Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.cer (raw, json)
Hash identifier: lGG/LPYyVTJuPQKX0UFPRLjo77mB8cYxj13X0YqNPpw=
Subject key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E935
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Apr 2024 06:12:29 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 202.37.72.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 08:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125237 (0x1e935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 3 06:12:29 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:7a:6b:21:1a:f7:e3:69:b7:d8:db:4b:13:
d7:82:74:65:c1:09:6b:80:66:89:8c:b0:4b:ef:e2:
37:9c:f1:8a:11:80:dc:c1:53:3b:03:fa:e9:53:84:
8a:fe:a6:d0:b6:69:3b:b8:22:4f:9b:bf:66:7a:26:
91:8a:0d:c4:a8:d2:84:0a:a7:87:9b:cf:3f:71:ad:
ce:6c:e2:9a:54:c0:19:c6:9d:ac:e2:d1:4b:96:32:
40:95:c7:dc:7c:97:fd:c3:a3:ee:41:55:63:58:27:
91:72:df:18:f6:b8:21:de:47:cc:43:ba:77:87:ab:
f7:a1:70:28:48:77:09:cc:7c:ec:96:70:26:1e:5e:
66:11:8f:11:e1:29:6f:0a:5c:6e:49:e7:c3:a0:63:
fe:75:69:66:7f:2e:07:0d:ab:9a:b0:eb:0d:dc:dc:
95:d8:cd:77:40:5a:66:16:de:d1:83:1f:e9:31:d8:
05:e1:42:fa:2c:8d:05:9a:67:93:86:a4:cc:5d:1c:
7b:1c:a7:ac:ef:98:87:dd:78:ef:52:84:71:b8:38:
f2:23:eb:64:b2:f0:a9:7d:b5:20:53:3b:5e:04:eb:
69:e0:28:f2:f3:69:7b:bc:71:5d:b3:b3:96:19:13:
7e:64:24:74:b9:a2:73:9f:0c:72:38:1d:ae:92:01:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.37.72.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fc:0e:87:d0:b3:5e:8b:3b:01:84:4f:4d:8e:c5:c1:84:30:
90:64:ae:17:39:13:da:0e:37:3c:6d:02:8b:1c:09:77:01:1a:
fe:17:4d:d7:63:7c:0f:34:15:7c:c9:69:9b:d3:83:01:3b:40:
7a:c9:69:91:0a:b7:79:af:5b:b0:3a:76:1f:4c:19:4b:b5:bc:
4f:4f:de:57:09:74:dd:60:17:df:78:ce:12:e5:89:8d:eb:89:
73:73:10:de:db:ed:52:1e:68:46:9e:97:d4:03:df:48:e7:87:
77:06:06:d5:2c:8b:ab:43:1c:aa:6d:36:13:5e:f8:bb:93:14:
96:d1:5a:36:af:56:c7:8e:c6:6d:df:13:10:a2:ee:8b:6d:fe:
2b:a4:01:cc:45:fe:14:95:78:86:bd:4c:a2:63:f9:15:ab:b8:
78:6a:7e:a6:25:c3:24:5a:c4:64:00:81:dc:69:d7:b1:9e:a4:
66:0e:c4:8f:31:c2:91:dc:25:6a:d7:db:3b:15:9d:fd:50:f8:
df:48:bb:64:51:dd:61:98:71:32:65:1e:87:44:a0:9d:c1:f6:
39:f9:ed:ec:e8:cb:3b:8d:f8:a2:ac:b2:8e:35:fc:41:a8:42:
d6:4f:59:d4:45:ee:e3:96:3d:0e:8d:9c:5e:32:fe:63:33:fc:
af:62:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:45:06 2024 by rpki-client on console-ams.rpki-client.org