Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
File: DjGKapQeYMmQhh2GmyA5SMi0iEE.cer (raw, json)
Hash identifier: EBRShcIGA9AXMFi3pzzC71wpYGhUctd+2rIdMYV+VIA=
Subject key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B333
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Jul 2023 13:17:30 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 139276
IP: 103.140.158.0/23
IP: 2001:df0:c880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111411 (0x1b333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 13:17:30 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:26:40:76:0f:23:49:ca:26:19:2f:c0:5c:
a2:c2:94:d2:24:30:bc:7c:29:b7:a6:8d:5e:d2:66:
bc:5a:6b:2b:01:63:0e:91:83:5d:2d:79:08:a5:a9:
dd:24:82:ef:d2:31:56:ad:f3:cd:ef:d8:e5:01:9d:
60:26:b4:25:91:9e:10:c4:8e:86:37:7c:07:68:eb:
c1:83:30:d3:65:f3:88:d5:d9:9f:37:f1:a2:45:27:
0a:f4:a2:3c:11:e8:52:98:62:13:e8:7b:fa:fd:1e:
7a:21:2f:86:a3:21:61:79:7d:a8:41:47:1b:a4:61:
7e:73:2a:63:42:50:dc:83:a2:3f:fc:2d:45:84:d9:
7f:d5:1b:26:13:33:ee:fe:c4:2b:f3:ef:59:3a:45:
b6:08:a0:b7:db:b2:7e:0f:f7:1d:7b:71:33:80:cd:
c7:0a:87:42:33:70:1e:bb:da:66:83:c8:a3:a2:09:
1c:3f:e5:97:d9:02:d0:a7:3e:ea:20:b1:7e:21:e6:
21:7a:d2:54:d7:4c:52:5c:1d:9b:1c:71:6e:e7:f4:
f1:c0:d8:ec:cb:d9:4a:9a:0f:e0:6e:e6:09:72:2d:
48:4b:0f:e0:4d:0e:e4:19:08:15:ef:f1:fa:64:4d:
db:22:42:d3:c8:30:ce:85:ec:36:59:63:45:67:14:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139276
sbgp-ipAddrBlock: critical
IPv4:
103.140.158.0/23
IPv6:
2001:df0:c880::/48
Signature Algorithm: sha256WithRSAEncryption
ce:33:72:60:00:42:cc:2a:ec:4f:af:37:ea:25:44:f1:cd:fa:
1b:ea:c7:2d:23:01:29:63:c3:4c:a0:0f:82:d5:fd:f9:7d:6b:
fd:78:7e:fa:db:e4:0b:f0:a5:9b:15:b9:9b:cf:b8:1e:ac:4f:
90:57:b0:e8:09:69:44:87:e1:d6:0d:5f:f5:ed:ee:27:1d:53:
89:ff:4c:f6:d2:b8:0d:20:90:f0:57:23:c3:18:56:7d:28:00:
bc:8e:5b:76:0d:78:23:f8:71:5e:b6:11:45:95:d7:ad:79:1f:
28:bc:44:2d:da:e8:10:77:c9:5f:be:49:95:c3:37:75:f0:e3:
14:84:00:f8:db:7c:b8:68:47:7c:a4:22:70:0c:d3:21:d8:8d:
f4:0a:6c:3b:b8:6a:7e:c2:d8:24:5f:28:a8:4a:b8:90:81:51:
8c:16:c6:d5:ea:70:0d:0a:01:a2:11:41:dd:34:48:18:82:db:
ee:a6:66:da:30:21:c8:ff:36:b0:00:18:f5:5a:4a:f0:e6:34:
bc:92:30:17:dc:ca:40:b8:8b:23:0b:42:6f:1f:b5:eb:2c:1a:
f4:7b:08:fd:ba:eb:d5:71:b3:b7:3d:24:3f:dd:38:01:c4:87:
07:13:9d:4c:c5:57:77:fd:07:44:6a:50:8d:7a:c3:47:6d:0e:
9f:37:47:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:18:46 2024 by rpki-client on console-fra.rpki-client.org