Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer (raw, json)
Hash identifier: gRb+RLD/dYvUy3hlsh/+Vl8SfCcMBi5F35ILcKl+6jY=
Subject key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C883
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Nov 2023 19:21:42 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 141187
IP: 103.155.244.0/23
IP: 2406:7a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 20:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116867 (0x1c883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 19:21:42 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:1e:e6:7a:15:d2:9d:a9:0b:50:8a:30:48:
bd:78:8c:a2:38:57:dd:19:03:f2:04:bc:e2:15:e8:
02:41:03:78:af:b9:c7:bd:78:f1:36:cf:76:1c:d6:
8d:2e:de:30:e6:51:93:a1:28:8e:37:25:3f:84:36:
c3:69:d8:3f:53:2e:99:56:ab:69:dd:fe:5b:db:7e:
a9:78:3c:0f:c4:56:58:b0:94:1d:d2:cf:24:d7:78:
f4:7f:7f:d6:ad:85:49:2c:e1:95:84:14:b6:58:ba:
fe:12:8b:72:2b:9a:8e:bb:de:28:66:78:a1:a3:6d:
a4:e5:16:b1:75:66:96:e7:4b:11:13:9c:d5:ad:c9:
f0:bc:32:c5:eb:ba:7a:f3:1f:1f:bb:35:fa:0b:fd:
9b:81:58:8b:16:22:dc:48:76:18:6f:9a:08:62:a6:
a9:99:b1:72:3d:f0:08:ff:44:76:20:ff:6a:05:f4:
cf:97:8d:9c:32:40:e7:44:10:bf:c2:43:9b:c7:0c:
46:07:9d:93:0a:22:54:68:a9:8f:a8:70:5b:26:ce:
05:41:8d:83:ee:99:34:e6:99:2b:e0:42:d5:54:c7:
6c:ca:2c:af:e3:32:47:85:19:8a:4e:19:ba:23:2c:
c9:db:c9:bf:56:9a:91:86:77:40:36:56:bb:8f:37:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141187
sbgp-ipAddrBlock: critical
IPv4:
103.155.244.0/23
IPv6:
2406:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
9f:a8:ab:1d:79:c8:33:eb:9f:e7:2f:3f:2e:d2:e1:c1:f8:6f:
dc:75:69:fd:cb:1f:94:70:7a:82:e4:b3:5e:86:1b:5c:6e:60:
4e:07:d0:d6:b7:1d:19:17:1a:bb:a8:16:e1:28:e2:99:16:81:
4a:17:c3:23:9f:6a:d1:28:db:af:82:43:3a:72:8a:9f:e3:e3:
4f:4d:c2:9c:06:63:b3:7b:c9:57:11:2d:ae:f1:bb:d0:6f:08:
fe:6f:5f:fc:03:ed:a9:2c:9f:2b:e9:62:48:b1:8c:f0:a8:3e:
4c:7c:d3:2f:c9:fa:54:7b:15:cc:97:0c:92:06:ad:99:25:63:
1b:6d:d6:37:e8:d3:e3:5f:41:9b:4b:84:05:86:4d:40:10:ce:
e6:ca:ea:77:ce:03:91:e1:55:2f:c6:c9:e1:2f:7f:85:f9:8f:
39:4e:05:ce:6c:82:d9:c6:09:00:36:4f:65:63:c5:79:7a:af:
bd:cc:09:3b:d6:e4:84:6a:d1:8c:15:4d:a3:a3:37:06:96:59:
9e:ef:39:5f:e5:de:15:d8:d3:67:ef:7e:8c:da:1d:65:87:d4:
b0:8b:f4:f8:4c:77:10:34:02:76:d4:f6:7b:0e:7d:06:88:fc:
f3:31:e7:2b:0f:e9:a4:00:74:dd:0d:3a:63:39:dc:ca:a5:60:
7b:6a:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 21:34:07 2024 by rpki-client on console-fra.rpki-client.org