Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
File: CB6icKn0s2sOyJai0hSO5Ok-Xys.cer (raw, json)
Hash identifier: Iui0zL9bnWpszElYo1/pbOKvcqD6RoHf996f4LIvyk4=
Subject key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C68D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Oct 2023 07:23:24 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 147056
IP: 103.173.187.0/24
IP: 2001:df7:a680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116365 (0x1c68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 07:23:24 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:7e:7a:b4:5e:ed:87:3c:d7:5c:ca:f6:e0:
2f:37:52:f2:f2:f8:cc:22:1a:62:41:ea:b8:ce:3e:
09:bf:2b:20:09:9c:fd:12:45:30:2f:ba:83:ab:35:
48:b7:3e:d4:3b:0d:ad:55:a9:e6:84:32:33:8f:12:
b8:c8:9b:c3:9d:eb:18:19:8a:0a:94:45:ab:45:12:
2d:38:e9:05:50:a6:a8:19:25:b6:f6:57:58:72:41:
9a:19:3c:eb:73:bd:b3:02:1c:ca:68:8f:6e:25:fd:
79:16:cb:80:cc:e3:1b:62:c9:e9:66:b9:d1:01:1a:
d7:22:5a:4a:6c:7c:ad:0d:7a:86:da:5f:84:2d:ab:
0d:21:1f:23:a2:cc:36:40:2a:d8:e5:bd:9b:51:cd:
68:fc:19:b6:21:48:c4:61:8c:0e:0b:6e:3d:24:89:
0d:bc:3b:cc:3d:51:90:d8:b9:b6:df:19:d7:f5:03:
e9:15:a6:2b:5d:99:22:43:e3:e8:b4:43:7f:4d:d4:
15:ac:93:66:c7:0d:10:6a:bd:80:a2:f2:3e:bf:87:
34:dc:61:a7:bb:4b:81:f3:f8:9a:86:c0:52:34:c9:
c7:eb:4b:b5:fb:49:cf:5f:8b:db:0e:ad:24:a9:7b:
d4:87:bf:6c:22:79:b4:9e:8f:f7:1a:6d:34:be:47:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147056
sbgp-ipAddrBlock: critical
IPv4:
103.173.187.0/24
IPv6:
2001:df7:a680::/48
Signature Algorithm: sha256WithRSAEncryption
34:ea:17:05:0c:e0:fa:eb:6d:a5:f1:44:c9:64:5f:41:21:41:
bb:fc:b4:1d:dd:29:7f:c4:65:c0:19:c2:82:ca:54:4b:71:75:
5f:03:11:ca:4b:32:dd:a7:94:71:54:97:67:9e:d4:4c:9c:3e:
92:ec:9b:04:8c:81:39:ce:b0:c7:39:ad:3b:4c:71:aa:3a:09:
7f:14:8c:e4:1b:24:c1:c8:09:d7:6e:eb:3b:c3:27:1b:cc:0b:
18:9a:53:57:9f:5c:d5:87:11:27:a1:31:19:9d:15:b9:04:d7:
85:11:99:3d:52:50:f0:8f:30:2c:46:1f:d6:0d:c2:72:a1:1a:
fb:b9:03:e3:94:54:a4:f7:42:2a:19:dd:cb:7c:c6:1c:e4:c9:
34:01:a9:ea:af:0c:31:b1:01:8b:d5:75:77:08:aa:75:8b:06:
c1:36:82:2a:19:3e:15:fc:24:97:11:bd:e2:61:20:33:c4:4c:
4a:0a:4e:38:46:71:b5:90:18:52:7f:cc:0d:77:cb:00:cf:74:
14:b1:04:bd:2e:24:c0:2c:aa:3a:41:34:68:ed:79:47:0d:1e:
9f:cf:cf:6a:11:9f:09:f9:bf:fa:14:58:2f:61:4e:36:20:3c:
bf:3a:4b:4b:1d:9b:e6:e2:18:a8:4b:0c:fc:83:7c:c7:94:16:
e3:b6:ef:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 01:06:52 2024 by rpki-client on console-fra.rpki-client.org