Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
File: 72i9vAcsq0VbbaMWDt-PtsSI3RU.cer (raw, json)
Hash identifier: kOw3HbLGGBZ/o9abbGMfHRZnKVEg47DqSbY47hNcNBQ=
Subject key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AA8D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 17 Jun 2023 16:12:53 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 133159
IP: 45.124.52.0/22
IP: 103.1.184.0/22
IP: 103.16.128.0/22
IP: 103.17.56.0/23
IP: 103.100.36.0/22
IP: 110.232.112.0/22
IP: 112.213.32.0/21
IP: 119.42.52.0/22
IP: 150.107.72.0/22
IP: 175.45.180.0/22
IP: 203.18.30.0/24
IP: 203.29.240.0/22
IP: 203.57.50.0/23
IP: 203.57.114.0/23
IP: 2404:9400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 03:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109197 (0x1aa8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 17 16:12:53 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:37:99:5f:c8:c2:dc:7e:a6:fe:c8:be:50:
3f:01:f3:a5:6b:3e:78:09:6a:39:ef:1b:a8:3e:34:
97:1b:ac:dd:f4:82:f1:37:9c:78:11:21:4c:e0:0f:
29:e3:93:6e:e4:cb:79:d4:b9:33:06:d0:d7:5a:1c:
95:37:9b:ee:ab:51:ff:6f:b8:11:92:77:8a:ac:91:
0b:cb:c9:9b:71:bd:50:b1:24:56:15:c7:3b:9a:6d:
f2:c9:f2:49:92:1e:9e:a3:c4:99:3d:02:9b:70:a1:
e6:ba:b7:0c:04:c4:a8:74:c1:d1:e1:63:f5:96:3c:
c1:e0:44:a4:b9:9b:b0:93:52:bf:3f:27:e8:f2:f1:
20:5d:f8:62:2a:28:6f:a4:50:8a:49:7e:fe:fa:a5:
aa:f7:33:49:70:0e:66:b9:ae:bf:f6:f9:1f:ff:67:
03:0a:c7:40:55:91:94:f7:6a:ab:84:fe:e3:12:92:
a4:61:cf:98:a3:16:2d:fe:12:e6:a3:e4:b9:9d:c5:
49:0b:43:c8:74:b4:1b:7b:78:fb:84:8c:cb:53:21:
1e:5d:f8:d6:cc:67:93:6d:7d:cb:8e:19:24:a4:b0:
08:68:3f:dc:d9:23:fa:5c:2f:d6:d3:32:6f:d0:de:
9b:a9:af:8b:3f:a8:f6:89:25:17:2d:dd:90:ec:39:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133159
sbgp-ipAddrBlock: critical
IPv4:
45.124.52.0/22
103.1.184.0/22
103.16.128.0/22
103.17.56.0/23
103.100.36.0/22
110.232.112.0/22
112.213.32.0/21
119.42.52.0/22
150.107.72.0/22
175.45.180.0/22
203.18.30.0/24
203.29.240.0/22
203.57.50.0/23
203.57.114.0/23
IPv6:
2404:9400::/32
Signature Algorithm: sha256WithRSAEncryption
3f:89:63:c2:f0:2f:cb:7d:aa:f4:eb:d3:a0:8f:ee:39:94:b8:
67:8c:bd:7b:82:4e:87:19:43:18:13:f3:d0:fb:44:0a:82:d5:
f8:23:0e:ac:a2:22:43:f9:4d:5a:76:be:45:28:ad:05:f9:54:
6e:9d:83:00:d6:65:28:b3:d5:06:66:22:84:f7:bc:47:50:51:
f1:85:b8:59:0b:01:1f:0c:f3:59:86:1f:4c:d0:b5:7c:3b:cd:
a4:df:f7:9d:d1:eb:7b:7d:cc:66:20:be:2f:1a:2a:d6:d6:68:
85:7d:a4:f4:21:b8:d3:ad:40:b5:d5:ac:63:1d:23:43:6d:0a:
2c:b7:96:df:28:3a:87:6e:4c:d1:83:14:98:74:cb:53:ce:fa:
12:6c:e5:a9:83:9d:03:43:48:36:4b:28:f1:50:ed:e3:2b:d3:
29:67:98:c2:e0:f2:70:bb:46:97:44:0e:59:62:68:ed:59:9e:
b3:b3:56:75:35:53:99:07:95:3a:3b:b0:2d:a2:fd:5d:18:63:
a7:10:1a:89:db:12:da:86:c1:e6:67:8e:3a:88:ac:09:f6:d9:
4f:9a:8b:95:db:53:22:53:b2:9d:95:ae:33:2d:fb:04:bb:57:
45:b1:a2:6f:a5:d1:75:b8:b5:ef:a8:80:61:69:ce:cd:76:63:
1a:53:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:48:10 2024 by rpki-client on console-fra.rpki-client.org