Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
File: 379fgwtQs7_B5TULnGBbt1YSLhE.cer (raw, json)
Hash identifier: CzUAbzqD8AdsVpTtgPQB6cci8mcUAGITNvL/jpo3Fog=
Subject key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021658
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Oct 2024 20:01:06 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 147061
IP: 103.173.235.0/24
IP: 103.198.0.0/24
IP: 2001:df7:ae80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136792 (0x21658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 20:01:06 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:85:af:be:ac:c4:96:bf:6d:91:9c:24:5f:
fe:8e:69:89:fa:91:10:e6:53:05:8b:e5:94:85:3e:
f9:51:61:ed:69:0c:89:f3:99:73:66:09:9f:ad:4e:
a1:5d:35:9f:35:c4:eb:48:e1:1b:a8:c8:52:2f:f4:
1b:df:a2:92:20:7b:e9:81:74:51:74:b2:e3:46:57:
ce:66:b2:13:fb:0d:6d:3c:92:20:a4:ca:68:db:ad:
29:f0:f9:6a:ee:3c:6f:d1:55:a8:4f:37:b5:a3:d0:
6f:f1:44:82:4d:ef:fd:d8:7a:47:dd:c7:0b:db:5f:
5b:a6:ff:9f:3a:97:d4:56:2a:14:8b:a4:68:11:6a:
82:43:d9:aa:cc:12:3c:ec:86:00:23:88:bc:03:98:
5f:10:7d:6d:6c:2d:de:59:4c:94:87:32:9e:3d:55:
49:cf:97:3f:0c:4b:f3:ca:1c:11:d7:aa:85:26:c8:
67:fa:2c:f9:88:8b:01:da:61:92:8d:91:6f:43:5a:
0c:b4:0f:25:1a:48:32:d6:1f:dd:c0:aa:24:6c:ea:
dd:ea:1e:9b:cc:24:74:d3:00:35:99:f6:89:86:ec:
7f:5d:5e:10:cf:69:97:4b:2e:f8:7e:8e:8d:38:62:
ee:06:55:75:3c:ef:e3:c9:26:32:c0:76:d6:5a:3f:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147061
sbgp-ipAddrBlock: critical
IPv4:
103.173.235.0/24
103.198.0.0/24
IPv6:
2001:df7:ae80::/48
Signature Algorithm: sha256WithRSAEncryption
5a:02:77:84:27:66:76:e0:48:87:f2:a6:75:94:f5:e5:97:ac:
28:c8:9e:03:8a:cd:ab:cd:10:ad:c7:18:33:1c:36:96:48:a9:
14:d0:26:fb:56:26:7c:10:b7:bd:d8:91:d4:41:11:e1:f4:ef:
05:eb:12:db:cb:d8:91:25:38:90:1e:66:03:ad:93:a3:e7:1a:
7c:1e:bb:02:ee:81:cb:d3:79:e4:71:19:bb:fd:27:b7:00:d4:
57:d3:9e:ea:fc:01:53:1f:86:1b:40:9e:bb:05:78:18:5a:72:
ed:d8:7e:75:fe:0c:51:53:5d:1d:cd:4c:99:8f:28:80:7d:fa:
76:c9:99:a3:d3:71:45:83:9d:fb:32:e3:f9:64:23:51:48:55:
d4:e5:ba:f3:d8:a7:3c:9c:0c:4a:fe:8e:a8:fa:51:f3:5a:07:
81:43:7e:f1:9f:10:45:0e:65:f8:65:e8:de:08:38:f0:de:dc:
e0:7c:f2:46:05:12:2d:94:a0:32:19:fb:12:7b:99:b2:f2:a7:
c8:f0:3d:e0:e0:a3:02:c8:1c:01:64:7d:10:77:52:4f:1c:d9:
68:c6:f6:cd:fe:ce:f4:b4:5e:b5:20:bc:30:f1:ac:07:ed:04:
ec:23:8c:ac:27:67:00:eb:b4:ad:40:1f:bb:99:a0:62:85:a5:
77:cd:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:07 2024 by rpki-client on console-fra.rpki-client.org