Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer
File: CIaR8feL2c7-2A021lDWd2emvbA.cer (raw, json)
Hash identifier: 8dOjlp6r8SvCVydxY9WAQC+hVrt5kZXSchbEzrcob2c=
Subject key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AEBE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Jul 2023 16:26:24 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 131188
IP: 103.1.12.0/22
IP: 111.91.236.0/22
IP: 2403:4900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110270 (0x1aebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 6 16:26:24 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A917DA4A/serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:90:dc:67:ef:44:ef:f3:85:72:b8:c7:ef:
ce:f0:97:ae:6f:75:4e:bb:19:e6:6b:cc:7d:80:a8:
37:6f:fe:57:0a:97:c5:2c:ab:f8:24:d1:ad:71:3d:
12:51:79:0a:8e:6a:d0:1f:bd:4f:11:38:fa:79:79:
1d:ca:d1:eb:78:24:8e:89:23:ef:37:0f:6d:50:49:
ff:7c:ea:1e:95:1b:86:6d:b2:ee:5a:95:70:fd:44:
40:2d:9d:4d:e1:ba:0a:33:94:a8:40:6b:6b:3a:c2:
6c:2f:58:d8:98:b9:05:f7:94:a8:63:94:9e:35:92:
52:f4:ff:48:2c:e5:17:19:b3:cc:cd:15:60:a5:6b:
c8:05:31:2e:6d:d1:0e:17:a4:4f:4c:f3:07:f4:27:
6a:be:2e:56:18:dc:61:9d:3f:57:f2:3a:12:8d:52:
68:d7:e9:94:e7:d4:76:aa:e9:e2:83:6f:37:16:b2:
88:3d:76:3c:b6:28:34:7f:9e:cc:7f:24:d8:ee:a1:
27:ea:15:65:00:b2:0c:24:b8:da:f9:4a:05:d6:7d:
3d:7b:7d:f4:72:d1:5f:21:d0:ab:65:cd:42:6b:3d:
fb:45:d7:80:52:a3:e3:bc:11:b1:a4:f7:4e:ab:97:
e4:a7:0e:ce:2d:10:ee:a5:24:b4:91:84:ae:2c:ce:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131188
sbgp-ipAddrBlock: critical
IPv4:
103.1.12.0/22
111.91.236.0/22
IPv6:
2403:4900::/32
Signature Algorithm: sha256WithRSAEncryption
ac:29:ff:a8:41:66:bf:e0:e3:91:f1:79:8d:72:7f:2b:c5:40:
3b:bb:41:9c:2a:53:ac:7a:5c:6a:0c:a8:4e:0a:b8:c8:5a:15:
4e:77:c9:c0:ea:fd:38:cf:a1:80:fc:93:b3:69:10:03:cf:e5:
b3:28:fb:c8:d3:77:10:ae:ba:72:db:af:74:33:c9:42:9f:93:
92:37:53:79:99:8a:bc:8e:c3:9f:d3:4b:e9:7c:74:0c:66:c8:
3f:67:a2:d8:89:52:a6:de:21:f5:99:ae:12:a8:17:ba:bb:0e:
99:70:d3:37:7c:25:11:81:1b:3d:a3:be:6a:90:7a:56:ea:8d:
27:5f:e4:04:d5:31:50:f0:4e:bc:77:18:10:52:72:88:ee:3d:
b9:38:99:93:ee:f1:f7:cc:b8:25:15:88:5b:9d:1f:a3:68:75:
40:17:af:eb:00:7b:05:2b:46:68:1e:5a:22:90:dd:53:9c:21:
4f:27:40:c1:51:c9:69:6a:0a:42:54:16:9d:6d:60:97:24:f6:
c4:05:29:bc:19:0a:92:32:db:ee:b8:e0:f2:ae:5d:0d:a5:12:
62:fc:7c:9d:a3:6f:87:b9:b1:4b:e6:e5:0a:bd:5e:ad:e0:ac:
1e:82:fc:a3:66:87:ef:e4:60:7d:a0:17:03:19:af:31:16:62:
00:6d:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:03 2024 by rpki-client on console-ams.rpki-client.org