Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer
File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.cer (raw, json)
Hash identifier: RNjC5XuE4H8ERaqZ1bbs4cmuV19w6koHSex0gtozOv8=
Subject key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A0A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 19:09:50 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 141356
IP: 103.156.178.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137738 (0x21a0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 19:09:50 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:5c:0b:3b:a4:7e:3b:4d:0a:b4:bf:10:01:
90:84:5a:7f:d0:f7:20:8b:19:ce:44:84:64:53:b4:
0e:5c:b0:8c:02:b6:cd:29:b7:a7:59:87:f6:08:76:
99:98:5f:8b:7c:01:ac:73:54:03:dd:ea:7a:e5:e9:
a8:90:c1:42:50:2f:2a:18:7b:8c:c1:1d:4c:de:46:
2a:c2:dc:d5:12:2f:50:bc:00:e1:84:75:a7:8d:f1:
a3:3c:c3:33:e9:f4:87:e1:ae:3b:0d:c8:de:eb:59:
1f:ac:c4:e3:51:3a:33:a8:f3:39:1c:e3:cf:78:86:
5d:44:50:7f:44:57:fa:78:fb:cc:5b:e0:0b:5e:58:
21:85:9a:a6:e7:f3:57:8a:9c:20:13:ad:15:8c:be:
13:70:88:a0:4e:4d:50:67:82:22:b7:62:af:18:82:
19:b1:8a:9d:66:80:7b:e9:4c:e6:1f:04:28:0e:22:
d7:1e:1f:1e:dd:53:d3:56:43:af:6d:fc:a9:73:55:
d8:7b:52:20:cc:6c:1b:fa:a2:56:67:c4:68:59:0a:
27:3e:fd:80:59:16:59:58:ef:a4:c8:fa:36:c2:1a:
37:06:53:41:cd:a8:6b:56:0d:cf:2d:c2:5a:cf:6d:
00:88:f8:70:ef:3c:b5:80:14:77:8e:bf:44:8a:f3:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141356
sbgp-ipAddrBlock: critical
IPv4:
103.156.178.0/23
Signature Algorithm: sha256WithRSAEncryption
10:94:03:ee:8f:4e:52:81:41:19:59:81:da:96:ac:ea:99:ad:
57:94:bc:29:75:96:33:c5:58:66:fe:61:14:23:49:5e:69:08:
da:38:c4:84:1c:6b:37:e7:62:00:d2:cf:5a:ac:bd:f6:23:17:
a9:fb:bb:92:33:c2:f0:d2:73:b3:a8:ae:3f:b4:c2:2b:f6:04:
af:f7:d9:f3:5d:f9:03:4a:26:7c:9f:ba:dd:5e:15:44:a3:ba:
04:a3:86:22:18:67:38:f9:ed:1d:54:7d:3b:8f:c2:b0:f4:0e:
79:c0:50:ca:b7:d4:fe:66:10:c0:b7:c0:8a:26:9e:d2:60:3f:
64:20:e2:47:14:e6:ec:9e:43:64:27:ce:e7:4b:e0:81:e4:55:
e9:74:c6:65:1d:b4:90:68:a9:6d:20:fe:e2:7e:7f:b1:b5:f7:
69:53:ec:ae:63:89:16:b2:ba:52:67:d8:8e:f4:22:df:2e:4b:
25:4f:4c:8e:39:87:86:45:44:f5:ed:40:03:8d:e5:ad:fb:c5:
1f:b8:6b:0a:7a:a1:34:89:a6:54:4e:10:fe:7f:65:d1:a2:f4:
34:49:82:d1:24:60:9a:b0:e7:1a:2e:b9:2f:65:e0:b4:71:c4:
22:c1:6e:36:d1:5f:71:3c:ac:68:20:de:02:c7:cd:98:5f:50:
6e:d9:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:07 2024 by rpki-client on console-fra.rpki-client.org