Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer
File: KQX7MhK9YWRvt69jPqGiV7w6Pew.cer (raw, json)
Hash identifier: Ued7L6plkqHvDr+tEjUcFZi4TtSVkpAaKQpAXOQkh+Q=
Subject key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FBB3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Jun 2024 15:43:21 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 55580
IP: 203.30.244.0/23
IP: 203.56.213.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129971 (0x1fbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 27 15:43:21 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:32:1e:ee:fc:50:b7:13:96:8d:48:ae:d7:
87:ee:35:01:1a:c8:20:d0:fa:b3:41:36:7c:08:c8:
29:2c:23:40:13:f9:a5:66:11:68:f2:15:30:36:d3:
f9:aa:1a:fb:56:a8:47:62:6f:ed:25:bb:ac:82:b7:
9f:ac:3d:b7:63:ba:c0:e7:1e:18:87:f1:19:fc:e2:
86:e2:f0:b9:a5:ba:dc:85:56:38:f4:33:3e:7e:a3:
96:e7:dc:cb:d4:32:eb:d0:55:78:52:8d:05:fc:e2:
2e:0e:7d:74:30:12:9b:ae:aa:52:96:e8:a7:9d:7b:
37:e8:ba:d9:8a:6a:02:e9:e4:77:fc:d4:40:8b:d8:
e3:a4:99:0d:9a:2c:01:bd:32:7b:08:b2:07:15:e8:
63:61:aa:f2:4e:54:e7:6e:6c:8f:02:59:d2:8c:e7:
4c:5b:08:7a:ee:04:23:88:f9:df:b0:49:e8:b6:b3:
0e:1a:e0:59:cd:67:83:11:8f:79:7f:54:f9:1a:c7:
79:12:22:b6:9b:84:92:1b:cb:c2:f3:7b:b7:2f:3c:
90:81:0c:8f:81:51:43:fb:e9:64:7a:54:8a:ec:63:
d1:9d:92:ea:d8:77:25:ff:71:95:25:f6:e7:e4:8b:
5f:70:dc:44:b0:48:a5:36:cf:2d:63:91:51:ef:d9:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55580
sbgp-ipAddrBlock: critical
IPv4:
203.30.244.0/23
203.56.213.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2c:7f:30:c1:3c:31:d7:86:8b:6f:bb:24:af:93:13:34:78:
b9:17:3b:6b:44:b1:5c:17:b0:ce:eb:6a:88:f1:b9:0b:22:de:
8e:24:43:bd:5e:e0:34:82:61:7a:a1:b7:6d:5d:5c:83:13:9a:
e7:26:b5:9a:36:c8:8c:d6:bf:8e:bc:ed:a1:2c:27:72:59:ad:
3b:a2:52:ff:2d:c7:a2:be:24:b9:f0:4a:45:8d:3c:54:0d:f2:
d7:54:ba:14:81:aa:51:e5:d2:dc:64:8c:a4:81:72:a4:e9:fc:
3b:cc:aa:a1:94:cd:b1:e9:eb:2f:1b:4c:90:cd:bd:1d:b8:50:
85:d5:df:95:9b:ab:1a:ad:44:87:94:b6:00:fe:2f:0e:be:a1:
c5:ce:94:3a:92:d6:47:3e:c6:6f:23:fc:b5:a6:29:ec:85:58:
f2:f2:0b:a6:80:3b:e2:33:32:a0:bc:87:66:d0:05:f3:e7:89:
f4:31:2a:2b:b5:15:d2:71:e0:d9:8a:78:08:e7:93:33:8f:8d:
92:2b:c0:44:7b:48:2a:3b:bf:f0:91:82:8b:80:d4:1e:ff:7e:
da:6c:95:dd:66:0b:0b:e5:11:ef:ed:ac:ea:9c:c4:e8:c4:ce:
c6:dc:ca:a2:2e:80:d1:6a:93:00:00:dc:c9:fd:a4:9c:13:ca:
ff:cf:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:35 2024 by rpki-client on console-ams.rpki-client.org