Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.cer (raw, json)
Hash identifier: IM1SwAs5KI2z/NjK7YmWpkTg8mkGtB8k0NhYGD3sTwo=
Subject key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EC1B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Apr 2024 02:14:03 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 38305
IP: 202.14.106.0/24
IP: 202.27.239.0/24
IP: 202.37.99.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 06:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125979 (0x1ec1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 18 02:14:03 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:20:a3:49:89:f2:52:d5:e8:be:12:5f:99:
d9:0c:0d:fc:dd:c8:29:55:57:77:1f:39:a9:15:52:
4a:3b:74:fe:ef:eb:61:ea:35:9f:22:c0:45:a8:ec:
bf:63:16:ff:be:10:c4:b9:00:27:08:89:c7:55:f2:
70:5d:2d:c0:0c:13:c0:ef:6d:06:0a:80:f8:a9:37:
af:a6:6d:21:26:34:cc:2f:57:07:ca:bc:08:be:2c:
80:18:27:d7:2b:26:c7:88:35:47:f7:69:c6:ae:6d:
8c:c9:64:03:ee:ff:1e:82:28:f8:a3:2b:9d:1c:78:
b3:20:80:9f:80:1d:ed:84:c4:aa:37:ab:da:c1:6c:
7e:7a:cd:fb:51:fb:d5:44:70:52:b5:2a:86:e1:07:
35:0b:01:50:82:4e:70:ba:15:ad:6e:18:0d:d0:68:
e8:d4:20:79:40:56:2f:92:74:04:4e:24:95:eb:3a:
86:5d:07:51:52:37:1b:c7:e0:24:6c:13:57:b0:22:
65:ed:0c:d5:55:d5:d5:03:8c:6c:9f:11:32:3a:57:
8e:14:cb:5e:a0:e5:d0:26:5d:5f:a3:7c:07:d5:74:
69:3c:45:31:b5:02:5e:0e:fd:6d:a8:fd:fe:4e:88:
f2:c4:95:b8:a4:13:7b:c9:ae:ff:26:97:ae:f0:ba:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38305
sbgp-ipAddrBlock: critical
IPv4:
202.14.106.0/24
202.27.239.0/24
202.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
82:32:56:ef:e4:35:8c:d4:4e:48:c2:de:92:0b:41:a5:c1:02:
9d:e5:18:ce:50:99:01:79:1a:90:10:f9:8d:a4:fd:59:06:44:
2a:2d:c7:ee:4e:94:90:18:5d:2f:68:af:d3:6b:c9:57:b8:83:
1c:b1:6d:d0:b1:b4:8c:f5:d2:65:c8:52:80:17:28:4d:5a:3b:
3c:5b:ba:a1:97:1a:1f:06:6a:d6:ba:ce:91:6e:77:f7:3b:1e:
eb:9c:01:dc:a8:12:f7:f4:60:03:77:95:0d:34:0c:73:63:cd:
72:2e:36:00:65:8b:e6:2b:82:62:70:63:96:e7:8a:ca:ee:08:
c2:8c:9c:2d:29:4f:1b:05:9a:5b:03:1b:ab:6c:d6:28:64:c0:
d4:c3:cb:02:d8:bf:af:2c:15:63:c6:95:6e:74:b1:5d:f6:c5:
97:7e:47:f6:5f:54:b0:c7:4e:ea:da:dd:55:f1:eb:01:28:b5:
27:3d:58:e2:05:84:b3:df:4c:2c:37:07:f6:59:fc:99:a1:df:
21:10:4d:84:f2:27:44:42:c9:29:2f:3d:c9:ad:b0:cc:8b:eb:
d5:46:09:3d:fd:40:ee:93:c4:df:7c:ce:f6:ef:44:55:da:52:
ae:ed:a8:bf:33:ed:f6:9b:f5:36:13:6a:b4:c4:ad:27:f8:7e:
99:5b:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:03:23 2024 by rpki-client on console-ams.rpki-client.org