Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
File: BZOGVctKEp6P3fsJQsICA-N-G8E.cer (raw, json)
Hash identifier: OCR4F5e7uZFcO+i0eAOqgT7zm3A6YNQXuDqm5+xnVOU=
Subject key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EAD1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Apr 2024 23:00:39 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.182.174.0/23
IP: 2001:df0:7dc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 19:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125649 (0x1ead1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 23:00:39 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:64:20:86:46:7f:54:67:d3:ef:3c:57:70:
91:c5:48:2d:52:23:b1:c1:03:70:9c:6c:1f:1d:f7:
00:85:2d:38:41:e4:1f:06:61:99:7a:0f:41:4b:6b:
a2:e7:fc:18:49:5c:58:99:a0:3f:33:0d:41:19:27:
c1:e2:c3:f7:73:51:6f:ef:2f:ac:e6:fd:3e:f7:03:
98:76:ef:4a:fc:66:0e:96:74:e7:78:bc:b0:dd:7d:
38:e6:d3:2b:9c:55:01:95:df:d0:83:12:40:d6:6b:
95:29:a6:41:e5:c6:95:88:34:b7:f9:fa:df:6e:78:
a3:2d:5d:39:9c:d5:26:b7:a1:61:55:0d:aa:56:80:
ed:fd:32:5b:55:83:c1:f4:43:e2:e2:82:ce:9a:5f:
f3:0e:96:26:28:65:d6:cf:fd:82:7d:e4:76:46:ea:
2b:69:5c:a8:76:90:82:45:d3:51:97:de:e2:1d:df:
a0:63:f9:46:fb:ec:f6:39:ae:51:ca:3d:5e:46:78:
7f:f6:e7:97:4f:19:d0:a3:5a:18:dd:a6:a1:1b:c4:
02:23:83:d6:79:28:9b:e9:66:fc:9e:7b:e8:e6:13:
c7:0e:43:0b:bd:b6:f7:97:76:a0:23:cf:4b:66:29:
ee:ca:da:39:cc:da:80:c9:67:75:4b:56:87:a8:ee:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.174.0/23
IPv6:
2001:df0:7dc0::/48
Signature Algorithm: sha256WithRSAEncryption
70:6d:28:6c:08:3d:18:31:3f:da:50:1e:94:18:18:ee:3d:1a:
b4:c7:e2:ab:7a:0f:b0:86:09:4b:d9:60:b5:e0:9f:6b:7e:ee:
84:06:65:87:5b:83:58:b2:d5:d2:2b:40:76:c5:26:11:5c:eb:
f4:0c:04:09:cf:52:7b:08:44:d1:4e:a2:31:89:f2:62:e9:95:
d1:43:be:1a:19:7c:54:83:45:b6:e6:26:21:3c:d5:d2:e8:d6:
ce:13:d5:f6:ca:a4:62:27:08:fc:ea:d2:29:c5:ed:0c:2a:60:
bc:ae:10:94:ce:52:7b:05:61:6a:6b:de:70:3d:d5:c8:28:72:
b7:f8:3f:20:a2:25:58:cc:7a:77:5b:e1:57:56:61:29:60:cf:
fa:50:2a:fb:63:78:75:02:b3:73:58:54:aa:6c:33:64:e1:19:
d9:de:4b:8f:78:f4:9d:5e:38:b2:7e:f7:0e:c3:41:3a:54:19:
fe:2f:0d:bb:67:3f:96:48:73:9f:8b:cf:62:e4:e3:98:d1:0c:
8d:1e:dc:74:3e:98:fb:d9:39:ca:a3:97:57:5e:16:81:6a:9e:
ac:c5:c4:39:fb:76:bf:2b:a7:e8:b8:76:ad:9f:4d:fb:33:8c:
b0:2b:a7:09:71:11:a3:72:74:1e:e7:87:8c:75:d0:fe:aa:2d:
c4:e3:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:34:57 2024 by rpki-client on console-ams.rpki-client.org