Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer (raw, json)
Hash identifier: qdhghGHFHOc2cYlP+5d5y+jIqtf1UJHua2gmcw1OF4M=
Subject key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F758
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Jun 2024 05:34:36 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 137816
IP: 103.114.192.0/22
IP: 2402:d1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128856 (0x1f758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 05:34:36 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:c2:88:11:55:d0:94:9d:69:a3:e3:cb:22:
65:ec:4b:b7:89:91:d7:46:a0:72:60:e0:5c:3d:32:
02:17:a0:6a:a0:1d:6d:be:d3:68:3b:a8:3c:4e:c7:
70:5d:d5:8c:9b:97:38:e3:a1:ed:43:af:ed:c3:89:
76:2a:34:bd:5a:9d:75:c4:27:2b:3e:98:95:8c:b4:
33:3d:67:e1:19:97:99:0a:fd:f2:5a:9e:3c:cd:68:
21:2a:8d:50:3f:70:54:79:42:62:ba:0f:17:bb:29:
e5:34:32:b3:cd:20:85:84:14:04:49:4a:83:e9:ed:
50:57:97:85:58:10:6b:9f:7e:3b:e8:f0:26:a2:fd:
eb:e3:06:0a:2c:2d:57:7d:9f:2a:82:71:83:42:f7:
12:ae:04:8b:14:55:29:a2:cb:c6:b9:b1:f9:64:96:
4d:d8:f6:34:a0:4b:a6:41:c1:cb:4f:85:50:08:63:
7c:29:1e:3c:84:96:6f:0e:97:fa:0b:97:98:7b:eb:
d6:10:6b:c4:74:0c:c2:05:ed:df:29:2e:50:bf:5b:
cb:83:8a:b4:0c:ff:cf:0c:d1:4c:f2:4b:24:0d:7a:
52:d2:93:7e:a8:b8:97:ab:09:44:29:d8:1c:e5:87:
9a:d4:ab:12:3a:c3:1f:0a:6c:28:e6:e7:b4:3a:c2:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137816
sbgp-ipAddrBlock: critical
IPv4:
103.114.192.0/22
IPv6:
2402:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
33:0d:bd:60:74:7f:25:f7:de:67:7a:0c:d1:df:9b:56:1a:a0:
66:56:1b:82:91:82:2b:ea:6e:3d:ff:66:ce:03:5d:65:1e:1e:
0a:2f:ce:7c:7e:ed:e8:6f:16:de:2f:46:6b:31:6d:7c:1d:2d:
07:d5:5a:2a:dd:9a:f4:6c:5a:04:ac:7c:3c:cf:0f:ef:f6:e8:
a8:91:42:25:0a:b1:db:bd:b1:d5:fd:e7:cd:11:0d:7b:5c:84:
6c:8b:7d:a2:00:d5:e9:94:e7:38:f0:5b:8c:ad:1d:29:14:e2:
fc:b3:bb:4c:34:70:d8:95:ec:7b:9d:f3:1e:84:78:41:a7:6c:
77:bb:95:2d:03:74:9a:7d:ca:3a:d4:df:45:a3:50:52:45:eb:
1a:54:77:6b:d0:be:16:8e:c3:6f:92:88:ca:ed:4d:2a:2e:96:
7d:d8:1d:e3:9e:6e:63:3c:3f:7e:b3:92:41:60:20:e3:f1:2c:
16:f7:4f:5c:41:00:cb:72:ad:f3:ec:18:78:bb:00:51:f5:2f:
1b:cf:12:9d:83:77:a0:4f:e8:8b:57:1b:c1:34:0a:db:35:c0:
ab:54:43:ba:63:b7:83:e4:01:55:b3:c0:09:07:40:a4:d2:56:
3e:12:b6:81:fa:e9:16:98:df:97:54:53:b8:ae:95:50:0f:85:
e9:ee:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:26 2024 by rpki-client on console-ams.rpki-client.org