Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer (raw, json)
Hash identifier: HLUnQcZFTSNMJx1B9TXttiU3AKhwu55NV/XGoN17z/c=
Subject key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A44
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Nov 2024 13:48:33 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 17810
IP: 103.229.2.0/23
IP: 103.229.250.0/23
IP: 203.212.64.0/20
IP: 2401:4f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137796 (0x21a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 8 13:48:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:7a:c0:9f:29:c6:aa:83:b3:d8:25:f9:6d:
5a:ff:00:fd:2d:28:06:f3:40:d9:09:f9:e8:4b:e6:
65:c2:e3:59:49:17:5f:39:5d:1b:d7:46:9d:aa:23:
d8:48:ca:a4:ce:c5:04:f7:3e:6a:39:3c:c9:ed:02:
47:3f:21:ef:21:b9:3d:d2:10:45:8b:fe:e1:67:6c:
f5:6c:99:d0:e1:1e:ce:0c:db:dc:00:bd:67:ef:4d:
f8:db:81:9c:f5:e7:6b:8d:8f:bb:87:5f:fb:5d:64:
6b:9e:9e:ea:c5:d3:e9:a7:0f:20:72:22:01:ce:ce:
d8:31:92:2f:a5:a8:31:a9:4a:0d:02:df:d4:60:1d:
ae:47:95:af:40:fb:83:58:f0:7a:e0:f5:a2:4c:75:
9a:83:e3:a9:d3:81:fd:74:1c:7f:a9:75:f8:c7:b8:
35:df:72:79:59:00:bc:9a:02:97:f8:45:ec:a6:dd:
68:c8:94:a1:bd:9f:76:6f:6a:e1:f2:67:a9:be:33:
4a:8c:6b:09:c2:72:b2:44:d4:83:4f:59:ad:7b:76:
97:07:4b:65:ae:58:d6:a7:75:fc:ff:6c:50:69:3d:
45:63:77:0f:39:3e:dd:80:9c:ba:59:ff:5d:5f:7c:
19:f3:a4:58:31:23:e7:f8:b0:a8:27:61:13:87:93:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17810
sbgp-ipAddrBlock: critical
IPv4:
103.229.2.0/23
103.229.250.0/23
203.212.64.0/20
IPv6:
2401:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
cf:08:ef:4e:35:ae:d6:fd:6c:26:bf:49:1f:ae:35:04:1d:35:
5a:49:5c:1a:6f:ea:1c:12:06:30:9b:27:07:e6:0c:75:af:54:
a9:5c:11:a2:16:fb:2c:af:d6:9c:ed:0e:68:a5:9d:77:bb:47:
95:91:9c:8d:ce:d9:ec:63:19:87:55:52:0d:56:97:ef:32:32:
13:3e:13:73:6a:4e:3b:74:f1:34:44:8c:1b:3f:b6:3f:bf:c9:
70:f4:56:fa:64:18:b7:6a:eb:4f:54:21:df:a0:a6:43:bf:31:
59:20:f6:fe:b6:d1:1a:bc:07:ab:de:f2:18:9f:0f:68:4f:35:
17:91:2f:75:a2:4b:df:9c:56:bf:c1:32:0a:6d:77:5b:7d:23:
41:eb:9e:a1:97:40:06:09:67:cf:c9:27:db:aa:ec:ef:55:a2:
9b:c3:8b:bd:f1:20:9a:e5:96:09:0d:d8:ff:2c:b6:07:41:cd:
20:69:bc:ba:e8:43:85:89:d9:42:08:f2:c2:33:0a:a7:f9:2f:
c7:dc:6f:26:44:42:8c:eb:09:5a:ac:19:3e:09:b0:7b:7b:59:
3c:6c:ac:8f:76:ef:f5:c3:3f:a4:50:42:b6:37:b4:cb:73:a8:
9f:6d:fb:e6:4c:df:d4:e1:bd:cf:79:5a:31:29:a1:90:01:64:
32:80:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:49 2024 by rpki-client on console-ams.rpki-client.org