Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
File: ByXySRgBUFGFyQaaQBNjXDi1a3I.cer (raw, json)
Hash identifier: BikDKiuZCLD7Ox/5EezNDnIwLrfCB43p0gMcGFsTYAw=
Subject key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021962
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 22:20:33 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 137189
IP: 103.104.140.0/23
IP: 103.104.143.0/24
IP: 2402:1340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137570 (0x21962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 22:20:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:7c:6e:7e:46:5b:2a:99:d0:ae:11:f5:0f:
1c:8c:f5:c3:f5:28:c3:54:a5:b6:5e:57:e1:13:f0:
b7:de:4d:1b:28:95:31:ca:af:46:d3:19:0b:fe:d4:
5a:38:b1:d6:bb:da:cf:70:14:02:6d:90:70:f9:22:
38:5a:c6:61:0b:5b:67:0a:58:bb:90:f8:b1:af:e5:
e3:01:37:8e:b3:64:ee:87:f9:e9:9e:c4:d9:0c:fb:
ca:55:96:7f:cc:7b:96:ce:28:29:09:d4:34:2e:d1:
45:39:26:7b:01:e1:b2:e1:eb:99:80:2d:3e:03:64:
56:78:f0:83:2a:af:8e:70:c9:e8:75:ab:b5:6e:dd:
86:59:2c:b3:98:50:f4:03:81:65:b0:6e:19:d7:6d:
4d:3e:4f:ec:d0:18:ee:40:de:dd:97:3a:6d:8b:73:
4e:a6:71:92:6a:6c:ec:73:23:5c:a5:2c:97:e8:c0:
b1:60:83:2d:be:5c:e8:da:26:80:d5:e2:39:0a:1a:
99:be:22:2e:f0:c0:ad:a2:b7:44:38:67:6d:24:cc:
b2:5a:b9:09:5b:c6:c7:5b:d6:c6:ed:9b:19:e1:01:
10:d3:a6:d6:88:2a:8d:34:c5:cb:95:8d:6c:a7:ee:
ab:79:6f:72:d6:a6:ca:ee:06:2b:43:f8:ef:ef:04:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137189
sbgp-ipAddrBlock: critical
IPv4:
103.104.140.0/23
103.104.143.0/24
IPv6:
2402:1340::/32
Signature Algorithm: sha256WithRSAEncryption
5a:44:0c:d3:ed:82:eb:43:40:6b:13:ad:a1:39:53:dd:f0:59:
59:c3:b4:8b:50:d5:fd:20:eb:70:99:e5:db:87:82:ad:65:48:
f1:00:2f:31:99:f2:8d:9a:9e:ab:c1:59:2c:49:bf:5f:48:d8:
48:6a:73:23:2a:a8:ad:2d:c4:c1:31:2a:94:cd:b3:ef:1c:09:
0a:1e:78:a7:57:2f:24:56:76:2e:ab:5b:d5:37:86:5b:4d:7b:
4f:db:03:7c:aa:c8:1e:54:43:34:2a:38:07:6d:8c:5b:eb:f8:
ab:4d:0e:e9:47:51:3c:8c:ad:de:39:f3:1a:14:93:07:bb:c6:
42:32:82:da:d6:3e:58:2e:eb:00:e8:65:29:7a:8e:79:7c:a2:
0a:90:8b:0d:ae:54:b8:6b:75:e3:b9:c1:22:d8:ae:ec:0d:26:
b7:fc:98:ff:f7:0b:c1:8a:b8:00:4d:dd:cc:1e:3b:18:93:cc:
40:7c:27:fb:e3:07:c5:11:c8:f1:61:72:22:03:5f:09:05:7d:
f7:d6:07:ff:dc:57:f0:83:21:03:a5:e4:c4:01:b6:9f:1f:40:
0f:d1:05:7e:ef:99:6c:b8:5d:d3:e9:85:ac:38:06:fa:26:3a:
2d:4d:4b:fa:f1:be:58:3e:e7:3a:9e:bc:82:fd:ef:53:04:27:
f2:6e:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:40 2024 by rpki-client on console-ams.rpki-client.org