Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
File: 9UTm_uoP5rnfex2j2aWS_Lispik.cer (raw, json)
Hash identifier: HyEsXtG+Xo2VOZOd0WJnWhp6ynH7j33kTl4BRf/E+IA=
Subject key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A0C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 19:54:01 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 151965
IP: 103.67.50.0/23
IP: 2401:4760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137740 (0x21a0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 19:54:01 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:0b:37:1d:ea:cc:c5:38:f2:23:f3:36:0a:
35:c2:d8:73:f4:f9:fb:47:18:5b:4b:73:90:77:47:
78:92:81:dc:db:d9:f2:3f:d4:a0:85:73:70:43:93:
2d:c0:95:a9:6b:84:db:1e:21:d6:70:c1:41:f6:e9:
cc:96:fc:9f:bb:4b:dd:78:59:f9:39:de:9d:f3:7d:
5e:a3:99:6e:76:6f:1c:d7:a9:ff:a2:e6:a7:8e:61:
e4:8d:dd:fc:06:13:98:f2:8c:ce:cb:17:6d:53:fe:
8e:76:88:7e:bc:66:38:8b:52:d1:30:49:46:62:91:
43:fd:45:2f:08:d6:cc:a6:31:87:25:2b:99:9e:d3:
04:7b:67:22:50:4e:b5:7f:08:fe:5e:70:98:a4:8a:
9e:fc:ef:6e:98:2a:eb:c7:dc:37:64:d8:f2:cd:cc:
cb:cb:e6:6c:06:b7:4a:68:f1:70:4c:14:f7:a8:82:
75:cf:bc:cf:81:db:fb:c0:89:17:78:59:f5:02:e2:
51:60:73:f8:a2:59:fc:02:65:b6:af:09:f3:b1:0a:
d3:22:ce:e8:ec:62:2f:8b:47:7d:83:b4:a5:09:84:
67:ac:fc:c4:fd:1f:c5:77:54:d4:57:65:ef:4d:bb:
cc:bf:07:f0:1e:2b:b3:a3:fe:12:cb:87:ba:93:0b:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151965
sbgp-ipAddrBlock: critical
IPv4:
103.67.50.0/23
IPv6:
2401:4760::/32
Signature Algorithm: sha256WithRSAEncryption
3c:09:e1:6f:35:be:85:4d:66:6d:5a:9e:16:3f:85:f6:f8:b9:
72:44:90:dd:71:f3:0e:e7:50:ef:28:48:4d:b3:41:9d:22:46:
a3:e0:8f:11:cb:2f:a1:17:d8:84:e6:f7:e4:5e:95:df:26:6f:
5b:c5:72:7c:ab:89:e7:5a:30:f0:19:42:28:20:9f:b0:ae:b9:
12:44:0c:04:12:ad:f6:73:e9:b9:1d:be:bd:03:72:10:02:8a:
21:bb:86:68:94:35:a4:da:3d:47:c8:3e:31:7a:f4:b9:88:c5:
f9:76:a5:21:4a:6e:a1:28:19:a1:b2:ad:37:7c:78:30:f3:dc:
39:68:92:2e:94:78:99:53:17:18:d8:1c:f8:e1:a5:b1:fe:4f:
cf:51:7d:7a:16:c4:37:cf:9c:60:f3:07:d5:33:a9:a3:88:c9:
98:ea:a6:dd:a2:db:13:7b:5f:ec:56:19:35:be:06:99:81:75:
4e:ee:3c:8b:d5:17:52:e1:5c:27:fa:82:3f:f1:88:78:2a:fb:
6d:e7:df:85:4c:2e:7e:e4:19:4f:39:8c:79:51:00:3d:04:0e:
20:01:fc:43:ac:73:58:89:be:62:48:8a:a0:08:82:87:21:5b:
ce:a3:94:0c:90:76:44:d7:e0:fd:19:17:69:14:b5:9f:ae:17:
c6:c1:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:23 2024 by rpki-client on console-ams.rpki-client.org