Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer
File: CIaR8feL2c7-2A021lDWd2emvbA.cer (raw, json)
Hash identifier: Y5A1+B8NVnn/NfyQu3ZjxYAAfve8IzFWrASOImsmHv8=
Subject key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0204D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 Aug 2024 15:50:44 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 131188
IP: 103.1.12.0/22
IP: 111.91.236.0/22
IP: 2403:4900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132312 (0x204d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Aug 3 15:50:44 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A917DA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:90:dc:67:ef:44:ef:f3:85:72:b8:c7:ef:
ce:f0:97:ae:6f:75:4e:bb:19:e6:6b:cc:7d:80:a8:
37:6f:fe:57:0a:97:c5:2c:ab:f8:24:d1:ad:71:3d:
12:51:79:0a:8e:6a:d0:1f:bd:4f:11:38:fa:79:79:
1d:ca:d1:eb:78:24:8e:89:23:ef:37:0f:6d:50:49:
ff:7c:ea:1e:95:1b:86:6d:b2:ee:5a:95:70:fd:44:
40:2d:9d:4d:e1:ba:0a:33:94:a8:40:6b:6b:3a:c2:
6c:2f:58:d8:98:b9:05:f7:94:a8:63:94:9e:35:92:
52:f4:ff:48:2c:e5:17:19:b3:cc:cd:15:60:a5:6b:
c8:05:31:2e:6d:d1:0e:17:a4:4f:4c:f3:07:f4:27:
6a:be:2e:56:18:dc:61:9d:3f:57:f2:3a:12:8d:52:
68:d7:e9:94:e7:d4:76:aa:e9:e2:83:6f:37:16:b2:
88:3d:76:3c:b6:28:34:7f:9e:cc:7f:24:d8:ee:a1:
27:ea:15:65:00:b2:0c:24:b8:da:f9:4a:05:d6:7d:
3d:7b:7d:f4:72:d1:5f:21:d0:ab:65:cd:42:6b:3d:
fb:45:d7:80:52:a3:e3:bc:11:b1:a4:f7:4e:ab:97:
e4:a7:0e:ce:2d:10:ee:a5:24:b4:91:84:ae:2c:ce:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131188
sbgp-ipAddrBlock: critical
IPv4:
103.1.12.0/22
111.91.236.0/22
IPv6:
2403:4900::/32
Signature Algorithm: sha256WithRSAEncryption
2e:51:c8:2e:f8:28:92:12:49:c9:4d:53:52:73:37:3f:89:cd:
28:00:25:72:37:20:42:c6:0b:72:9b:8f:0b:c7:1f:6f:eb:77:
8e:a8:91:36:22:4e:a5:75:cd:34:82:22:04:f7:ef:e5:e4:c8:
bf:f6:25:e5:49:12:c6:55:de:cf:9f:4f:a0:d7:89:77:75:53:
b0:29:0e:bd:de:9d:6a:9d:dc:63:ec:1e:3d:36:c0:96:56:c4:
81:a8:52:0c:2f:2d:77:ca:47:58:5a:b1:3c:f8:e3:98:3d:5a:
2f:e7:7d:b4:86:a7:f9:8e:c9:6b:02:06:48:ce:35:55:d0:c9:
82:56:8d:30:5c:7f:48:98:6a:94:64:4d:f9:06:c9:46:20:00:
57:ad:74:bd:66:42:13:55:9e:35:61:fd:aa:b1:ae:61:89:c1:
fe:74:34:8b:f4:80:fc:19:6b:11:bd:55:60:70:15:73:ca:d1:
56:19:09:40:89:d0:58:01:55:45:8f:0c:89:33:2d:d7:1d:3c:
95:a7:b2:bb:39:6b:10:7c:ac:9c:7d:f9:60:fe:40:a5:90:0b:
6f:81:7a:a3:db:78:79:54:d7:51:b8:85:b8:a5:75:6e:94:99:
fc:a8:74:d5:e6:f5:19:b7:d8:bc:c1:e1:ca:6e:05:b0:13:9e:
a6:f2:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:02 2025 by rpki-client