Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer
File: JLddtbfhQhLSg1_VqoX5droQ9rE.cer (raw, json)
Hash identifier: UHK4Ns+7jGBOo/4SyfRnXvfYuDk6G9///tSkzx+AFyc=
Subject key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CCD2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 25 Nov 2023 01:46:30 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 147294
IP: 103.174.100.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 21:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117970 (0x1ccd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 25 01:46:30 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:b4:fb:df:ba:c5:39:1e:12:e2:52:91:bd:
64:c2:1b:a2:37:e0:c5:41:c2:3a:1b:28:a5:90:fb:
43:d2:b5:6f:19:56:b0:72:79:39:0f:4d:6e:67:dc:
87:c2:6e:c6:16:c2:58:94:b4:ec:96:ae:e1:08:75:
63:8c:b1:a6:a1:16:94:ea:0d:93:9a:e7:dc:ee:a6:
f7:2a:f4:04:b5:58:0f:ac:52:ba:56:1d:d7:c7:e5:
0f:9a:2e:76:4f:a8:2c:95:c2:e1:80:06:b0:4b:e8:
fb:78:3b:c7:04:90:79:74:3b:80:d1:4d:31:75:ae:
72:1f:23:3c:85:bd:8c:dd:9b:b9:8b:9e:a4:48:4b:
1c:a6:aa:97:7d:84:3e:e2:78:0f:c2:e6:e3:28:50:
7c:2a:fe:d0:5e:3e:93:7d:03:95:11:47:a6:30:f2:
88:cd:82:88:23:39:3a:00:59:a6:70:46:8d:84:18:
83:cd:f7:53:27:8f:77:bf:dc:33:c2:3a:d8:bd:3d:
79:08:4f:a7:10:37:c4:e4:9b:a3:21:fd:eb:7e:26:
fe:11:bd:4a:48:02:83:97:e9:f8:68:61:99:86:5d:
0c:f4:12:87:ae:78:a2:b9:8b:74:e2:2b:bd:1c:17:
80:f4:70:60:4f:e4:99:78:2e:7e:26:33:ce:ef:11:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147294
sbgp-ipAddrBlock: critical
IPv4:
103.174.100.0/23
Signature Algorithm: sha256WithRSAEncryption
10:e5:13:e0:18:21:26:f3:3e:81:aa:4c:2d:bb:7f:49:1b:47:
a8:72:8a:2d:5e:77:08:0a:27:ca:6f:fa:28:6f:9a:16:75:d2:
b6:dc:44:42:d5:7c:c8:b8:40:12:dd:4d:4e:a7:d4:f2:4b:7d:
18:50:4f:d7:a8:f2:7c:4a:c0:0d:c6:a3:c4:1e:d0:c9:8a:fe:
35:69:d6:a3:a8:3d:ec:f0:3f:7a:f5:f1:49:8e:4d:72:4c:9d:
aa:58:af:c4:37:83:cb:c3:8b:6a:26:c6:bf:bc:3f:a4:e7:33:
ba:6b:d9:d9:51:d1:40:aa:99:88:ea:f1:c0:90:68:da:8f:a1:
ec:fa:9c:7b:25:35:d5:3c:d5:67:26:ac:b1:b9:5e:ae:9d:92:
9e:63:2f:78:56:c6:3d:ae:77:48:13:1a:9b:dc:bd:66:92:4d:
92:99:c4:df:0e:e8:b2:6b:21:75:3c:91:5e:90:db:fd:e4:b6:
28:a2:ae:fe:e5:86:0a:45:9b:47:c4:8c:1f:c6:7b:c1:12:24:
31:8d:2c:bc:0a:d1:ec:b4:63:12:6c:ee:43:b6:25:91:d6:d7:
66:48:99:0e:41:88:ac:df:3d:28:66:40:fe:d5:3a:88:d5:3a:
d9:66:15:b8:bc:c0:94:db:32:bc:83:be:b8:bb:73:4a:7d:32:
61:58:d2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:30:19 2024 by rpki-client on console-fra.rpki-client.org