Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer
File: CekFd0f2O6Ciga54ATZozt6kCrQ.cer (raw, json)
Hash identifier: BghIVu5z+ocWagvh1dgStYyDAQCTQXBCW4rc8dLG5co=
Subject key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E15D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Feb 2024 06:05:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 141730
IP: 103.148.106.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 21:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123229 (0x1e15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 29 06:05:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:0a:3f:64:a9:e7:40:de:d7:44:e2:e7:aa:
36:13:02:b6:83:07:ca:66:00:69:e5:4b:9c:5b:73:
27:6c:5e:30:de:5e:e5:6b:3a:11:6f:4a:55:d9:0e:
b9:f4:9a:24:7d:2c:9c:fa:a0:0b:ee:21:d8:83:bd:
76:51:f2:da:bb:45:5d:5f:9c:12:5c:d4:41:18:59:
09:43:e2:28:0a:b0:7b:84:8d:77:d5:dd:33:0b:af:
eb:1d:53:5b:39:69:ae:0f:22:d6:cf:7d:79:a7:40:
38:a2:79:6e:ec:a8:5a:4f:42:57:af:2c:86:fa:66:
39:ab:08:30:b3:57:47:85:ac:05:57:9a:ed:72:29:
6d:0e:fb:a4:ad:34:96:0c:cb:d8:e5:d6:dd:cd:0c:
cf:cd:28:5f:1e:74:67:b4:d2:cc:3b:81:e4:f0:0d:
43:db:d1:95:e1:f1:9b:f5:1e:e5:75:20:7e:af:7d:
1f:8e:fd:4b:ed:50:c2:55:e3:ff:e3:14:35:23:56:
19:5a:9e:8e:09:7b:e8:c6:58:90:7a:20:1e:75:e5:
e4:ef:60:2f:4e:7e:fa:e2:2d:7c:82:c1:32:67:0e:
09:13:37:d2:cc:22:df:82:79:90:52:c3:9d:c9:0e:
0a:54:4c:5e:68:16:55:0b:e1:30:d3:d5:6e:31:5c:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141730
sbgp-ipAddrBlock: critical
IPv4:
103.148.106.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:8e:c0:0a:ab:34:e4:c9:4c:91:cc:49:a3:1d:3e:8d:7e:62:
c9:97:f9:7b:f4:73:e3:36:bf:b7:46:11:cf:6f:01:d3:6e:e0:
db:32:7f:78:6e:fc:87:4c:71:8c:7c:b3:1a:35:36:3f:e1:d2:
37:c8:79:aa:61:0a:a3:90:ed:c1:7c:b6:83:7e:6e:e8:83:d0:
e1:c2:17:a2:cb:80:c1:d9:42:ed:cb:c3:7f:e8:0f:78:68:79:
b0:d0:4f:59:24:4f:9b:d0:c5:bc:65:8b:9e:94:ea:52:f5:d4:
89:43:1d:c2:7b:54:cf:63:94:d6:53:26:65:1c:0d:b3:50:5f:
b5:93:22:54:bc:91:0f:9e:60:06:2f:dc:fb:85:9c:d0:80:66:
8d:86:ba:27:73:86:c4:a0:f8:a1:7e:a9:de:c2:b5:c6:80:e6:
c5:b3:40:2a:90:84:42:bd:5a:d6:9c:d4:54:c4:c2:92:ca:ba:
b3:94:50:f9:02:fc:92:c3:cf:ef:94:2f:b0:4f:1f:2f:15:7f:
57:21:43:66:c0:83:02:ba:f7:35:ac:89:64:75:95:65:f8:31:
bc:37:94:58:90:f6:fb:04:4c:b5:56:57:53:ff:89:e6:91:21:
61:4b:75:79:e2:bb:11:5e:fe:3f:0e:fa:24:30:ba:3e:ed:31:
23:fd:91:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:16:28 2024 by rpki-client on console-fra.rpki-client.org