Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.cer (raw, json)
Hash identifier: 71V4sy7sTtop16jaZqI9GC5rdbAF7PJe1EWU53lqwhI=
Subject key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220BB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Dec 2024 05:13:50 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 18219
IP: 203.34.237.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Jan 2025 09:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139451 (0x220bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 5 05:13:50 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:df:35:69:ce:de:80:6c:27:6d:94:72:52:
cd:66:c3:5c:c1:77:aa:3e:5b:61:50:e7:94:b4:da:
19:c0:0d:12:65:1f:95:ba:f3:dd:23:8d:e1:aa:6e:
e8:26:f1:6e:c0:fb:fa:4f:0c:63:83:f1:e7:2d:d5:
0d:02:4d:83:03:50:23:09:82:c2:31:0d:ac:79:f1:
44:67:88:79:d4:7d:bf:b1:f8:6c:e9:18:e4:bc:e5:
e8:aa:89:a7:96:dd:7b:a0:53:bc:6b:49:c2:4b:12:
31:d9:f8:46:c6:bd:76:58:4e:48:96:1d:06:63:4b:
e4:81:d2:fe:e2:c5:33:c0:39:2f:d0:d5:33:86:ec:
f7:3c:4e:5d:1f:7d:7b:37:fe:a4:9a:c8:d4:b3:52:
be:b0:99:3f:bc:70:f8:e6:1f:05:10:f0:f0:55:6d:
e5:f9:a3:1d:55:c8:3f:06:52:73:85:01:3e:53:a9:
ce:20:aa:a1:a6:10:88:53:28:e4:09:86:cd:18:83:
d4:f7:12:0f:d9:b7:8c:7d:e6:20:d1:71:01:b6:86:
29:64:a9:69:23:bc:08:70:22:7d:79:d3:24:22:86:
73:65:71:b3:be:92:26:ec:6a:04:e4:1f:1b:c4:58:
d6:6a:6e:9f:87:10:5d:f0:20:d1:1a:82:fa:d7:d7:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18219
sbgp-ipAddrBlock: critical
IPv4:
203.34.237.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f5:de:81:e8:aa:c8:9f:b6:f1:6c:ed:1b:ba:8e:1a:1f:a9:
f6:07:db:8b:70:6c:5a:6f:10:73:8a:fc:fb:fe:d7:9c:12:62:
d5:bb:70:16:23:d0:5b:68:22:f3:0e:ad:92:29:15:34:1f:f9:
34:04:b1:a9:c7:a4:c8:73:3d:af:65:de:ca:59:b5:3d:11:91:
a4:f2:d3:d3:b9:84:0c:8c:58:d3:db:82:ec:89:61:37:f0:66:
8a:53:a8:6e:42:10:5f:9d:d6:6b:ea:57:81:2b:53:33:81:6a:
d9:a7:8f:52:13:25:64:ad:85:08:c4:ff:ff:4f:21:da:ff:b6:
68:37:01:50:b9:7a:95:5e:e7:0f:be:7c:6a:7d:36:c0:c5:5e:
79:f7:6e:42:df:43:a1:ce:35:36:0d:a6:95:20:4c:71:fc:e5:
8b:aa:a1:26:d7:9e:a5:f5:10:f0:3c:1a:f7:db:a7:25:c0:15:
ad:b6:67:15:a1:48:79:9b:d6:ef:25:0b:b1:c8:4e:17:3c:dc:
30:68:f1:24:5a:a9:61:69:e0:fc:0e:6d:92:32:14:b2:a4:a8:
0c:69:b0:20:df:7d:40:67:94:d2:13:75:02:44:64:9c:54:05:
00:a5:a2:8b:b1:7a:4f:87:15:ee:1d:bf:bb:68:07:2c:e5:b0:
a0:66:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:22:45 2024 by rpki-client on console-fra.rpki-client.org