Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.cer (raw, json)
Hash identifier: k+bqqzWmgdOarW8YJA7JmRYdXllQPthPOxnCdDGjbHo=
Subject key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E254
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Mar 2024 14:08:41 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 137415
IP: 103.107.184.0/24
IP: 2001:df3:e300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123476 (0x1e254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 14:08:41 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:dc:d1:da:c4:2e:28:2e:4a:1f:cf:d2:aa:
e2:16:98:9a:eb:19:20:c2:55:29:76:e4:8b:14:c2:
1c:b8:d4:fd:08:ce:8d:48:1d:fb:67:c5:79:56:e0:
cf:d5:ef:d7:98:9f:52:35:c5:bd:d9:9e:12:2c:f8:
64:f9:92:e5:0d:d4:46:a5:6e:46:6d:18:18:97:c7:
7e:38:20:c7:ab:bf:39:38:07:61:2c:e0:b7:9b:3f:
d6:63:d1:14:39:5a:e1:33:01:26:10:83:c8:9a:c4:
e3:db:6f:65:a5:8d:4a:b1:07:ef:c5:89:7e:b7:cf:
26:c6:31:52:05:24:c4:e6:b2:48:4b:dc:2b:90:12:
41:7c:b7:60:03:8e:28:a1:89:84:8d:2f:92:c4:ef:
eb:df:e9:ad:0f:57:1c:33:75:d0:9d:70:4e:1d:e5:
29:08:a0:d6:e7:a0:70:44:22:27:e1:11:ff:fd:d7:
b5:0a:5c:93:cd:e4:03:a0:06:ec:73:93:6b:65:66:
01:0b:f4:33:37:68:ff:ab:a8:8f:ec:08:14:e8:90:
ab:c5:3a:c4:35:9a:88:5b:d1:58:8c:09:ba:ca:53:
5a:e5:52:d2:f0:1b:17:12:45:c5:bc:87:40:68:ed:
ce:f1:cf:70:64:4d:9f:6b:10:e2:4f:89:22:db:52:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137415
sbgp-ipAddrBlock: critical
IPv4:
103.107.184.0/24
IPv6:
2001:df3:e300::/48
Signature Algorithm: sha256WithRSAEncryption
9b:3a:25:fc:61:28:fb:41:5b:ee:e3:13:5a:5b:14:c0:1e:a2:
b2:c4:94:81:a3:3a:58:f7:ea:ea:31:7e:00:a4:ac:f5:60:1b:
ae:24:97:b2:de:e3:44:13:6d:77:24:f5:8b:16:f2:55:45:53:
f5:96:26:21:01:4a:52:eb:75:d6:16:93:a6:a9:d4:f9:13:1e:
5e:85:52:f9:c7:b2:23:14:04:a4:e5:18:41:35:f7:dd:0e:15:
dc:ea:5f:22:7a:36:75:2f:a9:1e:e6:ee:57:27:79:e6:ea:fe:
f1:0e:2e:80:bf:3b:53:54:cd:02:a1:f1:cd:0f:23:14:8b:9f:
59:aa:fb:bc:04:55:12:5d:df:93:0a:9a:89:00:33:49:34:48:
97:6a:59:ac:be:d9:0f:7e:f7:39:0b:e7:25:d0:d6:7c:ab:a4:
c8:5d:20:52:aa:03:5f:f5:41:e3:0f:cc:33:17:04:d5:83:27:
fe:f3:ea:2a:85:b7:6f:76:8c:19:cd:51:c9:e8:b3:c5:33:e9:
99:44:bc:27:26:4a:2f:8f:37:33:6f:83:70:b7:48:cc:a8:1a:
74:f8:20:78:f9:55:f2:38:09:41:32:b1:4b:71:94:1b:47:1c:
1f:28:77:ea:fb:f2:12:de:9a:62:06:fd:94:aa:bf:97:56:d8:
e8:e2:b0:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:55 2024 by rpki-client on console-fra.rpki-client.org