Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer
File: 5EZZ6m_c00PGwef_0BSlsHgYlos.cer (raw, json)
Hash identifier: GavFIdV9C55WzlB2xgqjroKcb0rIhJwP/i1Nv7bMJHw=
Subject key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02186C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 08:41:30 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 141231
IP: 103.156.222.0/23
IP: 2001:df4:ff80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137324 (0x2186c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 08:41:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:d6:68:98:7c:16:00:48:0c:ec:0e:5d:fd:
8a:8e:79:ad:f5:52:35:d8:40:48:f8:56:fa:d3:04:
44:ea:15:43:bd:e4:2a:f6:04:96:af:1d:0a:c5:a9:
31:bd:83:19:82:be:82:5f:47:d8:2b:82:5b:c8:31:
73:37:1e:2d:24:88:2e:43:4b:55:19:6f:2b:c3:92:
74:2f:9b:76:7f:0c:5e:d0:78:ee:2a:2d:1a:65:e2:
fa:d4:3d:9a:5a:7f:3f:46:6d:59:5f:fe:92:34:3b:
ef:10:e4:69:1b:f3:6d:13:9f:2f:41:a7:bc:1e:99:
c5:2c:9d:e8:8e:c5:b0:cf:64:fc:37:5b:01:f3:45:
e0:a3:f7:4f:2c:4e:c5:a2:0b:b7:d7:cc:d9:31:f5:
83:b5:91:2a:02:05:fc:b6:4e:d6:05:67:57:77:51:
ec:04:ec:fc:f4:f9:f8:4c:83:45:b6:a7:7e:03:b5:
0e:2a:3d:02:ae:98:5b:29:1d:9e:d4:ee:12:91:14:
43:2f:0e:5c:39:ba:df:4d:9a:47:40:29:78:01:8c:
9d:df:7b:99:65:15:95:36:52:b0:ae:86:54:7d:7a:
60:cd:87:78:3b:8f:ef:7e:dc:56:ff:15:da:e8:ee:
3a:ed:27:85:fd:e2:ac:33:73:71:37:85:c4:8f:6b:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141231
sbgp-ipAddrBlock: critical
IPv4:
103.156.222.0/23
IPv6:
2001:df4:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
81:ef:2e:e1:3f:b4:63:89:8a:76:7e:d5:2e:49:03:d8:22:4c:
4f:db:6a:4e:ca:72:1e:4b:e1:dd:0a:76:67:ba:0d:bb:2f:d5:
5c:fe:15:5a:45:08:ba:06:7b:7c:ea:61:17:2e:d3:b9:18:8c:
ea:f1:f2:d6:25:35:9a:2c:8b:28:41:0f:fc:90:0f:12:15:18:
04:0f:be:28:de:f2:e0:f0:2b:c4:02:fd:b8:20:58:dc:c2:14:
74:9d:c3:82:bb:23:94:4b:67:9c:26:a5:0c:3f:a8:8b:7b:2d:
b5:dc:ff:58:18:19:34:60:4c:aa:96:48:0c:42:63:5d:db:d0:
72:c4:e2:15:06:8d:cb:f3:81:60:95:00:37:7f:c4:88:f7:6f:
0e:57:a3:0d:1d:37:a3:2c:05:5e:90:e0:de:2d:69:d4:80:07:
08:9b:b7:67:72:1c:03:aa:af:f4:61:6c:f6:30:15:a9:3d:37:
9f:cf:c6:cd:7b:93:d8:a5:63:0d:39:a0:af:13:9d:4a:66:f1:
b8:0b:c1:e3:da:d4:21:ce:10:c9:85:fa:a9:73:fe:c4:33:74:
57:f4:ed:e7:a3:1f:f0:17:a4:37:06:19:a2:ab:29:52:0c:17:
be:85:19:93:9d:e7:19:d0:17:d9:c4:1c:aa:e4:39:0c:7b:44:
4d:40:e6:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:27 2024 by rpki-client on console-fra.rpki-client.org