Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
File: C-AoY1W14laYjORU35P8D8p_YEA.cer (raw, json)
Hash identifier: gh9QfOPlEYvsCLAI72tslFxvFWcqROg1qQDkebNyLMU=
Subject key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E1DE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Mar 2024 06:22:44 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.67.20.0/23
IP: 2001:df1:cf40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123358 (0x1e1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 06:22:44 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:28:a2:8f:33:6b:11:b5:69:08:fe:e0:68:
b2:f9:2b:8c:37:4c:45:2d:04:6b:02:e8:0b:f9:51:
6c:b9:7a:e8:4b:77:ef:d8:c6:5d:96:c1:ef:70:53:
0d:7b:7e:00:71:3b:26:74:3f:34:53:48:91:56:73:
65:bc:b4:57:83:c7:8d:16:f1:c7:f0:82:3a:1e:44:
9d:2c:b5:26:f1:a1:3c:fd:f4:4e:af:57:0b:9d:ad:
ff:98:5f:db:6c:90:58:a5:49:40:84:ee:5a:d6:b0:
b5:0d:96:31:7e:5d:30:b4:1a:fd:69:3a:49:52:21:
ca:7a:68:85:2a:ed:ba:ca:27:6c:85:b9:40:fe:9e:
7a:2d:0e:c6:65:63:30:1e:55:3e:5c:62:88:95:fb:
94:07:5a:5e:0a:a4:90:ab:85:ed:70:b5:89:df:4d:
18:e0:ba:4e:61:24:61:10:51:02:86:65:59:d4:44:
ca:fd:e0:a5:21:6e:bb:e5:27:c8:29:b3:03:78:b0:
e0:77:af:cd:14:6a:61:66:5b:d5:b7:46:5b:2a:d4:
56:34:8c:71:c5:8e:ff:4d:5a:9a:08:d9:05:01:31:
46:24:92:f0:f7:6a:5d:05:d5:57:46:96:a4:70:95:
0f:45:86:1a:23:37:1d:a1:c5:d2:42:4c:bf:aa:d0:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.20.0/23
IPv6:
2001:df1:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
ab:aa:35:6e:e0:d7:29:6a:e2:91:3c:4a:9d:58:55:01:45:f9:
3a:40:15:1a:cb:83:6d:ff:99:ce:35:ca:c7:7e:52:a0:ed:01:
c5:df:ad:0b:33:69:be:3e:38:5e:06:0b:55:3d:84:ee:fb:47:
f8:51:0e:3f:8d:cc:8c:25:db:8e:5c:9a:d4:04:bf:7c:8e:5a:
f1:80:db:21:25:cb:b0:62:8f:da:59:eb:fb:33:91:96:3c:56:
9e:2e:a4:b6:d5:87:7a:62:f8:cc:1e:6b:57:c9:e8:0b:a0:4d:
e7:75:a5:e4:df:23:b2:aa:32:b2:48:cc:d4:18:6e:1c:9a:5d:
ad:e5:19:eb:e6:9a:79:f4:34:e8:72:c1:14:3d:af:f2:7d:fe:
4e:0c:c6:e0:2e:c8:a9:c1:fb:67:31:97:74:92:8f:39:d7:c1:
46:6e:dd:36:2a:38:ab:63:0b:bc:27:6a:88:6a:6b:a0:dd:db:
a5:8b:a4:94:70:71:95:6d:f6:25:9d:2b:9e:66:8b:05:80:46:
9e:d7:64:46:67:dd:8d:5f:a4:9c:4f:e1:35:d8:7e:85:55:a2:
b1:0d:a8:d3:b0:14:a9:48:70:06:56:19:59:11:05:5f:9d:02:
56:18:90:8a:10:01:a3:c2:96:cf:2a:c4:30:64:1c:51:b7:78:
3e:05:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:18:45 2024 by rpki-client on console-fra.rpki-client.org