Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
File: 7qiugNcT5rItsOxgkVfwxZpS_X8.cer (raw, json)
Hash identifier: OMeIHwnd6mmeaYIo+mFZZAH2S3gKW2SDzvUrbxdcOw4=
Subject key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC3F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Nov 2023 14:57:08 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 38196
AS: 45127
AS: 45669
AS: 58470
IP: 45.117.88.0/22
IP: 103.57.152.0/22
IP: 103.65.248.0/23
IP: 119.160.0.0/17
IP: 203.124.24.0/21
IP: 2404:3100::/32
IP: 2407:9c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 02:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117823 (0x1cc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 22 14:57:08 2023 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:ec:86:13:08:89:bc:66:51:62:d1:97:c5:
d8:a0:fb:ba:8d:0d:73:62:2a:c0:58:81:d3:ba:d3:
93:fe:4d:45:b7:75:71:d0:fd:90:bd:68:8b:cc:be:
9e:07:0f:27:48:ce:79:01:6b:b6:71:f5:9d:15:13:
ff:ed:e6:3a:c2:b0:d7:d9:2f:2b:8b:e7:55:fa:d6:
99:18:f5:83:9d:25:86:f9:bc:73:ee:74:71:43:a7:
a2:8d:58:25:2e:21:e1:42:da:4c:4f:1a:d1:01:f5:
4a:35:d7:db:fc:05:8a:cc:2d:87:4a:41:26:37:bb:
d9:72:84:d6:ac:75:b1:12:cf:26:bb:65:f0:aa:03:
02:b2:9d:c2:c3:e3:b0:8d:91:d1:08:8b:60:4c:a8:
af:c7:2f:3c:0d:d8:96:55:a7:39:5e:a0:6f:b2:cf:
5e:06:98:6e:48:f3:45:8c:fa:98:7d:06:b0:f6:d1:
ee:81:62:75:58:b2:da:a2:78:94:3b:fa:d0:0b:76:
27:91:a6:16:ea:8a:82:bd:12:80:b4:30:e5:9e:6c:
9b:e1:89:30:75:4c:77:3f:be:92:da:ef:43:55:7b:
34:d5:2f:e9:c0:f4:06:ad:77:0f:6c:6d:c6:3e:c0:
36:63:ff:9f:99:5c:31:28:fc:bc:09:ae:86:79:dc:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38196
45127
45669
58470
sbgp-ipAddrBlock: critical
IPv4:
45.117.88.0/22
103.57.152.0/22
103.65.248.0/23
119.160.0.0/17
203.124.24.0/21
IPv6:
2404:3100::/32
2407:9c00::/32
Signature Algorithm: sha256WithRSAEncryption
bd:87:ba:3a:e1:04:6c:9a:d0:97:81:cf:b8:56:4e:72:77:cc:
b8:51:77:92:2c:f2:c6:15:2b:28:50:98:44:88:0c:09:26:bf:
55:13:20:15:d3:60:6c:89:fe:8c:46:8a:e0:05:a7:cf:2c:34:
2e:09:0e:87:87:fe:01:dc:8b:1c:34:56:80:f2:fe:9c:01:31:
d2:57:48:4a:83:66:de:41:ee:6f:37:74:2e:04:58:2d:b0:ed:
e8:e9:4e:62:6d:8b:b3:46:5f:21:e3:25:5e:7f:81:57:16:9e:
3a:e0:1c:e5:96:f9:fa:3e:f5:b3:89:ac:ad:ab:41:8d:fe:ab:
31:86:d5:2e:df:9c:df:50:93:8e:ab:5f:d4:29:e0:61:c7:1e:
e7:bc:8e:47:24:77:88:56:73:76:0f:ed:da:bd:b0:34:0e:69:
f3:03:ba:98:54:89:da:23:b5:dd:b0:04:fd:b6:51:51:70:c6:
44:6f:bd:f3:6b:67:09:f6:60:ae:fc:16:bd:d1:1a:37:22:c9:
f3:67:cb:ca:0c:d1:ba:11:aa:11:df:64:8d:a8:7d:b3:4b:6a:
b2:72:6b:0a:c5:47:ae:d5:20:8d:a7:7d:83:a2:cb:99:81:97:
f8:3f:cc:1e:62:d7:ad:a0:f9:d6:27:51:30:0a:0c:2e:c7:2a:
00:e8:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 03:19:40 2024 by rpki-client on console-fra.rpki-client.org