Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer (raw, json)
Hash identifier: qdIJB4FVAA8Ht+I1QyldLJ0nTA0JPVqkOF4mVJRTk/A=
Subject key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DA23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Jan 2024 07:53:03 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 142297
IP: 103.167.186.0/23
IP: 2001:df6:bb80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121379 (0x1da23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 24 07:53:03 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:c4:60:18:61:cd:c4:6f:8a:59:61:12:92:
c5:a0:bc:73:a3:33:5c:0b:0a:5c:13:f3:6b:28:43:
3e:bc:56:02:79:97:22:b5:ed:a7:8d:1e:80:18:59:
fc:00:56:34:8f:e0:3a:d0:65:b2:19:04:67:f6:10:
f8:51:c7:74:8a:91:e0:a3:e6:06:ba:03:e3:ad:36:
cc:89:8d:dd:6b:fe:40:c7:a1:87:c3:23:43:7a:e3:
07:b6:67:e8:93:ad:16:1c:07:69:af:c7:6f:b1:ec:
11:21:69:bb:02:13:94:09:5a:a4:21:26:91:4f:8a:
31:8f:e7:7a:c7:b3:26:8b:d7:a7:4e:97:db:4b:2f:
4f:8c:cf:98:28:0a:3a:c5:5d:e1:f9:5f:45:b6:ba:
30:82:08:86:e7:21:a0:4a:d0:83:03:7d:e1:3b:c4:
c1:d1:87:9e:33:e3:59:24:4d:1f:5a:5f:0d:d0:13:
7b:ef:0f:e9:32:c8:ac:f5:12:2b:e7:0e:d5:03:b2:
a8:87:2d:dc:cc:81:fd:ce:5c:37:35:9e:0e:35:c8:
fe:16:11:b0:f3:22:22:78:70:98:a7:ab:1b:46:e8:
9c:a0:32:25:44:72:6b:2b:26:4a:7e:ae:c0:8c:c7:
60:6a:fd:45:ae:95:d4:b7:8d:ed:66:47:10:b6:eb:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142297
sbgp-ipAddrBlock: critical
IPv4:
103.167.186.0/23
IPv6:
2001:df6:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
4d:37:79:0d:32:19:b1:c5:a3:e1:6a:c3:04:78:da:d1:cb:f2:
33:17:c3:22:93:94:28:54:02:9e:db:fe:e5:e8:88:4a:72:dc:
71:e2:dd:0a:74:51:05:de:fd:2f:76:39:f3:9f:d6:87:7e:88:
05:83:2f:71:3d:eb:46:d7:ca:33:03:9e:f4:b9:ef:3c:e7:7b:
df:2b:bd:5a:da:40:66:18:91:77:7b:72:78:b2:2e:3f:69:6f:
e6:35:ef:76:69:e5:fc:be:bd:6b:2f:75:40:9e:d0:c7:29:e7:
b7:8d:64:8e:78:9f:fb:3a:f9:08:1c:d1:c3:64:d3:5b:b0:4c:
54:5f:8a:ea:74:c5:14:29:08:bd:30:ad:32:fc:ed:c5:98:ac:
5e:63:2c:a6:de:ba:de:47:fb:72:f6:e2:e2:1b:5e:d6:c4:41:
79:96:2c:d4:19:86:65:d5:c1:49:e2:7d:a8:97:4f:9b:98:94:
a1:48:25:a4:12:d1:6b:ad:35:55:aa:60:22:7d:d1:25:fc:cd:
67:f6:46:72:0c:5a:6c:a2:68:fe:38:b0:cd:07:a7:db:17:16:
3b:d9:a4:81:4c:bb:bd:5e:0d:91:53:36:43:97:fa:e4:6a:96:
f2:32:02:f9:47:0b:c1:e6:95:ae:3e:4c:ec:b1:28:86:52:bc:
e0:22:03:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 11:35:10 2024 by rpki-client on console-fra.rpki-client.org