Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
File: FXsL3g48rbKUg5vJgVZVZE2ybpE.cer (raw, json)
Hash identifier: V3DrafYyKYKoiDB5Dc4epfRJTqcDvDqpm2pyE3L8pzI=
Subject key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D7A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Jan 2024 14:47:38 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 43.226.228.0/22
IP: 103.46.140.0/22
IP: 2402:a140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 21:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120740 (0x1d7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 10 14:47:38 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:a4:56:73:1e:1c:b3:59:b4:78:bd:9f:50:
21:a4:9e:9d:b9:d8:6f:28:cb:09:81:7f:73:dd:eb:
48:a4:f5:22:5f:1b:16:78:c2:ab:98:2f:aa:79:3d:
c8:c7:d1:d9:e2:32:a6:1d:05:8e:2d:32:12:79:1d:
74:f6:9a:e8:76:9e:1c:6f:f9:1d:09:c5:17:21:0a:
ef:a3:79:89:3a:9b:15:9b:57:e6:88:bb:85:2e:09:
76:7f:e1:5b:e0:b0:bd:68:a6:d7:f0:22:ac:7c:5f:
fa:15:74:99:cb:c1:ce:a1:bb:fd:44:b5:70:e6:f7:
23:7f:fb:a0:3c:05:3c:67:53:8b:93:cf:c7:98:6e:
6f:95:73:40:47:b6:5a:fd:37:e1:ba:93:b5:aa:28:
3a:a8:15:65:55:d8:ee:61:b4:47:96:a0:b3:5e:19:
b9:af:b3:a8:b7:2b:58:87:6b:7a:52:74:dc:1d:47:
08:9c:5f:59:06:e0:29:45:e0:b1:69:a7:bf:d7:46:
a2:69:5a:f0:28:1a:4f:4f:2d:57:a5:cb:66:15:cb:
c2:8d:72:6c:ae:af:1a:e1:8b:6c:ca:1c:be:44:18:
ec:b0:63:28:8a:0f:78:4c:22:1e:17:0c:db:c3:50:
42:62:8c:bd:46:27:d2:f1:82:dd:0c:28:9d:70:4e:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.228.0/22
103.46.140.0/22
IPv6:
2402:a140::/32
Signature Algorithm: sha256WithRSAEncryption
9e:54:41:eb:3f:d5:4e:cc:ff:26:32:57:af:c9:79:84:75:da:
14:46:5e:2a:e6:97:92:e3:cd:62:3d:ae:5a:02:0a:d3:85:71:
81:ff:06:bb:e4:71:f9:e3:1c:82:63:e2:ea:bb:a9:28:64:c7:
29:0e:48:29:88:88:ff:0e:a5:5d:40:f1:ae:5f:97:e1:bf:b9:
96:0e:44:1d:03:d3:a5:9a:71:54:79:d5:50:ce:da:b7:87:0a:
97:87:a0:ab:58:d3:5b:8f:90:1a:c3:aa:e6:47:10:1e:56:f2:
26:4d:99:83:57:ff:54:b9:43:b3:6a:4c:fa:46:2a:5a:9d:20:
79:10:08:af:84:30:69:63:15:08:7e:c4:b2:5f:04:d4:5a:75:
f6:5a:fa:60:fa:87:d7:4d:35:83:c1:a6:e2:38:c8:11:9d:36:
8a:07:19:26:8c:ee:16:60:28:8d:a0:ed:58:25:16:ec:ed:ff:
9d:5b:b0:eb:be:1e:79:8d:91:c8:b6:46:18:95:01:ad:62:79:
eb:e8:9e:5d:a5:9a:44:ae:d4:a1:45:14:ca:57:85:e6:46:99:
c0:bd:f8:73:06:8b:55:32:64:97:68:27:9d:f2:83:a1:eb:00:
f0:ce:59:64:78:eb:d9:b8:0a:9d:50:82:e2:a9:cc:cf:8f:3c:
a6:d6:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:56:10 2024 by rpki-client on console-ams.rpki-client.org