Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
File: KOAXfHClckcH27FJ7VV8D4FW4Ok.cer (raw, json)
Hash identifier: 0sNMaJmkSDbyjzW0JhTpN4PUlxlXW20zLG003xCjdDo=
Subject key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B2C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Jul 2023 13:56:58 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 103.167.234.0/23
IP: 2407:79c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111297 (0x1b2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 13:56:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:07:c5:6a:74:b7:35:84:2d:cc:af:be:1d:
b4:d7:a1:45:8d:19:89:f5:47:ce:9d:2d:ef:bc:09:
bc:1d:21:3a:64:7f:94:4f:33:cc:b7:08:a1:d2:a4:
e1:2d:25:fc:d8:07:a9:7c:71:d1:87:c3:84:de:e4:
82:69:93:e9:cd:f7:1d:e1:43:97:87:84:f6:2f:15:
20:6e:4e:47:7c:cf:51:53:71:58:21:68:87:18:1e:
5b:e7:5f:82:65:72:8b:bd:35:d2:ea:d8:ab:03:b3:
0e:1e:e3:cc:86:62:66:5a:3c:1d:68:ae:15:41:26:
e1:82:db:2f:84:f9:68:fa:e2:01:3e:f0:61:e5:3a:
a1:23:34:e2:ab:9e:cc:41:f9:1e:91:74:41:79:c8:
d6:2a:ee:ec:ae:bc:ca:00:f4:07:a7:b7:46:15:bd:
fd:be:80:30:44:c4:86:b2:ae:dc:74:aa:27:99:4a:
20:4a:5e:36:32:88:b4:2d:9d:8a:f6:bd:d6:a8:0b:
64:99:90:49:3a:1a:b2:4e:cd:db:c7:64:51:92:0e:
04:93:2f:92:ac:28:2f:fe:a3:9c:17:dc:94:28:6d:
62:95:df:a6:e7:e5:04:c8:65:ca:03:7b:1e:b7:c4:
26:01:24:eb:ca:6c:b2:a7:79:63:e4:3e:a1:f7:c1:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.234.0/23
IPv6:
2407:79c0::/32
Signature Algorithm: sha256WithRSAEncryption
55:26:76:72:41:d0:ed:7b:61:06:b1:11:77:7e:8a:49:0d:21:
8f:cf:aa:f1:1b:ae:9d:95:d5:b9:a5:1c:68:f9:e6:35:96:c6:
2b:03:70:56:6b:f5:59:0e:9b:a6:85:8d:80:57:06:ea:e4:2c:
21:67:b4:5c:c9:77:f5:42:91:4c:c6:25:51:dd:ec:15:83:61:
b6:8f:3c:6c:cc:1e:7f:08:3d:47:68:85:3a:5e:8b:5c:ff:16:
3f:b1:6e:67:8b:ae:88:27:68:76:e0:82:68:e5:3d:15:9b:00:
ca:44:77:39:c4:21:ac:cd:46:27:73:06:5a:57:f6:e6:39:1b:
89:fb:fe:86:27:41:bf:1f:ac:4b:43:07:a7:f1:44:14:7a:d8:
8d:a3:be:b9:f6:e8:f1:0f:38:6d:e4:50:7e:49:fd:01:88:1b:
68:8b:fa:55:54:2e:dd:53:b7:30:9b:49:41:9a:1e:25:d0:58:
94:3a:db:b0:2d:9b:9b:59:a9:00:0f:7c:75:65:e8:e7:e4:58:
00:c5:12:e8:72:d7:b2:2a:f7:86:f2:fb:12:75:ba:18:01:66:
26:c7:cd:00:6d:92:60:bf:b7:ec:31:ba:c7:b8:13:15:02:64:
65:60:5d:2a:ef:39:99:c6:68:2c:68:7c:e7:e3:43:c5:c5:4e:
94:1b:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:18 2024 by rpki-client on console-fra.rpki-client.org