Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer (raw, json)
Hash identifier: +OUQubGqWCCoig+GTRdcPySl1SS7CM1KH9kNLxIHTWY=
Subject key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B059
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Jul 2023 18:46:59 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 137823
IP: 103.115.24.0/22
IP: 2402:dbc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110681 (0x1b059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 18:46:59 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:6a:2a:92:b4:32:15:3e:85:d0:e5:a2:c0:
2b:8d:ed:f8:c2:0f:84:48:30:4e:03:5c:2e:00:8a:
4e:13:f2:a2:12:0f:57:2e:b6:48:81:01:6b:17:b7:
be:92:e2:84:a9:c4:ac:2e:f9:63:22:79:62:09:75:
c0:3d:ce:98:54:a9:44:d6:f7:a5:c1:9a:97:ca:60:
2d:1a:1b:6c:d4:cb:02:44:b6:7e:32:a3:ca:c2:6a:
a8:6f:46:06:60:f8:02:97:a1:db:a4:a9:d5:1e:8b:
bc:41:73:c6:f8:00:47:f0:5b:c1:c3:4c:a9:df:de:
1a:3c:be:4b:f3:12:a8:43:57:9c:b3:d3:49:bb:10:
b6:c9:40:88:c6:06:8c:9b:59:5e:36:8f:4c:db:c7:
39:cd:4b:62:49:1b:a5:34:06:1b:42:06:37:78:54:
fb:9a:1c:50:6f:4d:29:1e:a9:bf:72:f7:27:75:b9:
b1:3c:62:99:a2:f6:47:ed:3b:4b:43:05:d1:d1:cd:
bd:e0:28:16:ef:59:86:24:6f:7e:1a:d1:98:75:88:
41:30:bd:1a:ff:4c:46:d7:8a:d3:47:3e:32:5c:d6:
7f:a5:e9:2d:63:cf:25:88:97:51:db:f8:01:63:0b:
40:63:b2:1b:fa:26:16:bc:4e:f4:e7:37:16:77:51:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137823
sbgp-ipAddrBlock: critical
IPv4:
103.115.24.0/22
IPv6:
2402:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
83:3d:c8:7a:08:81:a8:65:5e:a5:07:90:32:ec:03:90:b4:3c:
ae:80:15:f5:22:9d:b4:b4:c0:d3:eb:c2:b2:42:4d:be:df:64:
77:ae:0f:61:56:86:a2:f8:6f:fd:99:60:cb:80:35:fa:d4:75:
16:50:60:f0:c2:f5:03:b2:7c:f7:a5:f5:14:48:4b:af:7a:1a:
81:8f:07:d2:f6:9b:ea:d1:ca:dc:5c:0c:e9:41:a9:54:63:f2:
ed:ea:62:79:a4:9f:ec:c6:3d:86:7b:d6:09:7d:4c:ac:cb:05:
93:d1:ee:bd:09:18:9a:a1:e5:96:36:6f:19:8a:b5:c3:f2:59:
e8:b0:82:01:29:14:03:d3:15:fe:4d:be:30:a7:4d:18:8b:1a:
b8:1e:c6:37:03:c5:14:4e:31:ae:c6:d3:7d:70:d7:a1:72:05:
e1:e9:91:92:5d:f6:7b:bb:cb:95:a9:56:38:0f:fd:6c:17:e0:
71:e4:bf:5d:51:1e:c0:ef:31:a9:15:d4:3c:b7:c2:45:7a:50:
d5:78:73:4d:a1:67:5f:b5:9b:27:70:b2:99:42:52:de:f7:90:
3d:53:1e:43:be:37:9b:e1:bb:69:f0:fc:9b:90:2b:ee:53:fc:
ed:39:cc:01:f6:12:82:4f:bb:ba:4a:f6:4b:77:28:60:b2:39:
62:f1:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:08:32 2024 by rpki-client on console-fra.rpki-client.org