Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer
File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer (raw, json)
Hash identifier: 8+qoBcPUCkaUFYVRrbKIlLJSHZGz8HYHf4QcwvHfBo0=
Subject key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CBE8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Nov 2023 04:38:41 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 134228
IP: 103.156.166.0/23
IP: 2001:df1:9140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 11:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117736 (0x1cbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 21 04:38:41 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:2f:44:91:f3:29:56:0f:bd:b5:22:64:9c:
6e:dd:d9:23:a5:2a:20:76:a3:5b:67:94:c4:26:8f:
6e:0e:a9:bf:b3:59:76:0e:43:32:08:e8:e6:06:70:
ba:06:09:d2:1a:80:0d:e8:d5:08:f7:d2:7f:eb:89:
87:0a:56:28:dc:11:7e:9b:a8:7c:2f:af:13:bf:dd:
ae:8c:dc:41:0f:cd:a1:48:a4:a6:ae:72:04:3d:f0:
58:65:aa:b4:15:ac:38:d8:ba:ed:2e:9e:71:9e:e1:
60:4c:77:58:9d:72:1f:2a:2b:79:a1:f5:72:45:4a:
a6:27:1d:2b:24:71:bf:c4:0b:7a:7d:55:6f:e7:c5:
eb:2e:6a:09:fb:4b:a1:df:54:06:88:1e:94:fd:5b:
3e:6d:64:f2:14:a9:73:ae:75:bb:91:40:f3:ca:09:
c2:a6:d8:de:05:b5:4a:b9:20:cf:b2:79:2a:fe:36:
9e:fc:c9:f7:b1:31:f3:dd:65:98:6c:f0:c4:ba:bd:
4a:75:a5:21:80:ea:e7:96:0e:2e:4c:64:f2:46:55:
f7:a0:50:a7:95:74:d3:6e:2d:e2:bc:b1:7e:4d:d9:
53:1e:20:81:43:fb:bd:56:44:76:bb:08:90:85:0a:
38:e1:7f:b4:68:5d:65:97:24:4b:8a:46:3e:af:fd:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134228
sbgp-ipAddrBlock: critical
IPv4:
103.156.166.0/23
IPv6:
2001:df1:9140::/48
Signature Algorithm: sha256WithRSAEncryption
46:0a:45:eb:f3:a4:6d:21:b7:56:19:74:52:5e:bf:36:4f:58:
b1:1e:19:be:10:e6:98:11:2e:a9:b1:96:c4:31:62:1e:58:7d:
4c:d0:2d:58:af:6f:aa:2a:da:7c:53:e3:91:f3:4f:68:f7:f0:
27:43:ba:bd:be:4b:4b:a6:ed:f1:2c:1f:39:40:1d:b4:d2:69:
ab:b9:79:2e:e9:37:17:0e:fd:db:c3:8b:92:f0:9e:16:54:1e:
1c:5a:ac:9e:bc:e7:88:35:98:08:96:72:e0:06:f4:76:84:ba:
10:07:65:9f:2d:41:67:9f:84:03:e5:ad:bb:7a:18:95:f7:f0:
39:1e:c3:47:88:93:cb:bb:91:ba:94:a6:f6:c4:16:07:15:53:
90:9e:7d:85:bc:71:8b:a6:b2:90:35:07:b6:c1:40:da:da:2c:
f6:59:13:04:33:db:6e:ed:2e:ab:72:d9:8e:38:5a:9b:14:8d:
3a:e9:99:ca:b5:c0:37:8a:6e:d3:cb:5f:8c:b1:a8:fc:68:a6:
4f:a5:8d:b2:a5:3b:50:35:1c:d1:e7:b8:ba:cc:78:7c:ba:e1:
0a:14:bd:a5:75:62:9e:42:80:a0:3a:6e:c4:b8:18:3a:46:2a:
41:a1:ab:33:63:c3:9b:c1:1d:98:21:85:27:d5:29:f7:76:4b:
78:c8:4a:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 13:18:27 2024 by rpki-client on console-ams.rpki-client.org