Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer (raw, json)
Hash identifier: 1eJOKPtNU26dkonKXQf6G/L2M1Fa0/HLx1P/62G4RA0=
Subject key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A63A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 May 2023 20:34:23 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 24491
AS: 58930
IP: 202.172.16.0/22
IP: 2404:db80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 22:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108090 (0x1a63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 30 20:34:23 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:b6:0a:7a:f8:30:97:d1:18:79:9c:4e:46:
4e:aa:0b:b4:37:5c:4f:df:f8:b5:63:bf:c5:cf:c7:
1c:bc:e0:fa:10:11:0f:29:f7:cb:a5:0a:c2:45:9b:
5b:80:30:27:41:cb:47:44:da:ef:94:79:f8:05:22:
17:c1:fa:f0:1f:d4:81:03:1b:3f:aa:97:4a:c4:39:
08:7a:c7:92:5b:a2:7f:c8:6c:47:ed:9d:79:7c:95:
07:1c:35:6a:d3:3e:f6:a7:0f:b3:1b:ad:66:71:ce:
5a:3c:b0:61:fe:f1:31:2d:f6:d1:18:23:41:fb:86:
0e:e5:93:91:5e:6f:ec:a8:4d:25:4f:4a:1b:c0:dc:
02:97:8e:50:cf:51:0c:e0:f6:f0:2a:a8:89:08:9d:
b0:ee:7b:e8:9a:02:0a:8f:c4:25:91:10:de:0e:c9:
26:4b:f8:20:7f:14:44:20:2d:5b:f6:68:09:cf:15:
f5:ec:d1:83:f6:2b:e7:dc:b6:dd:8b:4c:62:6d:f6:
f8:25:ad:5a:c3:74:80:93:2a:6a:ca:8a:4f:63:39:
b8:26:af:17:04:f9:84:ec:05:55:5f:7b:98:9e:eb:
a4:07:29:bf:cf:16:a1:f9:30:1d:bf:b4:8f:b0:03:
d3:a2:a0:28:9d:85:37:f6:43:70:e5:18:73:6f:11:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24491
58930
sbgp-ipAddrBlock: critical
IPv4:
202.172.16.0/22
IPv6:
2404:db80::/32
Signature Algorithm: sha256WithRSAEncryption
54:a0:27:1a:9a:b0:0f:c7:6a:70:4e:f6:38:41:d1:ab:dc:7b:
ba:9c:b8:e5:52:af:44:a7:13:d7:01:b5:a4:95:0a:eb:c2:5d:
18:c9:76:60:29:ce:b7:0f:ed:ca:5b:a5:85:2d:33:33:43:23:
41:bb:29:ef:cb:8d:88:6f:30:ef:41:a0:d5:c0:91:5a:60:e7:
8a:14:7f:3d:55:a4:b9:4d:f0:14:d1:d5:18:7a:ad:15:c7:ab:
58:a5:1d:14:f5:77:3f:80:f5:35:eb:25:12:8b:fa:98:a4:5f:
91:13:66:c7:d1:24:d5:28:6d:91:fb:5a:f4:d6:f8:b6:0a:6d:
24:75:37:b4:29:e1:e6:91:6d:ff:a1:ff:a4:f5:e2:95:c6:43:
05:fa:aa:61:a8:6e:29:59:81:66:27:65:e5:c2:39:fe:6b:be:
10:2f:86:22:18:5a:e5:39:19:09:2f:ed:ab:9f:78:d7:ee:32:
76:3f:58:e3:1e:0b:3a:a3:65:3c:db:b4:76:3d:8b:a9:49:0f:
4a:a7:ef:63:8d:a2:f2:1e:f8:ba:9d:ac:94:7a:a2:b2:e6:ad:
17:a3:0f:00:8e:3c:56:a9:98:b6:22:a7:cd:8c:7c:a0:b3:16:
ea:fc:2e:30:fb:3e:60:5a:b3:35:90:7b:d9:15:04:66:31:95:
41:54:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:10:43 2024 by rpki-client on console-ams.rpki-client.org