Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
File: 8SYNZTBeOoldssaRtq3APlGfPQA.cer (raw, json)
Hash identifier: uvszuI0Auujb8IrJc1Dqkyqh2JMunV3PaMWqhXwbCv8=
Subject key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0214A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Oct 2024 12:47:36 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 55757
IP: 202.59.231.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136355 (0x214a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 18 12:47:36 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:4a:3f:1b:89:a7:e6:50:08:96:40:8e:cb:
c2:df:f0:e8:f2:9b:ac:94:82:d9:95:ff:bd:ae:b8:
59:dc:ab:e1:af:24:27:c1:b8:c9:c7:6a:53:52:91:
40:70:2e:4c:dd:ff:a5:43:4a:41:0b:cd:42:85:2d:
e2:2c:34:a8:15:0a:f5:34:1d:d1:a0:b3:d0:1a:6d:
73:ea:c8:75:e9:3d:cd:de:92:e1:60:bf:72:b2:99:
8b:f4:33:a3:0c:e2:98:4c:c4:1a:ab:d4:9f:df:c6:
7f:85:45:a3:99:f4:34:00:ab:39:59:5c:17:95:a2:
82:b4:43:22:ca:bf:64:39:13:5e:04:25:f8:9a:30:
0d:b7:be:e4:ec:e4:8e:70:35:25:57:64:5e:3f:6b:
69:f2:1e:3e:a6:7f:fc:80:c2:8e:ea:ab:99:0b:b9:
22:5b:54:7b:b5:36:f6:9b:e9:0c:f7:67:1e:1b:10:
e7:67:31:03:a1:a5:a0:c0:e0:7c:f8:58:74:18:5c:
9d:a4:b8:e5:a6:85:be:ee:a1:60:6c:cf:c2:4d:1e:
d0:9e:4e:8e:26:be:99:90:34:8f:70:81:d1:ad:34:
7a:3e:91:2a:06:c6:6f:81:97:ac:1b:dd:61:d9:b5:
33:92:72:96:36:04:8b:5c:42:17:c7:6a:f0:81:60:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55757
sbgp-ipAddrBlock: critical
IPv4:
202.59.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:43:8d:bf:95:67:38:2f:53:24:f5:a3:a9:de:5d:e6:fb:a6:
0f:1a:41:ee:87:e3:de:9a:b0:ba:4e:2c:c2:78:19:31:fb:3d:
0e:a3:9d:b0:0e:e7:75:6f:9d:2f:43:6f:cf:df:85:e1:12:3b:
b4:6a:46:b7:a0:0e:8d:c3:bc:2e:12:c7:a2:c8:fa:ab:68:27:
36:5d:62:d9:99:aa:bd:31:c9:1e:f4:24:1d:ee:f5:76:ae:b3:
28:65:98:59:fa:08:80:91:41:13:ad:9d:38:09:42:a5:94:0c:
2b:2d:3e:9c:d4:c2:d6:44:66:91:dc:57:e6:ad:09:07:d9:2d:
c5:40:26:cc:b7:b2:cd:5b:99:1a:85:8e:8c:00:ad:6d:55:38:
8e:b2:de:31:07:ce:fb:7f:d8:da:97:3a:c9:6b:08:40:46:9f:
22:3e:42:c9:38:79:28:e4:ff:87:f7:df:c8:56:c7:fa:86:8c:
cf:f0:cf:0a:10:cb:ca:21:f4:64:54:2e:57:e6:ec:80:9b:83:
08:fa:e3:cd:d7:f9:73:39:14:47:6d:48:aa:b2:00:9f:75:dc:
e1:ef:fc:db:a5:f3:86:0d:6e:b3:cb:3c:d0:18:c8:22:a5:26:
64:1e:b6:e2:91:0b:9c:78:56:eb:c0:dc:e5:6e:0d:a0:3b:c9:
a1:98:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:21 2024 by rpki-client on console-ams.rpki-client.org