Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.cer (raw, json)
Hash identifier: yjy489nYQnzMX24dfvhWVxaqydf7x67+IIok3GD+/l4=
Subject key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E277
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 03 Mar 2024 13:00:20 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 135036
IP: 45.250.68.0/22
IP: 103.206.208.0/22
IP: 2404:4480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123511 (0x1e277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 13:00:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:5b:17:e4:df:81:36:6e:7f:71:12:57:60:
35:a4:2c:80:c9:72:d8:fa:b4:00:36:78:02:ab:f0:
cf:8b:07:cb:fe:8f:c2:8a:43:28:4b:86:20:43:2c:
67:8a:02:db:a5:ad:66:d1:d4:55:d6:48:81:51:5b:
85:08:1f:b8:d4:ea:27:f0:08:77:da:db:56:9e:84:
f6:26:e9:96:93:67:3b:90:a8:b2:fd:60:44:2a:b5:
ac:0c:d2:24:54:51:46:d4:e0:3c:c7:a2:46:16:0d:
d5:33:4a:3c:7f:5e:36:0a:88:7a:69:dc:39:80:ae:
14:74:c1:c5:89:57:58:1f:63:b9:b7:44:9c:a4:c6:
32:7f:4e:5e:50:8b:42:8b:37:3b:f3:30:ed:21:e3:
5f:91:db:9a:8d:63:78:9b:6c:fc:23:dd:13:ce:0d:
32:ce:33:5c:7d:80:81:24:39:ad:6f:e2:b8:56:dc:
23:e5:41:8e:a2:eb:8e:7f:69:f2:d0:be:3d:a9:3d:
17:54:b1:ed:f5:73:6a:17:20:a6:36:ad:8b:3d:37:
c0:b1:78:ba:c8:82:c4:27:b7:c4:cd:c5:af:e5:39:
70:d6:6b:07:e9:64:53:ef:a0:94:ed:ad:11:c4:17:
7b:f2:cf:b1:c9:c7:f2:d1:c7:c4:33:3a:97:a0:82:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135036
sbgp-ipAddrBlock: critical
IPv4:
45.250.68.0/22
103.206.208.0/22
IPv6:
2404:4480::/32
Signature Algorithm: sha256WithRSAEncryption
86:6b:9f:10:36:2c:56:c1:dc:bd:76:a8:86:85:c5:74:1b:93:
94:f5:f4:2d:e2:ae:c3:61:f6:d7:a3:80:44:b8:e1:45:a0:d2:
c3:ec:cf:c8:7b:32:7e:30:fc:fc:cd:fa:22:d7:0a:a9:28:30:
07:91:e0:cb:7a:3d:60:01:58:bd:10:f0:86:80:8b:5d:7f:8d:
de:9c:d3:2b:3c:6d:36:10:24:f7:e8:c3:58:f4:71:18:b3:1a:
01:67:12:ad:c5:81:c8:cd:87:26:28:8c:3f:5e:26:78:ee:47:
b1:0d:be:72:f2:be:c5:07:e8:68:c7:b6:a0:a9:93:67:7a:e0:
e8:bc:89:a4:dc:e8:60:69:59:e4:b8:7b:b5:60:a2:09:b9:be:
67:74:e6:2f:30:3a:c2:5e:fa:bb:92:e5:f5:b4:33:78:1c:fe:
a4:b9:2f:6a:f5:d8:5f:17:2b:9e:30:6f:b7:e1:42:9f:fe:3e:
bf:3e:4f:82:a4:e0:d9:fc:35:ab:e3:47:db:be:8a:3d:97:6e:
51:6b:9f:4c:b5:76:55:0a:61:11:2d:d1:bd:3b:09:8b:c7:1d:
d2:21:8d:36:81:5b:d7:4c:b9:1e:78:45:a6:09:97:9a:73:c3:
89:08:ec:2d:e9:31:c2:c8:5a:2a:0e:e3:df:78:c1:cf:35:6a:
2a:3d:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:14 2024 by rpki-client on console-ams.rpki-client.org