Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
File: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer (raw, json)
Hash identifier: FRLTyrPHcLMredHstjK+Se4Tq+mBWqfkaQPtWeeoK1Y=
Subject key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0215C8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Oct 2024 11:17:45 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 140571
IP: 103.150.105.0/24
IP: 202.70.139.0/24
IP: 2001:df3:6e80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136648 (0x215c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 24 11:17:45 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:56:d7:5a:f0:22:d7:29:95:ef:9e:6b:3a:
e7:8c:e0:58:ac:39:bb:80:87:dd:46:d8:2a:07:52:
b0:0a:1d:d5:be:95:8c:f1:22:57:bf:9a:34:70:4b:
92:9b:2f:71:5f:89:85:a4:15:30:8f:db:ea:64:d1:
9b:e7:ec:ec:40:f4:e5:61:5e:2f:67:e6:75:d8:1d:
f5:48:b3:e5:79:9b:ed:2d:5a:cf:7a:cc:2d:c0:c5:
a6:9f:e1:03:a2:d3:0f:7a:ec:f7:72:7d:25:18:9c:
5b:9c:99:76:10:4e:d7:c6:68:ba:55:30:6e:19:45:
7e:df:6f:6c:d2:5a:d5:0d:fb:2b:3b:39:04:d8:63:
62:f9:6c:ae:ac:4e:4e:76:79:d1:3d:e6:82:84:ea:
7d:58:fc:8d:50:d9:bc:9a:d6:97:8c:c3:4e:9b:77:
b8:ad:a5:4f:0e:4d:0c:74:8c:8f:88:c5:8b:26:ec:
9f:04:10:f6:c9:cb:7d:5d:ab:1d:fa:df:13:6a:5c:
13:2f:03:0f:18:75:09:8e:1b:5b:a9:d7:a0:23:de:
fc:ea:c1:d3:e9:25:57:41:85:8b:44:33:8f:e2:d1:
53:ff:0f:af:aa:fb:58:e5:a8:1f:ad:4d:6d:6b:16:
da:28:19:2e:1f:e6:e2:3b:73:f4:00:12:73:16:d4:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140571
sbgp-ipAddrBlock: critical
IPv4:
103.150.105.0/24
202.70.139.0/24
IPv6:
2001:df3:6e80::/48
Signature Algorithm: sha256WithRSAEncryption
82:fd:a8:07:08:14:99:65:59:4b:d0:09:02:dd:66:b4:2a:7b:
1c:60:5c:61:28:db:f3:93:31:f9:1c:4e:21:09:39:fe:b8:15:
3d:26:9c:b9:2d:4d:86:fd:72:ed:8c:89:b7:88:58:cd:4d:0c:
c2:e0:ad:17:d2:41:bb:e2:a4:1c:cf:69:e9:0c:28:d7:d2:9d:
72:d6:7a:ab:10:74:d4:53:c1:dd:73:33:28:49:8f:23:1a:40:
3e:ad:c3:3d:70:ee:c4:22:d3:42:0e:54:c9:34:ca:fa:c0:8e:
51:a4:f2:12:c5:33:c3:07:36:04:0b:de:b4:92:90:0d:ed:db:
2e:9c:bc:78:30:cc:d2:94:f7:20:95:cb:09:ef:4a:e6:ef:63:
31:0b:72:32:aa:89:13:51:9b:1c:df:18:27:bc:49:2b:54:65:
e8:a6:af:a3:79:02:0d:d1:85:7a:dd:c0:45:b5:d3:ab:99:8b:
4b:2e:16:ed:ba:3f:67:32:f4:e0:df:dd:4e:f1:25:a8:f1:c2:
e8:1c:59:e5:44:77:98:95:b4:91:ac:12:38:1a:bc:43:72:15:
86:af:20:af:b8:23:6e:fd:fc:6a:3b:60:e5:36:19:aa:26:ff:
2a:c5:d6:49:94:58:6e:4d:8a:a7:13:e6:dd:2f:4d:63:b0:3e:
7a:ba:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:27 2024 by rpki-client on console-ams.rpki-client.org