Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer (raw, json)
Hash identifier: Koi1PNDqvMXA3ZOfpdGf/2b85BhS7cb+Cy6gmvVDFco=
Subject key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F80A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 08 Jun 2024 09:13:55 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 132335
IP: 43.230.200.0/22
IP: 45.64.104.0/22
IP: 45.113.224.0/22
IP: 45.120.136.0/22
IP: 103.12.211.0/24
IP: 103.13.112.0/22
IP: 103.26.204.0/22
IP: 103.250.184.0 -- 103.250.186.255
IP: 157.119.40.0/22
IP: 2001:df2:1000::/47
IP: 2405:7140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 18:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129034 (0x1f80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 8 09:13:55 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:c7:22:aa:a8:d8:6f:b8:2e:09:8e:54:73:
62:0e:50:03:79:dc:76:19:91:9b:55:35:bc:d6:ea:
26:56:d7:fc:9a:ea:08:d1:08:b2:9e:a9:7f:07:5b:
b3:ab:83:ae:51:f3:81:5d:ce:8c:50:92:3c:1e:88:
61:1d:34:59:e1:fb:05:61:38:f5:03:5f:9a:10:0a:
d3:ed:f6:3e:bb:d9:bc:e2:86:c9:95:9f:d5:12:9c:
e8:ec:40:a6:19:6e:38:c0:7a:41:78:55:d0:2a:27:
66:b9:84:03:be:fa:b4:92:6b:f1:38:1f:86:68:ee:
d5:8e:3c:6b:ae:ab:3e:d5:22:32:0b:50:21:9d:7f:
42:f9:5a:32:ec:5a:13:71:ba:18:a4:a3:9a:c8:97:
f6:98:da:5b:ec:bf:ee:09:ea:65:7a:e1:0e:b4:a4:
d3:b6:16:7b:30:66:30:bd:1c:bf:bd:09:36:da:c2:
6e:cc:55:19:b5:61:0c:52:15:05:15:9e:66:6c:4c:
6d:68:ca:a2:87:6a:0a:49:da:3f:1d:e9:32:63:f8:
31:46:cc:d9:49:34:0f:c5:d0:63:b6:cc:27:81:95:
1b:28:25:99:b7:ee:1b:67:79:d4:8d:37:ef:19:df:
01:e6:e4:f4:76:8f:2c:59:54:b8:1b:e4:62:57:bd:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132335
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0/22
45.64.104.0/22
45.113.224.0/22
45.120.136.0/22
103.12.211.0/24
103.13.112.0/22
103.26.204.0/22
103.250.184.0-103.250.186.255
157.119.40.0/22
IPv6:
2001:df2:1000::/47
2405:7140::/32
Signature Algorithm: sha256WithRSAEncryption
59:34:b5:3a:2c:5a:2d:d9:d9:3a:c3:f9:0c:60:37:1e:05:f9:
82:a5:24:92:7d:9b:c1:e9:71:54:d0:86:56:ef:e7:f2:c3:ea:
d4:63:1e:ca:9f:30:8c:07:85:62:af:06:0a:1b:84:6b:ef:08:
23:5c:53:91:b5:b6:37:96:67:74:b9:01:5a:f6:4a:be:48:01:
b1:ae:3b:a6:94:18:d4:7d:4d:e0:0c:b8:04:c4:88:d7:e4:fd:
97:12:b1:27:78:af:87:b0:78:a8:bd:c5:46:87:9f:64:6c:06:
2d:81:c3:0d:c8:59:87:96:54:18:c8:ae:80:41:17:fc:de:5e:
13:e7:47:4a:5c:27:1e:9a:04:ca:4a:d3:00:3e:26:8d:f4:c1:
10:e5:76:22:80:7a:e6:4f:03:14:e6:6b:40:b8:ad:7e:58:20:
84:bd:3c:59:e1:16:f5:3b:61:4e:0e:25:24:98:d0:4f:bb:33:
a7:be:48:b1:11:a9:89:d4:04:9d:71:8d:b6:fc:50:d9:e1:27:
6f:e0:f4:3f:dd:2f:cb:5b:fc:dd:c9:17:dc:2c:43:5c:f7:e0:
32:f5:48:0c:f2:82:e0:b6:1c:f8:59:e1:fe:6d:02:06:7c:58:
90:81:8a:d5:66:42:c5:d6:f7:42:47:64:85:b4:f2:f3:3a:3e:
b3:05:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:10 2024 by rpki-client on console-fra.rpki-client.org