Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
File: 6rJKkMbQRs2D-170o8WY5OqaFow.cer (raw, json)
Hash identifier: 3Q3yxdiVDGbNJa0qjJd1L9ktg01CrYlEHQZhGfwCct4=
Subject key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FDB7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 13:48:54 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 139192
IP: 103.139.144.0/23
IP: 2001:df0:8080::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130487 (0x1fdb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 13:48:54 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:57:26:4c:c9:8b:98:03:4f:3c:e8:31:25:
64:a1:04:8b:a5:79:e5:99:72:0f:e8:5c:56:e0:b8:
28:33:82:ad:6a:ea:fe:5a:63:29:84:a1:77:97:bb:
2c:ac:fc:a9:cf:03:48:60:7e:6a:6d:ed:00:f8:7d:
b7:7a:b8:61:a5:e6:a9:8a:5e:ed:60:bf:85:6d:57:
86:c7:bf:b6:22:06:f5:0b:21:96:cd:02:dd:dd:20:
20:12:88:bb:7b:0b:b8:c2:54:e6:23:d0:5c:27:68:
57:c8:9c:37:04:d7:77:56:e1:51:6d:b1:19:0d:b7:
96:52:82:5b:e2:51:39:de:3e:72:d7:c5:65:64:21:
c5:f6:1e:59:8c:4e:af:6a:76:89:36:93:c5:5c:32:
d7:0a:12:c7:15:fc:b7:a4:74:90:fd:66:15:2d:fa:
49:f4:7b:b7:5a:96:2f:b5:76:31:e1:5f:74:ba:fd:
fb:bc:88:7c:86:68:43:d5:50:37:94:73:7f:aa:51:
ab:1c:b6:4e:e7:73:03:3d:93:66:9f:39:e2:0e:ad:
30:48:4e:e7:cf:1a:c5:b3:4b:bc:c0:65:ce:ce:3d:
aa:5f:94:4d:62:a5:8c:ea:5f:c0:1a:7e:a3:ca:88:
79:64:37:4c:0d:a8:f7:60:11:fe:56:08:85:7d:a0:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139192
sbgp-ipAddrBlock: critical
IPv4:
103.139.144.0/23
IPv6:
2001:df0:8080::/48
Signature Algorithm: sha256WithRSAEncryption
69:93:be:48:cc:f3:52:61:99:a5:0a:c0:b7:17:27:63:2e:6c:
be:18:27:19:f9:05:62:20:c4:28:5b:0d:c9:ec:11:f2:f7:b7:
9e:99:06:c8:84:80:09:2b:d1:f4:41:4b:6a:3e:d6:7c:3e:b9:
a7:01:e5:d5:b6:4f:d0:75:47:7e:35:7b:c1:ea:e9:dc:be:86:
d7:6c:3c:05:3e:78:75:af:45:7d:ce:61:a1:5f:de:2b:c6:1f:
c8:48:25:8d:5e:e5:d6:ed:3a:20:52:7e:74:7c:3a:c6:68:67:
5b:db:bf:41:e5:6c:c2:8f:d1:55:95:1b:eb:b9:5a:a1:48:be:
09:40:4b:28:84:cc:21:77:43:92:a9:16:19:f2:a0:0e:03:ea:
27:2e:08:91:cc:32:7c:29:b3:4e:55:4b:e5:28:e2:22:aa:ad:
cd:d0:58:c5:93:9f:b1:49:9f:d9:fa:b1:de:30:80:74:79:37:
0c:e6:39:0d:e4:31:2b:c0:40:31:e3:c4:db:6b:7b:ea:84:c2:
3c:1a:31:d8:f5:3c:20:eb:0b:66:2b:62:c0:92:df:5e:9d:6b:
47:3a:06:bd:86:3c:e3:07:44:d3:f8:be:de:b3:5d:50:77:02:
1a:a7:28:32:ec:ad:d0:9b:31:08:34:29:b5:79:4d:37:0d:c5:
cb:3b:f7:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:24 2024 by rpki-client on console-fra.rpki-client.org