Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer (raw, json)
Hash identifier: DsTDJYXNTz0OQpehropKEE4GArJIMUAIZ5O1vzLRA6o=
Subject key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C711
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Oct 2023 03:19:11 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 135428
IP: 103.138.184.0/24
IP: 103.219.113.0/24
IP: 2001:df2:1300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116497 (0x1c711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 03:19:11 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:ab:2f:b3:88:aa:7f:bb:04:6e:e4:96:63:
9c:37:1a:75:a4:9b:2c:d3:40:e6:1b:7c:64:05:76:
69:04:a4:85:82:35:d9:09:e8:ef:9a:22:b0:70:84:
fe:0f:cb:15:2b:27:50:7e:ca:c5:d5:a1:e7:31:fb:
4d:10:5e:88:0f:fe:21:f7:5c:f6:cc:73:2e:e6:95:
9a:25:68:dd:ad:4b:27:9b:07:88:55:c7:c4:45:61:
f2:01:5e:00:09:67:6b:3b:d2:6f:9b:01:d9:e4:63:
25:08:98:b6:7c:eb:ac:83:ee:bd:50:a7:61:ca:9a:
65:2c:2e:02:c4:0f:c5:e1:ac:7a:dd:e3:86:02:93:
3c:f6:5e:a2:c9:19:1b:3b:f4:ea:15:cd:a9:28:6a:
eb:d1:a1:13:6f:c0:ef:29:e9:75:1f:12:ed:ab:cd:
02:d0:8d:0d:07:e5:92:55:40:59:29:9f:47:07:73:
94:df:4e:f0:9c:e4:89:01:79:64:49:2e:ec:61:e0:
6f:b2:3d:ee:fd:da:c4:ec:de:36:37:e2:12:c9:1f:
05:2a:6f:2c:ce:2e:6c:69:c4:b3:ea:78:6e:75:f9:
57:ca:28:df:ea:a9:7a:d7:cb:4a:22:9d:6d:fd:2d:
7f:6e:19:68:0d:c9:2e:2e:be:68:69:7c:e8:69:06:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135428
sbgp-ipAddrBlock: critical
IPv4:
103.138.184.0/24
103.219.113.0/24
IPv6:
2001:df2:1300::/48
Signature Algorithm: sha256WithRSAEncryption
7c:53:85:30:d7:34:8f:c3:ff:5f:9c:57:3c:45:8a:02:62:e7:
11:2c:bb:51:7e:e9:9b:08:a0:3f:08:92:a9:e9:74:15:91:e1:
a4:20:e1:18:14:2f:9a:15:c0:e8:2b:15:ac:7a:50:c7:4d:f4:
93:1c:99:1f:52:a6:c9:3a:8f:0f:fd:52:f3:22:2a:1c:2d:9e:
c0:b6:95:42:e2:f4:56:6a:9c:56:9a:bf:21:e9:d1:8a:14:97:
e9:87:cf:f0:dc:fd:a9:bd:5b:82:11:de:5d:c6:41:fa:35:ed:
e7:b8:d8:dc:b1:4a:81:80:f3:35:04:b6:17:0f:16:04:25:ae:
73:2e:77:25:44:30:cb:0f:68:b7:0b:c4:c4:76:ad:bd:47:14:
1e:cf:5b:b0:2e:2f:92:e9:a7:b5:41:de:01:26:9c:7e:19:3f:
64:aa:cd:90:68:99:c3:7e:08:1b:d1:34:5e:95:06:48:95:ba:
e2:c2:c4:e9:b1:c3:28:85:22:20:38:a7:21:c0:db:c0:1a:cd:
cf:00:01:17:8a:38:2f:9d:a8:b7:6e:be:db:11:db:df:de:07:
e9:ec:92:16:31:0c:d6:4e:9e:c4:5d:b6:69:18:fc:39:98:f9:
e7:7c:1c:18:43:08:34:6e:47:06:c2:b6:41:38:b9:9f:33:3b:
f0:23:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:24:20 2024 by rpki-client on console-ams.rpki-client.org