Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.cer (raw, json)
Hash identifier: i2w9xT647FpIAL0dEx2UFJnvSgO/jXfsu87+TxLRW70=
Subject key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DE14
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 Feb 2024 20:13:37 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 37976
AS: 140046
IP: 103.147.194.0/23
IP: 2001:df2:a280::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122388 (0x1de14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 8 20:13:37 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:db:d5:f6:56:d2:3a:e3:ff:28:58:34:1b:
5b:b8:aa:72:79:49:45:1d:a4:b3:f0:0c:aa:ce:77:
63:62:fe:dd:a8:dc:54:82:68:87:7c:c4:f9:c3:fa:
4f:da:e8:49:5f:f1:24:66:ba:e9:34:0d:66:78:c4:
1f:7d:ae:c4:54:33:73:a5:93:f0:4b:90:ac:ee:b2:
a0:58:ac:29:5c:2f:e5:c0:19:30:31:32:61:f8:5f:
96:55:f7:03:18:07:6e:1b:22:36:2d:9b:b5:19:e0:
a2:c6:a8:84:c4:07:53:42:47:c6:e0:99:7d:3e:1a:
11:76:6c:a8:56:2e:b9:96:12:07:56:1a:03:8b:41:
b8:02:09:a3:c0:2a:a7:1f:14:d3:ec:89:e7:50:c5:
35:ad:29:60:9e:28:2f:3d:18:a5:19:c4:95:5b:85:
ac:6f:25:50:d8:e2:19:64:50:94:6f:5a:97:6c:25:
eb:24:2e:5c:77:78:b6:39:2f:d0:4c:8d:04:42:1e:
58:ab:30:70:63:ba:fb:7d:e7:1a:a7:bf:fb:7f:58:
96:3d:fd:bb:20:80:85:85:5c:e3:d7:d0:d5:f9:79:
17:4a:a2:c1:83:01:02:cf:c7:c5:4d:ba:35:d0:c0:
d8:b2:77:bd:4e:75:65:0d:50:e1:34:44:e7:e4:f8:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37976
140046
sbgp-ipAddrBlock: critical
IPv4:
103.147.194.0/23
IPv6:
2001:df2:a280::/47
Signature Algorithm: sha256WithRSAEncryption
29:d3:ef:fb:70:86:dd:96:a5:ef:3c:a7:f0:fb:be:d3:8d:86:
40:8f:79:d3:d6:79:42:6e:34:21:7d:61:f2:cb:18:4c:72:7a:
52:d6:1f:03:ca:e3:7a:df:ac:1d:64:86:66:01:ee:45:46:e7:
4a:fc:99:e6:f6:7e:23:2a:ef:9a:b3:23:5b:f1:0c:24:4f:cd:
f7:6c:fb:a5:34:6c:e2:2c:d8:79:5e:53:12:45:50:b9:4c:be:
cd:2b:30:02:f9:57:10:d1:e6:95:16:05:ff:4e:80:6a:13:eb:
64:04:9b:5d:a1:7e:92:80:c7:74:00:65:5c:4a:90:b9:17:bf:
d0:a8:9e:62:e5:07:3c:24:c8:0e:91:05:65:3f:30:24:1f:18:
95:9d:e7:4b:dc:7a:12:62:18:14:cb:7c:04:83:56:e0:13:d9:
b5:ba:40:0a:e7:2b:7b:f1:98:ea:62:af:f8:e5:52:11:f2:89:
8d:b3:ee:15:d4:3f:fd:6e:a9:e4:30:4c:bf:f2:7f:65:8f:bb:
4f:08:d6:ee:d1:7d:8b:5d:b8:b2:ba:ce:0b:6b:95:1d:08:53:
80:93:0d:99:dc:5c:58:e9:f8:34:bc:6b:52:79:83:43:08:e1:
aa:a0:4d:31:dd:21:4a:fe:df:b9:42:6a:9c:34:67:15:72:ac:
34:35:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:51:19 2024 by rpki-client on console-ams.rpki-client.org