Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
File: AIsjUb6f1m04sRBQZ5c09E-l2X0.cer (raw, json)
Hash identifier: q5GaQuNx46zhHYNJDtDxTEq9PEoDUnZjlDu6Kc+EYQA=
Subject key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EB7B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Apr 2024 10:15:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 152677
IP: 117.103.118.0/23
IP: 2001:df3:a5c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 06:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125819 (0x1eb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 10:15:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:9f:ca:4c:f0:33:f5:96:26:39:68:b5:cc:
a3:21:f5:bb:26:75:ea:c4:d9:87:1d:c8:ab:45:96:
28:73:38:8e:dc:86:b8:67:97:79:84:06:f1:e0:66:
73:1d:b8:09:a1:c2:0e:c5:b5:bd:a6:f7:f9:db:f5:
b1:12:ef:bf:dc:5e:3f:93:b2:bd:7a:b2:83:a6:32:
54:c4:25:71:52:96:10:42:fa:d7:0e:b9:bf:5b:98:
f9:17:c2:0f:2f:7e:d3:00:76:8a:59:3e:94:d6:35:
8b:56:e5:7c:07:2c:55:8c:af:88:64:35:33:fc:4a:
41:50:f1:11:84:47:d2:28:8e:4c:f3:a0:03:94:3a:
bc:ad:d4:fe:8b:91:ca:93:f5:a4:f1:3c:03:45:6f:
0b:41:92:17:2a:f2:45:79:5e:8f:a8:71:ad:ee:87:
54:a9:60:a8:54:87:9c:50:5c:fc:f9:2c:c2:91:dd:
0f:d8:14:0c:0d:22:28:2e:16:ec:8f:cc:56:f2:1b:
7c:ff:02:6c:79:86:e2:66:2d:62:b8:3b:2d:a1:93:
33:1b:f2:28:a7:70:9d:98:2d:c7:f8:a0:60:ff:b2:
16:fa:5d:d6:92:01:fd:be:20:b8:c4:96:8c:c9:cd:
d1:30:14:45:18:a0:9c:0c:3c:a6:3c:03:73:ff:f9:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152677
sbgp-ipAddrBlock: critical
IPv4:
117.103.118.0/23
IPv6:
2001:df3:a5c0::/48
Signature Algorithm: sha256WithRSAEncryption
ca:b0:49:c8:cf:20:07:cb:3f:b7:62:de:8e:a7:d8:30:c2:e7:
cf:b4:08:6e:b9:15:83:cf:74:a0:64:22:c7:48:a1:eb:e6:d1:
aa:7a:14:6e:34:1a:cb:cc:dc:54:ad:b3:dd:2f:ed:60:20:4b:
f3:24:33:a7:29:76:f7:70:cf:63:88:20:f3:71:7d:bd:22:57:
6a:89:ed:26:9a:ec:3b:05:a9:1f:62:9c:d8:d2:6b:50:67:06:
41:4a:b1:9b:e7:b6:f2:2d:70:e7:e7:94:ce:0d:43:b6:56:fe:
0e:e9:1d:90:27:cd:09:4b:0e:fb:10:af:d9:c7:19:13:63:4f:
8a:05:9a:6b:df:03:60:d7:ee:3c:33:c5:ff:f3:c3:ac:07:13:
79:2a:21:0a:22:e8:34:28:33:19:bc:99:67:84:59:09:61:e7:
1a:79:af:4f:d8:e5:d9:d1:41:1b:07:cc:4d:91:d0:de:1f:fb:
43:0d:ec:f2:be:e8:90:04:e7:99:88:f7:54:09:55:16:3d:8b:
53:f8:22:3f:6a:51:14:c9:7e:52:99:76:40:93:1e:15:c1:fc:
6a:6b:a6:f0:2a:a8:0c:9f:c2:4d:42:c9:44:6a:a9:f3:db:b4:
38:d3:b7:5e:2c:df:e5:ae:ae:e0:ad:33:bb:40:ec:6c:04:80:
da:5c:e1:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 08:03:22 2024 by rpki-client on console-ams.rpki-client.org