Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
File: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer (raw, json)
Hash identifier: FsiONvjwtb4IbDT+Cz1UE8wV2RL/A6cHNh0do3zHsmg=
Subject key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022700
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jan 2025 04:07:56 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 132221
IP: 2001:df4:d740::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Feb 2025 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141056 (0x22700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 3 04:07:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9155810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:8d:8e:0c:fc:ec:9a:1c:36:54:ff:4f:1b:
16:11:3c:bf:52:ca:ce:45:d2:f4:6b:7d:93:28:32:
f2:89:ff:6f:aa:c4:eb:1e:04:a9:f5:c2:e5:ed:81:
8d:c9:eb:5c:a0:b2:e4:3b:c3:81:5d:0f:65:61:9e:
14:55:19:d4:86:ec:c6:4b:41:cb:5c:2e:d0:57:66:
25:2d:c8:ce:cc:7d:2b:bb:da:cc:d0:5c:2d:9b:57:
25:b8:14:8e:d4:72:cb:d4:88:c4:0e:11:d8:aa:95:
33:e0:32:cf:82:44:bd:24:21:a4:1a:31:5b:4d:e0:
73:8f:05:97:f9:ca:57:9b:2d:a1:2e:47:54:47:5d:
35:7e:bc:51:68:5e:26:44:d4:76:0a:92:e0:d5:4c:
b8:d6:c9:7b:65:30:36:d2:e6:6c:16:58:f9:54:72:
0e:8f:d5:71:6b:0f:26:5e:fe:1b:5d:0f:d7:8f:86:
e8:bb:78:fd:52:44:3c:12:c5:c3:8e:42:b1:23:f8:
4a:e6:4e:d2:3d:14:52:61:5d:79:5b:b9:94:a1:b7:
2d:49:a8:b4:b8:f6:47:25:e7:02:87:f1:78:6c:37:
7d:3a:b5:6f:9c:7f:07:97:a1:19:e0:d0:6f:66:a2:
db:3c:ac:90:f7:d7:c0:46:a9:a5:32:dc:34:00:6b:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132221
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:d740::/48
Signature Algorithm: sha256WithRSAEncryption
2f:b0:2d:89:8f:77:bd:0e:0c:15:0e:ed:bb:01:aa:d6:1b:9e:
b6:d5:f1:50:4f:fe:d1:60:51:4b:b8:2d:16:e0:f1:5e:4f:5d:
04:28:e5:26:bb:52:6d:60:0a:3e:cc:78:d4:e9:82:cc:3e:8c:
b6:6b:d4:0f:6a:53:14:da:80:7c:47:8c:08:82:7a:fd:84:86:
51:b1:7e:41:a7:1a:40:58:8c:c7:b8:65:3c:29:fe:35:7a:e3:
10:9d:e7:22:13:e7:a0:67:ff:b6:34:e8:99:6b:cb:a6:45:9c:
42:37:86:96:9b:96:7b:f6:6c:e7:63:13:a3:04:bf:e0:eb:44:
1d:3a:b4:a7:63:99:6d:b0:36:6e:76:03:ad:b1:af:50:89:52:
d1:e2:73:3c:17:dc:7c:b8:a6:d5:73:23:18:40:ab:a6:08:14:
15:f9:1b:29:14:53:7c:6a:d0:61:57:02:bd:b1:9d:b6:9f:ce:
4d:a6:41:03:5b:05:4d:a5:d0:80:57:c6:94:f5:0a:ff:e0:09:
17:e2:51:33:4d:4c:87:5d:06:ac:4b:c4:46:71:b9:33:ae:aa:
f2:92:27:bd:26:7d:ba:6c:c4:64:f4:0d:ae:25:df:67:fb:cc:
32:5c:1d:2e:90:b0:ce:e8:94:8f:c6:3e:76:6f:7b:5c:72:82:
a7:8a:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 06:02:21 2025 by rpki-client