Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
File: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer (raw, json)
Hash identifier: b1fJkDCxPteQUBeCwD9pEyiOiO+QbYm6cAOwNm4Bbtg=
Subject key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0218AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 16:05:31 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 139613
AS: 139646
IP: 103.143.14.0/23
IP: 2407:21c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 16:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137391 (0x218af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 16:05:31 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:4e:6e:70:b3:16:44:2e:87:21:c6:ad:0c:
6e:91:f7:13:ac:63:13:30:5a:f6:90:71:4e:8f:36:
40:78:54:2a:13:b7:3f:b2:e1:d6:27:ee:b5:41:a3:
4c:03:28:56:22:27:97:31:e1:76:5d:53:1c:15:c4:
91:14:53:8b:88:ba:be:d1:a5:b8:92:c0:f3:bc:3f:
fb:8c:66:a5:0d:28:7f:9a:32:f2:87:5f:c9:dc:d6:
84:a0:ed:ea:1b:b9:8d:3b:34:a2:c2:e1:97:be:cf:
a4:2f:a3:da:cd:cc:69:8a:b6:96:d2:be:ec:1f:ef:
a1:f0:6d:3e:d9:d9:e7:92:6f:8e:c7:4a:77:cf:33:
2e:0b:e3:07:46:d9:32:1a:c0:b8:fa:16:97:cb:10:
03:a8:9d:ed:f8:77:09:44:6d:d0:f8:85:60:b9:60:
9f:7f:9e:31:59:67:7a:74:d8:c5:1c:ad:c9:12:1a:
46:00:f9:30:33:56:cb:60:d4:ae:e3:fe:d7:14:28:
d9:33:35:ca:3e:48:5b:b8:77:39:d8:52:62:8c:a9:
e3:41:a4:9e:0f:69:0a:7b:e6:73:4b:5e:56:8d:c7:
d2:90:68:25:c0:19:fb:00:4d:c0:53:40:7b:ed:5b:
bb:df:6f:ff:cd:07:f5:86:10:17:6b:55:c8:8c:20:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139613
139646
sbgp-ipAddrBlock: critical
IPv4:
103.143.14.0/23
IPv6:
2407:21c0::/32
Signature Algorithm: sha256WithRSAEncryption
36:7f:10:59:e1:cb:11:90:e4:b7:1f:17:3d:55:4b:85:80:42:
0c:d1:c8:2e:fd:e9:03:3c:98:5d:b3:ac:9c:1f:fa:60:48:a5:
57:45:01:0f:c2:94:61:d3:c0:cd:30:d4:95:65:1c:18:09:c5:
34:2f:67:87:24:d5:2f:aa:13:98:a2:85:d0:02:54:e3:87:43:
b1:c4:cd:73:f9:f2:67:39:05:78:f2:f3:69:44:33:e9:50:9d:
05:db:17:11:f9:0d:f1:0e:42:81:79:cf:bb:aa:02:3d:5a:a3:
7e:6c:c5:70:3d:6c:69:19:9c:35:6d:5d:05:3e:74:0b:a5:9d:
ad:44:8c:88:5f:83:d8:22:48:92:f1:b9:c2:65:e3:a2:28:d8:
29:b1:d4:3b:f0:e5:f2:f6:98:85:b4:d2:2f:ef:83:30:63:c9:
3b:bf:35:61:67:34:b1:7b:ba:ad:a0:c4:6c:06:22:53:d4:da:
8f:b0:b0:7f:c4:b8:67:61:d3:ec:93:f6:c2:70:15:9f:41:bc:
6f:91:5f:55:bc:5d:ea:92:30:d7:73:cc:87:91:37:71:76:c9:
74:38:bc:e3:57:1b:f9:4b:41:e6:b8:f6:a9:8a:61:bf:db:9d:
51:66:39:08:ea:60:b5:be:7b:4e:6e:7f:38:27:98:08:78:67:
94:bd:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:01:05 2024 by rpki-client on console-fra.rpki-client.org