Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
File: 3UAamS3TKfk027INWAtMpyeQ37E.cer (raw, json)
Hash identifier: d4Vk4t5HXPVc8LEP4O2KKE/0mYx69f4ZmPpA/cVQTro=
Subject key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EC54
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Apr 2024 22:43:39 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 149437
IP: 103.179.126.0/23
IP: 2001:df0:4cc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126036 (0x1ec54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 18 22:43:39 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cc:64:2c:c3:fc:f5:dc:e9:e2:c8:a0:40:86:
50:b2:5f:f5:c0:1b:06:57:37:7d:30:e9:c7:21:d7:
1b:c0:5f:55:be:a1:ba:f6:db:fc:b9:f0:ed:14:26:
a9:99:b6:c5:78:81:c3:2b:d5:0a:2d:a7:f4:08:89:
e7:04:1f:40:ca:ea:93:62:11:93:11:79:bf:b5:10:
88:9c:d7:0a:51:f1:64:c6:ab:cd:b6:4e:f8:92:de:
92:2d:dc:6d:d4:f1:65:6c:bc:92:bd:e8:12:92:65:
bc:cf:a6:2a:b7:ab:b2:7c:0c:34:f4:fb:0c:92:83:
ad:d8:e8:dd:0e:ca:bc:82:f1:8f:a7:04:03:3d:d7:
b6:b3:a1:57:7c:2b:8a:0a:3d:4f:6c:fc:ee:52:70:
2f:6f:f3:e9:58:f6:0d:b7:62:e1:aa:85:be:e5:08:
25:6c:e9:dc:87:61:8e:10:ea:72:12:84:19:77:47:
75:74:bc:10:e4:5f:a9:5d:e8:8b:30:57:07:36:07:
8b:e3:3e:5f:f3:22:4a:ed:8f:5d:86:0e:f9:b5:e3:
b4:2a:85:5a:12:29:75:20:99:9d:18:df:e5:92:93:
2f:f0:7a:b2:ca:17:b8:5f:f2:86:75:53:57:c5:e9:
9f:4a:ea:9b:5b:1c:24:7d:54:0a:80:2a:42:c7:df:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149437
sbgp-ipAddrBlock: critical
IPv4:
103.179.126.0/23
IPv6:
2001:df0:4cc0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:0b:dd:37:f0:3e:1f:53:d4:9d:4c:8f:59:69:38:53:54:18:
38:d7:2a:59:5c:56:9d:da:42:da:fe:b4:68:db:27:19:49:7a:
c3:bc:6d:cf:ea:02:5a:88:50:7a:6c:cc:cd:2b:10:b6:7c:a9:
d2:b3:5c:1d:5d:10:a7:50:4c:f1:5e:0d:e3:d0:e5:07:ce:77:
01:70:c4:d0:e1:b8:a0:a3:44:29:a0:6e:d9:02:85:f1:fa:e9:
47:98:b0:24:13:ef:ad:c4:f8:25:a1:24:41:e1:81:e5:11:54:
68:22:e5:8e:42:80:c5:cf:0d:95:8b:0a:84:26:08:51:53:0a:
d4:60:7f:af:97:9d:bf:ce:b2:0b:7c:48:ec:9e:91:c9:20:a6:
8a:82:78:31:6d:1c:d8:c0:df:3e:f3:49:0f:c3:f2:68:8c:f1:
f0:2e:4f:b7:df:5c:d1:57:e2:94:98:9d:01:bf:b2:cb:71:0d:
b2:df:0b:16:5d:a8:fe:7b:97:b0:17:93:e1:c0:0d:92:3d:77:
24:79:61:cc:78:d6:58:55:8f:5c:79:85:40:6a:4b:4f:fd:64:
3f:e9:4a:74:24:1a:3c:e9:14:d8:74:1d:4e:d5:d5:b5:72:ff:
2f:53:27:a4:12:5e:2c:b6:cc:f1:eb:55:b6:1d:4a:3d:16:37:
af:07:d2:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 06:13:48 2024 by rpki-client on console-fra.rpki-client.org