Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9z8-EYZs_PNnOPhCnkwIA7flvYA.cer
File: 9z8-EYZs_PNnOPhCnkwIA7flvYA.cer (raw, json)
Hash identifier: A3GkeaHTJ13bEeyDbnDzY/2TshHzaMKaNUQZe7OqhsM=
Subject key identifier: F7:3F:3E:11:86:6C:FC:F3:67:38:F8:42:9E:4C:08:03:B7:E5:BD:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C999
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Nov 2023 20:33:13 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 135410
IP: 103.154.50.0/24
IP: 2001:df4:6980::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117145 (0x1c999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 7 20:33:13 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91D7F76/serialNumber=F73F3E11866CFCF36738F8429E4C0803B7E5BD80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:9a:3b:0c:73:3b:7a:bd:2a:23:ed:65:be:
84:24:f2:ee:db:dd:b0:5d:45:d3:ea:34:30:84:51:
20:d0:80:ea:47:ef:80:89:b5:d4:72:d5:3a:e7:db:
a0:05:3e:06:7a:28:c1:4e:f4:4f:eb:d9:31:01:de:
93:8f:e5:32:e4:e5:42:1c:2d:40:a8:e5:ee:bd:50:
4f:e7:85:20:a2:0c:df:26:e9:07:fa:8b:35:f4:a3:
d4:a7:d6:22:d8:51:dd:27:d7:d1:60:82:77:d5:f6:
f8:c1:3b:af:a8:cb:5f:16:07:0e:fc:d9:6f:13:5e:
95:2f:aa:c4:a3:5d:c8:a3:b5:b9:7a:45:38:1a:e5:
65:d2:90:19:5a:cd:89:2a:e6:2d:9d:56:a3:3d:92:
d8:12:a9:73:c0:d6:ca:20:16:02:90:4d:06:c7:dd:
67:30:37:82:b9:61:ac:5b:11:b2:6c:26:e6:24:bc:
19:06:24:4b:b2:e1:e8:a3:af:f0:14:94:8c:73:72:
56:c3:cb:23:91:23:b3:ee:a5:73:e0:91:4c:06:3b:
c0:e3:57:b3:34:92:4f:e2:ce:fb:f8:eb:fa:c8:65:
a7:7e:33:bf:c8:83:38:09:51:38:d6:8d:7b:34:71:
20:9b:71:77:e2:92:bf:35:87:d6:b6:2a:24:37:7f:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:3E:11:86:6C:FC:F3:67:38:F8:42:9E:4C:08:03:B7:E5:BD:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135410
sbgp-ipAddrBlock: critical
IPv4:
103.154.50.0/24
IPv6:
2001:df4:6980::/47
Signature Algorithm: sha256WithRSAEncryption
d3:70:8f:c7:03:b6:e6:b6:4f:4f:99:43:58:6d:39:5d:8b:9b:
f7:4e:e8:dd:3d:bc:88:3b:87:26:72:bd:e1:5e:41:8e:f6:ca:
f5:f6:89:b1:9c:72:62:0e:45:4b:15:d5:f8:52:53:02:08:b2:
30:4d:4b:c6:00:3b:26:ca:b2:93:6f:88:2f:da:95:2b:c9:f3:
66:8b:ff:be:1b:c5:98:1b:11:20:0f:f2:42:c3:da:54:c3:67:
f1:5f:3a:57:cb:98:37:8b:01:aa:91:76:e8:17:2f:b0:13:ab:
4e:53:e1:7b:fd:d2:e8:b5:0b:4f:29:ec:63:34:7d:bd:1d:40:
fc:ed:58:b1:5d:bd:52:18:6e:13:e1:25:4b:c0:75:43:2d:80:
8f:81:53:8e:32:4d:71:40:a6:c9:63:a5:a3:42:f1:09:3a:3b:
e0:9f:46:15:5c:3f:b7:74:3b:8f:99:30:5a:cd:95:35:c3:4b:
3b:e5:4f:cc:fc:cb:0d:7a:9c:40:05:c6:61:52:8f:8a:0d:06:
27:07:42:23:72:7f:16:65:61:b9:28:06:47:53:79:92:35:40:
12:7d:f8:fa:8b:de:5f:27:93:05:fa:ef:41:e5:ad:3e:6e:34:
9f:d7:43:80:4b:f0:1f:7c:ed:71:39:54:92:75:ec:20:65:ab:
ea:a3:eb:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:45 2024 by rpki-client on console-ams.rpki-client.org