Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.cer (raw, json)
Hash identifier: SuPyz+LkpK/aSOFM6/5WF0ZFPWNA0Qxlc/6MLGzhUpY=
Subject key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021815
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Nov 2024 22:33:31 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138403
IP: 103.124.180.0/22
IP: 2403:e3c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137237 (0x21815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 22:33:31 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:c7:ed:69:cb:58:a2:cc:f4:71:33:ab:06:
a5:32:4d:e7:1d:b5:77:f9:40:27:d8:38:13:18:a9:
59:bc:f8:0d:fa:59:2b:61:4d:89:4d:96:3b:44:e0:
e5:c2:9a:c6:06:f6:b0:a5:90:9a:14:84:7b:9f:08:
b1:84:51:7a:4f:f6:48:4c:8e:fa:de:40:8a:61:a9:
49:64:2f:d1:5b:79:e0:ba:a0:01:0c:fc:d4:b2:4f:
87:d9:fe:9e:1e:b4:99:ae:52:28:c0:80:fb:10:2e:
26:db:5c:18:e5:1b:bd:07:8f:7c:79:24:70:17:38:
f3:d1:2a:9f:dc:4c:90:5e:e9:1a:2f:7d:b7:cc:c7:
17:14:c3:67:6e:e6:07:9f:d4:c9:ed:8a:c9:2e:47:
45:45:a4:c8:f3:6a:8e:68:0a:34:db:9e:00:5e:b5:
75:9f:6e:91:93:29:b6:5b:1b:9f:50:7a:0e:30:e6:
27:e4:67:b2:83:fb:27:e5:c8:f0:3c:92:6e:3d:28:
9a:d5:f7:38:d1:2b:df:3f:93:7d:5c:dc:47:b5:14:
5a:f0:65:fe:1c:49:41:f2:0c:dc:9c:17:be:9b:19:
5b:78:f8:45:27:b3:a0:41:19:67:85:38:78:fd:e0:
ea:8f:6c:7d:1f:2a:82:b8:dd:7f:b8:08:c4:55:dc:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138403
sbgp-ipAddrBlock: critical
IPv4:
103.124.180.0/22
IPv6:
2403:e3c0::/32
Signature Algorithm: sha256WithRSAEncryption
43:bb:d6:c5:f6:7d:23:67:5e:ba:36:1f:41:fd:33:02:03:ef:
97:1d:43:f9:d9:3c:4c:84:ab:a1:a7:24:38:b6:42:cf:49:98:
04:82:3f:fa:96:3d:10:86:40:c7:5d:c8:a6:2c:87:13:4e:d1:
6e:6c:71:4e:76:bb:1f:9f:27:27:9f:74:a7:87:c7:95:ec:c3:
62:b3:62:8c:af:29:cc:e5:54:bf:65:83:13:36:c6:64:cd:85:
f0:0d:70:10:ed:89:c2:28:61:cf:75:4a:ba:7d:39:b4:72:4e:
24:35:dc:11:70:71:03:2e:90:1b:78:70:ef:06:91:af:61:f7:
63:fa:4c:6f:36:2e:55:a6:2d:77:53:79:b0:e6:5c:45:0d:15:
1a:0c:96:cc:34:6d:cc:81:b8:22:b5:05:b0:2e:6d:d6:89:d9:
07:d7:14:57:2b:80:58:46:0a:c8:de:7e:7b:4d:fe:f1:37:51:
8c:b9:60:6f:4c:9a:a0:b7:58:69:a6:a3:5a:46:03:1a:b1:fa:
56:0c:31:23:23:19:14:35:da:de:f7:ed:ab:fa:29:62:87:f7:
bd:15:0f:66:a6:60:d6:f1:51:83:61:af:55:a9:e1:a4:87:df:
01:f9:54:c4:7f:28:d9:e1:51:e4:b9:a8:6a:55:7e:bc:79:57:
f5:d9:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:11 2024 by rpki-client on console-fra.rpki-client.org