Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer
File: D9Qkj9SLoa4LYNjPakPbM7b09ro.cer (raw, json)
Hash identifier: u7CQDrw5ERTVCYtsIv2KFx4ImCVAHxJwXIsHSOofB20=
Subject key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0217C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Nov 2024 12:56:06 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 150668
IP: 103.109.105.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137152 (0x217c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 12:56:06 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:b1:47:e9:07:c6:08:a1:de:70:e7:99:ab:
36:52:a1:a7:38:d9:cf:22:1f:c4:43:34:7a:6a:96:
3b:97:7b:ba:74:c3:60:ba:98:76:f3:ce:98:0b:d2:
dc:01:a4:ce:9d:8a:ca:94:a7:ba:24:3f:44:49:63:
44:7e:5d:da:b6:05:46:07:d3:7a:df:4a:b7:4e:e7:
be:3c:6d:fb:61:3a:34:32:0e:65:db:a1:6d:70:ad:
b3:b7:92:95:03:c5:fb:4b:e3:e3:ea:30:0f:39:60:
d7:4b:8e:4f:a3:05:36:30:ad:19:48:34:e3:37:74:
39:4f:74:22:aa:76:14:e0:bf:34:01:37:4c:1d:23:
ae:56:3f:4f:cc:e6:1b:88:ea:d1:92:57:04:2f:c9:
a2:3b:a8:90:2d:86:16:6c:09:65:15:81:fb:cc:1f:
f4:e4:e8:3b:5d:8b:ce:ec:bd:0f:cc:1a:e8:2c:cd:
90:9c:81:aa:75:a6:30:91:4a:e3:21:ae:37:21:cb:
3b:3f:df:bf:ce:18:97:38:2d:df:30:db:84:f4:80:
98:38:ee:1e:0a:bf:4f:5a:42:15:e2:94:24:ed:a8:
6b:91:67:8f:d5:14:67:ba:56:8d:67:57:d7:ae:cd:
d9:8d:5a:ba:a6:38:e2:42:ba:3f:ff:37:24:6f:9f:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150668
sbgp-ipAddrBlock: critical
IPv4:
103.109.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e5:09:8a:b5:67:2d:db:d9:5a:07:ba:00:06:1e:c3:95:8c:
65:3f:98:13:e5:36:9c:24:36:4b:a2:3e:39:3c:83:d9:dc:d4:
4f:05:7f:fc:8f:cf:ac:0e:3c:d5:1a:1d:e3:c9:17:81:8f:c5:
23:9c:2f:1b:34:9f:6b:2a:b6:4f:8b:be:7f:6c:27:68:aa:1e:
79:3a:a2:55:f5:80:a1:dd:4b:29:f1:a1:76:be:c4:98:38:4a:
b5:8e:61:be:2c:19:44:7b:f8:a8:4e:34:ed:44:0c:9e:ed:7b:
c7:8c:a0:05:e9:72:0e:fb:fc:e3:8d:2e:47:4e:29:3e:a3:25:
f8:97:cb:02:56:69:e9:6d:25:8a:af:f8:de:e3:32:8b:f7:76:
10:4c:7b:4e:a5:b4:c3:c6:d7:ce:99:22:27:c8:0d:48:2c:d4:
16:c2:2a:c8:e3:4b:61:e2:4b:51:96:02:70:b1:d0:74:eb:26:
b3:4e:f9:c7:c0:62:6f:c6:db:9f:47:ff:51:38:f4:a2:a3:0e:
30:c1:50:3a:e0:40:ff:89:87:2c:a0:34:71:bc:06:ce:6b:8b:
14:4d:01:e5:4e:91:20:4e:bd:7f:e9:ee:09:37:e0:1f:99:c6:
de:1e:a8:80:d5:71:4c:60:9c:ac:d6:83:5d:ea:06:0f:8e:00:
60:1d:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:16 2024 by rpki-client on console-fra.rpki-client.org