Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer (raw, json)
Hash identifier: Rt3kGJJ1Cv03Kq0q0RY40MjVT40gPs7zG+IdCqd3kPE=
Subject key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BF7F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 Sep 2023 19:46:34 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 140957
IP: 103.153.198.0/23
IP: 2001:df4:5880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114559 (0x1bf7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 25 19:46:34 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:e5:aa:df:88:90:36:87:ab:4a:47:0b:6b:
3f:4c:28:50:d6:12:40:b9:64:bc:e4:1b:48:02:0b:
70:ad:c2:85:ff:89:5e:c7:87:02:2e:81:e6:47:32:
87:78:a9:cc:67:c6:8c:4a:52:ed:5c:4f:da:af:f5:
09:64:b7:39:c7:6c:f4:61:e1:97:00:d3:32:d6:b3:
4a:52:4b:57:3e:43:9e:f1:f3:e4:27:ab:3c:3a:cb:
1f:fc:55:e6:c7:0b:f8:12:21:2b:0a:d4:bd:d1:95:
d0:ac:48:54:4e:a8:30:8e:53:0a:af:86:0a:cb:ef:
cf:c3:80:1b:08:00:73:f4:3f:8a:94:16:f2:c2:9b:
e6:c3:4b:90:12:20:80:27:20:0c:62:c6:d2:10:fd:
bf:c0:a3:67:78:76:94:13:19:0a:a7:d6:91:ae:a6:
37:c1:ca:67:23:92:96:45:5f:10:30:6e:e3:81:d6:
2b:8a:9a:56:26:60:68:d9:e0:3a:cf:3d:14:ae:3f:
a7:f1:d5:0a:50:ca:aa:8e:3c:bd:63:0b:b8:32:fe:
ea:95:73:ce:53:5b:6f:83:8b:6a:f4:89:fa:ba:1b:
3f:29:0c:01:72:02:4c:3a:18:ae:b9:bb:c4:4b:eb:
2e:9f:12:dc:5f:d1:d8:69:4d:f8:a1:c5:ab:15:bf:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140957
sbgp-ipAddrBlock: critical
IPv4:
103.153.198.0/23
IPv6:
2001:df4:5880::/48
Signature Algorithm: sha256WithRSAEncryption
27:54:23:75:84:72:e4:63:cc:47:1e:2a:50:ac:68:5a:8f:ba:
67:2f:df:4d:a1:f5:d8:10:5a:cf:01:0e:02:3d:b0:d6:9c:9d:
ee:62:2a:d9:d6:6c:fe:ed:88:dc:88:04:96:23:b9:3d:ed:32:
83:84:34:88:c6:91:03:fd:40:8d:d9:c5:75:ae:83:dd:75:8f:
61:d4:c1:ff:88:40:75:55:65:8e:76:a8:79:23:d2:7c:0a:4b:
e5:fd:0c:c5:89:fa:f8:24:2b:a0:18:ba:c1:1c:b8:71:39:46:
47:3c:8c:5e:da:03:4b:9c:04:c5:df:58:04:ff:47:70:75:e9:
35:d1:98:30:f2:e1:4c:63:cf:f4:69:1a:da:14:14:4c:5b:d5:
97:f9:f3:c3:f4:97:03:d6:3d:bb:7d:9d:88:8d:56:c5:e5:97:
c6:af:4d:75:1f:f2:1a:67:bd:33:98:ad:1f:3b:bc:f7:74:bd:
ff:62:a0:17:3f:aa:22:e9:9d:22:d9:6d:3d:a6:34:bf:66:41:
f6:70:b1:e0:77:b0:98:f8:12:59:7a:7d:44:4e:a1:95:01:7b:
df:31:a3:19:8f:23:1a:f9:2d:b6:6f:4f:dc:9b:51:d2:c7:83:
14:3f:01:3a:5a:25:0f:9e:92:a3:a6:35:ed:ab:05:9d:59:55:
1a:78:36:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:45 2024 by rpki-client on console-fra.rpki-client.org