Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
File: GyXsWdB_k0JLkMItNOyrIq2FKpc.cer (raw, json)
Hash identifier: b5M51x6ieIJB0mWnQVmQMdCLxXwBQm72nXz1sKrBfAA=
Subject key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0219FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 16:32:10 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 137028
AS: 142601
IP: 103.102.108.0/22
IP: 2001:df7:980::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137724 (0x219fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 16:32:10 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:b7:f2:da:cb:52:9f:26:54:d2:23:9d:61:
0f:3d:b0:73:05:9e:f8:f9:93:17:75:a4:e1:06:51:
ab:68:f8:b0:14:32:d7:8b:b8:dc:30:ee:fc:93:56:
f2:0c:13:d1:c6:b2:a7:e3:9c:46:c1:a0:4e:ef:fa:
e9:b2:c7:bb:03:27:f5:3e:16:36:9c:63:70:f6:44:
87:8d:d2:dc:cd:d9:47:fc:9b:6f:5c:a4:d3:0a:e0:
9f:34:b7:d7:41:db:5b:03:d9:2c:9b:bd:5e:37:36:
c9:c8:a4:9c:7d:3a:ee:e0:7d:b8:0a:a6:c0:ee:86:
4d:d4:88:f9:93:b1:b0:be:95:b4:cb:36:47:29:9a:
b5:2d:e2:60:e5:26:31:0e:ac:dc:92:c9:65:be:34:
b2:2f:df:15:39:51:17:94:46:51:eb:6e:8a:90:f2:
df:a5:44:55:53:37:c8:8b:b4:b4:56:14:6a:55:34:
26:fc:70:d8:a5:81:18:55:0e:54:52:5f:20:6b:f4:
74:6a:2d:b5:9c:3d:b1:4e:d6:e1:a2:cb:a4:35:45:
db:23:6a:74:ad:b7:65:1e:03:07:a6:41:89:74:10:
9c:91:30:9e:f9:d3:6d:fd:00:21:d0:b5:2d:e9:33:
ce:20:62:28:98:ca:e0:b7:e4:81:c5:42:da:1a:e8:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137028
142601
sbgp-ipAddrBlock: critical
IPv4:
103.102.108.0/22
IPv6:
2001:df7:980::/48
Signature Algorithm: sha256WithRSAEncryption
c9:b5:a4:08:b0:bd:24:dd:84:ff:1d:05:29:71:79:1c:ce:77:
ee:fa:6a:d4:23:4b:26:58:96:9d:64:25:7d:d2:2c:34:ec:e4:
90:95:09:53:45:d5:8c:c1:32:bf:0b:6e:9e:9d:2d:b7:51:87:
07:21:9a:ce:22:e8:2d:29:7a:50:3d:46:da:fb:24:c9:f0:b9:
df:20:72:33:08:fa:2f:7d:a0:37:e8:d6:6a:a5:d9:b7:e3:aa:
a5:07:b7:5d:ba:f5:11:b1:c7:d6:33:3d:c7:68:9a:0a:f0:6d:
50:e2:f0:21:32:42:85:1e:de:1c:b8:05:7c:ad:5b:5a:12:38:
ba:7c:a3:ca:11:53:c7:86:81:1e:48:21:1f:99:55:12:4f:87:
8f:e3:12:af:e2:ef:c7:0a:28:d3:cf:d2:96:8b:a5:22:c0:7e:
7b:08:d9:f9:50:aa:f3:71:53:4c:80:2e:e0:e2:9c:85:e5:6d:
32:e9:ca:24:ae:29:7e:5a:ea:dc:a8:57:a9:a5:7c:3b:d2:a2:
fd:df:7d:00:4a:e8:f3:57:5d:b5:5b:f6:50:1e:8e:b8:a8:22:
23:b6:86:47:02:fa:0b:f4:fc:19:2e:be:25:07:c3:9b:ea:e9:
d2:92:4a:ac:a1:a4:a8:11:80:37:75:04:69:b9:a6:e5:b7:29:
5e:97:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:38 2024 by rpki-client on console-fra.rpki-client.org