Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
File: GkUkezobAmknHXRsWl-sAUX_MyI.cer (raw, json)
Hash identifier: MSdwlKJxRP2IPtp4SFNgAQcElY0VWawubrNmDnkVQrs=
Subject key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EA41
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 06 Apr 2024 01:29:30 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 152680
IP: 117.103.112.0/23
IP: 2001:df3:a540::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125505 (0x1ea41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 6 01:29:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:c3:ff:e0:2f:76:c2:7a:a7:53:d6:be:3a:
fb:c6:d0:1c:1c:d4:a4:32:78:49:b4:94:85:3c:fe:
b9:aa:58:32:45:b6:f0:f7:47:3f:bb:40:80:6d:47:
b7:42:91:5d:69:14:1d:f1:4a:e5:db:8e:aa:1f:8d:
18:bb:9e:08:f7:b8:c0:cb:ab:69:19:a0:bd:1c:6e:
32:b2:28:ef:d1:e1:a3:36:cc:28:cd:39:22:fc:bb:
40:d0:ce:f3:17:7a:39:8a:f7:be:2f:c4:55:68:9e:
16:46:63:58:eb:e1:3d:0f:b5:e1:39:3a:52:8d:56:
5f:c3:7b:44:52:64:29:f9:a4:97:3e:e3:ef:ed:e5:
db:2f:c3:48:d4:54:0f:ad:74:00:d0:11:8a:95:ea:
6e:44:d4:24:63:68:64:20:e0:7c:e5:e3:97:1a:7e:
2e:33:7e:c5:3c:bd:40:c3:5f:c4:d9:2e:70:87:bc:
e1:91:4d:60:80:93:d1:a2:a5:03:27:bc:8e:00:6e:
c7:31:fd:0d:79:bc:9b:13:f1:c7:c4:3c:1f:58:e7:
ad:6a:68:70:53:7e:bd:bd:de:11:79:73:b4:48:00:
df:9d:6c:30:64:a1:f3:c8:24:0e:3b:e1:04:86:a0:
c3:4c:18:8c:81:1f:ec:09:ae:80:39:b7:35:fb:ee:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152680
sbgp-ipAddrBlock: critical
IPv4:
117.103.112.0/23
IPv6:
2001:df3:a540::/48
Signature Algorithm: sha256WithRSAEncryption
6a:3c:32:fa:10:b8:a3:c2:eb:bd:d7:58:21:6c:a8:f0:aa:a5:
90:0d:ee:fa:0b:ef:71:03:ab:6d:de:b8:f0:a5:cc:a2:2d:b9:
a2:f4:bd:39:04:ed:c8:a7:f4:47:72:e1:57:80:ca:c4:d2:43:
e5:70:1f:54:25:c0:90:be:1e:e0:75:e5:b9:66:e8:54:98:59:
30:05:c5:da:b2:1e:0e:8d:25:64:b1:78:29:a5:0f:93:f8:93:
1c:cb:4f:4c:a8:a5:1e:2b:fb:85:cb:86:42:4d:2f:2c:b5:a4:
a9:da:85:78:1a:09:21:5b:3c:28:7d:f4:a2:6a:3a:7c:98:85:
81:97:07:dc:ee:cc:05:b7:91:ba:09:46:d0:6f:14:17:1b:9a:
93:ac:4a:5a:79:f6:aa:53:90:78:15:54:37:e0:b6:cc:b9:97:
a5:73:89:a2:c1:c2:fd:ea:fd:af:35:a9:2e:31:a4:48:6c:bb:
60:20:00:33:bb:3b:38:2a:62:33:39:73:7a:52:42:ea:61:da:
57:83:20:94:40:82:ed:0a:65:be:3c:0f:a6:86:08:42:a8:56:
0a:25:f3:d3:9e:c0:f0:54:1d:ac:e2:10:50:a2:cc:65:84:3d:
2c:be:2d:dc:e3:85:74:7e:c7:6e:4c:c1:e9:fd:a5:50:ec:4b:
a4:8c:59:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 08:52:25 2024 by rpki-client on console-fra.rpki-client.org