Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer (raw, json)
Hash identifier: Xezwt9HofEHpB8B0YPhCdWkvmBRpx/zmXls4/7p1Gp0=
Subject key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FC25
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 30 Jun 2024 12:22:24 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 142297
IP: 103.167.186.0/23
IP: 2001:df6:bb80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130085 (0x1fc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 12:22:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:c4:60:18:61:cd:c4:6f:8a:59:61:12:92:
c5:a0:bc:73:a3:33:5c:0b:0a:5c:13:f3:6b:28:43:
3e:bc:56:02:79:97:22:b5:ed:a7:8d:1e:80:18:59:
fc:00:56:34:8f:e0:3a:d0:65:b2:19:04:67:f6:10:
f8:51:c7:74:8a:91:e0:a3:e6:06:ba:03:e3:ad:36:
cc:89:8d:dd:6b:fe:40:c7:a1:87:c3:23:43:7a:e3:
07:b6:67:e8:93:ad:16:1c:07:69:af:c7:6f:b1:ec:
11:21:69:bb:02:13:94:09:5a:a4:21:26:91:4f:8a:
31:8f:e7:7a:c7:b3:26:8b:d7:a7:4e:97:db:4b:2f:
4f:8c:cf:98:28:0a:3a:c5:5d:e1:f9:5f:45:b6:ba:
30:82:08:86:e7:21:a0:4a:d0:83:03:7d:e1:3b:c4:
c1:d1:87:9e:33:e3:59:24:4d:1f:5a:5f:0d:d0:13:
7b:ef:0f:e9:32:c8:ac:f5:12:2b:e7:0e:d5:03:b2:
a8:87:2d:dc:cc:81:fd:ce:5c:37:35:9e:0e:35:c8:
fe:16:11:b0:f3:22:22:78:70:98:a7:ab:1b:46:e8:
9c:a0:32:25:44:72:6b:2b:26:4a:7e:ae:c0:8c:c7:
60:6a:fd:45:ae:95:d4:b7:8d:ed:66:47:10:b6:eb:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142297
sbgp-ipAddrBlock: critical
IPv4:
103.167.186.0/23
IPv6:
2001:df6:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
91:44:e3:ea:a4:ca:c7:0b:c0:50:ad:d0:3a:6c:03:39:b2:3b:
d8:df:98:c0:e6:5e:82:25:88:ab:1e:6d:56:86:46:71:c0:b5:
1f:c7:7f:10:f6:d3:05:c2:9c:40:ba:5f:47:05:42:f8:22:da:
d1:ff:d4:46:50:6c:32:4f:68:df:66:9a:05:ed:3f:eb:41:52:
19:54:3f:e7:58:11:5b:fe:2e:d7:c6:ef:92:cf:ab:76:c3:1f:
89:6e:e2:8a:7d:d4:b4:a2:67:4b:01:b0:f8:17:cb:f8:b7:d9:
c0:67:cd:1a:b5:3b:b8:b4:c9:0e:8d:21:e0:65:d8:90:e5:fd:
b5:55:16:33:ea:2c:83:f1:ea:d2:1a:8d:d2:f8:c8:cc:51:39:
5f:b0:f3:f2:86:60:7f:ab:7d:fb:44:26:d1:8c:15:91:bc:ad:
07:04:c4:5f:34:7a:88:a4:e8:d3:07:77:47:ac:c5:85:e0:87:
61:fc:07:b7:a3:9f:5d:5f:26:bd:a0:98:ef:d4:b7:67:e8:fc:
9c:db:d7:12:b5:3e:6b:9f:a8:a6:b3:61:ed:90:9d:d1:f8:bb:
26:91:a0:4e:c4:05:9a:10:54:19:ad:b0:92:45:27:65:c7:40:
44:a2:8b:eb:00:c0:fa:58:fa:32:ae:d8:aa:23:4d:80:79:1d:
29:f0:dd:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 27 04:03:26 2024 by rpki-client on console-fra.rpki-client.org