Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer (raw, json)
Hash identifier: hcPPC3Mlv4OX0Bx546rb1HloN+gU0yViTNw73R+bL0Y=
Subject key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C8EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Nov 2023 21:18:47 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 137206
IP: 103.104.228.0/24
IP: 103.138.52.0/24
IP: 2001:df3:5900::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116970 (0x1c8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 21:18:47 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:c7:10:f4:0c:c2:d2:b6:f8:2d:5e:d4:8f:
a2:6b:fd:90:66:79:71:c9:11:97:cc:31:03:ec:ee:
a3:4a:1f:46:b5:b5:5a:23:56:c4:14:63:2f:91:03:
c4:79:f1:36:d1:e9:9c:f3:85:b0:e6:a4:98:24:bb:
89:89:51:90:c4:dc:27:94:20:03:2b:a7:57:e0:ec:
fd:9f:14:61:1a:68:be:71:5f:04:48:9e:4d:b6:4f:
f8:77:e1:a4:79:c8:f2:9b:40:41:77:df:60:9a:c7:
23:0b:95:85:cc:8c:9d:48:2a:a2:74:48:24:85:9b:
a0:b9:53:eb:e2:7e:a0:0a:7e:67:11:94:2a:51:8f:
f1:bc:77:4e:2a:16:fd:f6:5c:b5:97:f6:cb:56:24:
64:97:55:40:ff:1b:9d:16:83:7c:22:fc:2a:88:0f:
9d:47:ff:6a:db:06:44:80:0b:13:f8:58:d6:33:0c:
b1:f8:78:56:c6:db:69:09:3b:3d:ed:75:b1:28:11:
8d:3d:bd:d3:45:5b:f6:ff:5a:38:f0:d9:60:88:77:
15:48:44:78:92:b1:4d:cb:cf:92:b9:1b:0f:d6:4a:
68:a9:37:c2:71:80:ac:de:73:ec:98:11:3f:5e:e3:
30:5b:7d:66:10:e9:45:ca:54:ca:b1:62:f0:2f:13:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137206
sbgp-ipAddrBlock: critical
IPv4:
103.104.228.0/24
103.138.52.0/24
IPv6:
2001:df3:5900::/48
Signature Algorithm: sha256WithRSAEncryption
ac:9c:c1:c9:63:9f:a0:de:94:d5:1a:f1:2f:aa:15:c7:1d:18:
89:77:bf:58:70:9d:e7:c4:e3:95:d5:b3:c3:4f:1d:ce:27:2f:
33:fd:55:59:5c:65:f6:b9:9f:7b:0c:28:a3:20:36:03:ea:6b:
fe:b5:b8:98:5e:9e:af:b6:6a:43:6c:24:9f:ec:a5:85:98:e2:
f4:77:52:49:20:16:3a:bc:1a:7e:9c:08:5a:9e:a2:c7:ff:e0:
45:d1:4d:0c:6b:7c:80:7a:a4:7d:50:ec:eb:41:0b:84:f0:9d:
db:17:18:bd:6f:d7:a5:32:e2:24:15:04:62:46:b8:c5:ea:91:
d4:8b:2a:90:1a:e7:30:9a:ea:15:fd:d9:9c:07:7d:7b:3c:22:
b3:6b:3b:76:e4:0e:5e:9b:c9:6e:fd:81:68:82:fa:a5:ff:a1:
19:b5:3f:23:6d:a6:ba:93:f9:0d:57:a0:ef:89:c8:79:54:f7:
e1:7e:22:ec:71:90:fd:79:c8:ee:ff:08:47:0d:24:19:a2:df:
19:e4:a4:36:71:9e:c2:a9:4b:9f:c1:91:32:94:73:c2:76:78:
66:a5:e7:08:1c:07:4b:15:b2:b3:d8:c4:f9:ac:20:3c:9f:b9:
c9:46:a0:2e:c2:03:96:4e:03:17:53:0e:19:a9:07:18:ed:e7:
dc:10:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:18:48 2024 by rpki-client on console-fra.rpki-client.org