Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer
File: CL0cxa7edJKy8iV6oZTbCFVa9vI.cer (raw, json)
Hash identifier: ECuR1cfczVe5DxKbs1+qah2F0pkBLeQCcTf0KR0sdLw=
Subject key identifier: 08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01ADFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Jul 2023 22:19:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 135438
IP: 103.111.12.0/23
IP: 2402:91c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110074 (0x1adfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 22:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bb:2e:6d:e1:fc:d5:ce:f7:76:bf:29:d4:6b:
ee:a6:67:5d:8b:2a:e0:d5:db:69:9d:29:5f:61:2c:
2d:16:78:c5:57:c1:5a:15:67:d4:49:67:74:d0:e2:
02:17:88:48:e8:0f:f4:e2:c0:31:7f:7e:eb:f1:59:
25:65:9a:c7:cb:8e:6c:3c:e8:23:f2:02:75:d0:c7:
c7:16:b6:aa:a4:65:41:c9:0a:de:60:82:c8:a6:f2:
57:10:26:f4:36:6f:3b:89:cb:45:cf:30:c5:ce:8a:
70:30:54:98:1a:71:72:5a:be:fc:9d:4c:51:48:21:
b8:6c:d2:1a:a5:08:40:3c:b9:97:59:6d:c0:ad:3c:
f2:11:d8:61:39:ea:2e:b4:71:9e:f7:cb:61:c3:8b:
b7:52:c3:a8:43:8b:3a:b6:35:d1:a3:d4:be:d4:3d:
b4:9f:e6:2a:0d:24:e1:0d:30:d2:4b:ed:ca:6b:25:
f4:49:11:c1:4b:d1:10:c4:80:6c:93:df:a9:38:86:
71:2b:13:d7:59:9c:18:08:8c:d3:be:60:5b:d9:f2:
dc:2b:40:8b:37:62:d3:b8:ff:e6:a7:4e:31:b1:74:
d1:8f:63:8b:76:96:d7:89:18:5f:db:d5:02:8d:ac:
c0:62:21:0f:55:de:38:c3:b0:f9:cf:61:4f:5f:b6:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135438
sbgp-ipAddrBlock: critical
IPv4:
103.111.12.0/23
IPv6:
2402:91c0::/32
Signature Algorithm: sha256WithRSAEncryption
77:db:8e:2d:dc:74:e2:bc:50:8f:6d:4e:86:b6:6e:26:d4:9e:
72:c2:c3:03:92:7c:bd:5d:54:9a:3c:27:9f:8d:c3:16:8d:b8:
fa:7c:13:c4:b1:e3:b2:b0:85:4c:e5:79:a5:8b:44:15:52:12:
2f:62:1d:89:9c:d4:1b:83:7b:e4:57:b0:13:24:07:47:f5:25:
43:70:5b:1b:5e:66:48:76:e3:5b:a7:73:b9:48:a4:15:6b:15:
61:79:cc:17:60:1b:2b:4e:90:a0:af:fa:ba:36:5e:6b:b3:5c:
b8:fb:c3:62:8c:ed:0f:b3:77:4d:94:ec:eb:d2:92:91:60:4b:
51:66:cf:b7:2e:28:0b:2e:1f:e7:c9:68:22:36:8c:c5:af:f0:
e2:e5:ad:41:05:41:28:95:73:98:a2:e4:f7:00:44:0b:21:a2:
5b:7d:1d:63:04:9f:89:9c:99:ac:da:2e:f0:b9:d0:e6:4f:67:
14:82:d9:78:04:bd:32:7e:2f:84:fc:cd:13:66:1d:e5:43:0d:
40:d3:ab:2a:e8:98:32:c4:d8:1d:ee:7f:f8:52:2c:b0:4a:05:
d6:e7:98:8b:d2:a2:35:d3:89:49:3d:38:eb:9c:69:41:a8:83:
a5:35:8b:2a:ca:2f:6a:3c:41:ce:f5:82:80:8b:53:94:95:9f:
4a:bc:65:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:15 2024 by rpki-client on console-fra.rpki-client.org