Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
File: H2wzTrxkYqJkUoZ6u1-E72itwCw.cer (raw, json)
Hash identifier: wY1m7Ynk7jepwK7Wx9fMrziwNtHv+Sl3//h7+P4+gUc=
Subject key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B9B5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Aug 2023 13:53:11 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 55707
AS: 56129
IP: 103.1.108.0/22
IP: 103.23.104.0/22
IP: 163.47.252.0/22
IP: 203.31.114.0/23
IP: 223.25.112.0/21
IP: 2406:8a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 16:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113077 (0x1b9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 30 13:53:11 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:d5:e6:6d:f5:3b:df:6d:09:c1:79:a3:0a:
77:50:f0:2d:4c:c8:7c:cf:8f:51:a0:6f:92:72:c0:
bb:c1:7f:32:60:8a:3f:d5:1c:c7:56:d2:eb:52:cc:
24:6a:73:09:aa:b8:98:79:23:be:96:4e:41:7c:de:
71:d9:c3:00:39:b3:ac:af:ca:39:52:dd:12:18:6b:
a0:00:b8:af:a4:b2:e3:8d:73:23:20:11:ce:61:96:
09:fa:88:57:5b:7f:51:87:8e:a0:ba:d6:16:85:36:
a4:38:15:8b:ae:3b:41:75:76:9a:69:6b:05:c8:e5:
69:fe:2d:97:6c:6f:34:b4:b4:8d:bc:08:cd:06:67:
1f:5f:09:1d:40:ce:7e:0b:6f:4d:87:13:8c:0d:c4:
63:e0:3d:f0:21:a5:06:6d:87:0d:13:74:10:d9:23:
40:a8:66:34:3b:5d:74:4a:0c:f2:e7:ac:7c:0f:00:
83:e0:89:ec:1b:a7:57:d7:60:b7:cd:b8:c5:59:0a:
b0:a6:bc:8c:c8:db:d0:f3:87:c3:c4:19:09:1e:c6:
8f:b6:c0:0a:98:b7:0f:28:7a:f0:85:ef:7e:c7:51:
03:3d:bf:b1:04:7c:20:87:b0:7c:7e:14:24:b7:ee:
4b:f9:e2:65:d2:75:7a:3a:2a:84:2e:05:96:d7:c4:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55707
56129
sbgp-ipAddrBlock: critical
IPv4:
103.1.108.0/22
103.23.104.0/22
163.47.252.0/22
203.31.114.0/23
223.25.112.0/21
IPv6:
2406:8a00::/32
Signature Algorithm: sha256WithRSAEncryption
90:52:9f:5e:9e:02:a3:38:08:85:58:ff:07:25:ae:3a:03:6e:
fb:f3:9c:20:97:99:83:ae:4b:7f:bd:cd:c4:c9:a0:91:da:5a:
fd:78:d1:7b:1b:19:64:64:26:e1:ab:d4:90:98:59:11:30:87:
e8:b5:40:83:c1:d5:fd:de:7b:4c:e0:27:82:40:da:68:2f:bd:
1b:03:86:9c:fb:54:82:12:c6:c0:61:05:3d:e6:ca:b5:24:16:
f0:30:3e:fa:1f:55:f9:c3:34:2a:26:e6:7e:32:e4:9c:6b:55:
d9:39:db:6c:bd:99:d0:15:dc:34:9c:52:e1:7f:b8:7a:72:2e:
04:9b:ff:8a:49:14:4b:7f:7d:a3:83:e3:79:98:76:c4:60:06:
2d:49:75:2c:60:0d:8d:bc:10:77:08:f6:0c:b0:b7:c3:0a:4f:
7e:b2:29:05:44:88:4f:72:e3:2a:5b:66:e1:2e:a1:95:38:c3:
f5:e0:48:9f:58:60:4e:e2:45:d6:fd:9b:df:82:18:d8:d8:a5:
94:0c:91:f3:e8:b1:d9:b7:3e:d8:c6:72:5d:3e:0e:60:37:cd:
af:f6:f5:f5:2f:06:ce:86:36:fd:d8:c0:1d:74:1f:58:3f:3a:
5b:52:15:73:7b:fd:45:df:bc:cd:61:8c:1a:a8:c4:9a:2d:13:
00:52:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:12:14 2024 by rpki-client on console-fra.rpki-client.org