:9d:22:41:66:60:3e:8f:9b:
20:66:6b:72:84:82:7b:28:f1:19:c3:4f:01:e4:d1:
4f:aa:e1:56:e0:1d:44:82:7e:4c:10:5a:4f:f0:72:
df:3c:04:5e:44:88:5a:4c:c6:5a:29:48:88:d8:39:
6c:0f:c0:2f:5a:4e:57:e9:1a:bc:fc:cb:c2:ab:3a:
c7:42:8d:c7:30:bf:ae:85:b1:cb:94:e8:48:a7:cf:
64:79:c8:ba:bd:68:e6:fc:4b:64:4f:08:66:ce:58:
ff:8b:77:be:87:14:04:5e:4b:a7:01:b3:ab:11:d8:
0e:39:5e:d4:c7:1f:81:ea:9a:55:46:93:f1:2e:d8:
9e:1b:19:35:76:0f:77:d1:ec:d1:84:d0:0e:4f:95:
34:7e:b4:f9:d2:60:32:4e:e4:52:bd:76:f9:7c:83:
83:30:34:24:2f:b8:44:ef:66:17:ad:a0:9a:98:88:
f9:85:1d:22:74:a4:2c:4c:28:18:95:ba:00:01:6f:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:13:7F:01:D7:0B:B1:D3:E7:51:2E:1D:E9:41:73:02:25:D3:95:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151209
sbgp-ipAddrBlock: critical
IPv4:
103.134.32.0/23
IPv6:
2400:fb20::/32
Signature Algorithm: sha256WithRSAEncryption
28:ab:1e:4d:b4:2c:b0:c8:27:48:a8:c2:21:4e:fe:62:3e:d8:
d9:e5:93:34:17:ae:61:79:95:78:e8:c9:f1:65:6b:69:2e:73:
f7:a0:95:82:20:93:25:29:55:6e:51:d6:cb:16:8a:1b:b7:9a:
5a:23:d0:a7:38:3e:a4:70:a4:b2:9b:eb:f5:60:e4:a1:06:2e:
6b:80:bf:43:09:c4:8d:fa:e6:69:07:b1:be:88:c1:c1:b0:64:
a6:af:e0:a5:6b:37:bd:77:72:28:32:1e:62:31:59:10:27:7a:
8a:98:bc:5a:a1:e1:a5:9d:3b:04:b7:ea:65:2a:cc:fe:52:f5:
6b:8d:ba:45:3a:2c:ae:99:f7:59:67:3a:a5:3a:ed:ec:ed:ea:
a9:fb:87:48:6d:f2:32:89:ff:60:16:8e:39:f0:bb:93:a9:61:
61:11:53:96:f3:07:fa:8e:5b:4b:7e:66:51:a4:a1:db:ca:6e:
59:b7:33:8d:89:ab:21:1d:1a:d8:29:e5:9c:9a:09:72:87:03:
29:f4:c9:ba:8f:2f:dc:b1:0b:74:2f:e4:c4:6e:95:e1:2e:89:
30:f5:62:a5:85:48:b2:f8:d7:a7:3e:36:4d:bb:c9:20:96:69:
92:7b:28:2f:71:73:d8:1b:3b:ed:15:ae:d4:6e:4b:99:a1:b3:
e8:86:c9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 13:46:46 2024 by rpki-client on console-ams.rpki-client.org