Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
File: MOIGH3wgvYQ77lNywTIcNfux0-8.cer (raw, json)
Hash identifier: D0x8dnpmmmSX20ytkOP/5L7oD8VYUe3I9ykovTfF2Gg=
Subject key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02150D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Oct 2024 19:55:12 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 9876
AS: 55850
AS: 55926
AS: 132333
AS: 132375
AS: 132687
AS: 136984
AS: 147045
IP: 14.137.0.0/19
IP: 101.53.192.0/19
IP: 103.8.140.0/22
IP: 103.15.126.0/23
IP: 103.26.202.0/24
IP: 103.173.250.0/23
IP: 103.241.56.0/22
IP: 115.69.160.0/19
IP: 116.251.128.0 -- 116.251.203.255
IP: 124.155.224.0/20
IP: 150.107.172.0/22
IP: 163.47.236.0/22
IP: 180.148.96.0/19
IP: 202.36.126.0/23
IP: 202.56.32.0 -- 202.56.55.255
IP: 202.74.33.0/24
IP: 202.137.240.0/21
IP: 203.94.32.0/19
IP: 203.124.16.0/21
IP: 2001:df4:a000::/48
IP: 2401:2f40::/32
IP: 2406:5a00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136461 (0x2150d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 21 19:55:12 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:25:9f:d6:5a:8b:f7:1f:38:39:68:84:bc:
28:12:f8:16:84:92:38:58:2e:a3:4d:20:45:d2:6b:
51:23:47:0e:55:e6:ef:56:03:88:91:2c:84:f0:da:
04:bc:74:37:c9:90:16:52:cd:45:75:07:ee:47:87:
2e:51:d8:0b:d9:89:c2:e1:41:ef:07:13:3c:39:42:
19:0a:e8:d8:4f:98:2f:e9:16:46:89:88:d0:eb:1c:
92:a1:b2:de:0c:b5:53:28:a4:0d:bf:53:af:33:a1:
7f:8b:23:3d:34:9f:7a:50:2f:4e:4d:41:92:4c:8b:
3e:d8:c1:43:90:1a:a3:22:75:af:b7:c6:e3:e9:6a:
28:5b:b4:61:9a:40:f5:04:fa:15:47:66:9c:8b:5b:
2f:3d:5e:5b:3e:0d:f7:55:ee:9b:17:4b:45:bc:80:
66:aa:fb:77:e9:a0:47:aa:23:ae:6d:e0:0e:07:f1:
d5:6f:f8:96:c6:51:95:36:4c:ae:08:11:0c:b7:99:
bb:b1:f9:cc:07:8a:ac:0f:d8:7f:07:ac:da:36:91:
08:72:c7:00:14:1c:fd:07:ad:e6:ad:3a:28:8a:0d:
99:67:41:dd:93:53:cf:7d:03:f2:b0:83:be:16:a9:
47:60:22:d5:3b:48:7b:ea:e2:7b:06:33:1a:b0:16:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9876
55850
55926
132333
132375
132687
136984
147045
sbgp-ipAddrBlock: critical
IPv4:
14.137.0.0/19
101.53.192.0/19
103.8.140.0/22
103.15.126.0/23
103.26.202.0/24
103.173.250.0/23
103.241.56.0/22
115.69.160.0/19
116.251.128.0-116.251.203.255
124.155.224.0/20
150.107.172.0/22
163.47.236.0/22
180.148.96.0/19
202.36.126.0/23
202.56.32.0-202.56.55.255
202.74.33.0/24
202.137.240.0/21
203.94.32.0/19
203.124.16.0/21
IPv6:
2001:df4:a000::/48
2401:2f40::/32
2406:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
b5:08:90:99:20:c9:81:e4:36:96:ca:92:f0:28:ca:b6:20:31:
e5:58:7e:ee:ed:44:7c:52:57:58:b7:62:51:12:0d:af:3d:1d:
d4:f9:41:cd:35:60:69:bd:6e:a0:18:53:13:cb:0e:e1:a8:52:
b7:fe:f8:4c:8e:60:5e:25:5d:a9:19:02:4d:95:9b:ca:80:ac:
db:f2:e8:61:e2:10:57:0b:15:05:5a:e8:e9:ee:0e:d2:fd:09:
4e:6e:24:6b:d0:01:19:b8:bf:98:0b:d4:d9:32:e8:53:78:55:
ec:5d:b1:21:73:54:9c:74:b7:3f:0e:3e:b8:c1:90:45:d2:dd:
96:ad:2c:c5:ee:53:86:83:e8:60:32:6c:f9:f6:27:b2:dd:19:
fe:bf:3d:a9:65:5b:3f:d4:f8:57:83:a9:19:f7:84:4d:46:ed:
a9:7e:a7:b2:16:e5:d5:7e:8a:b7:cb:ca:8f:2c:ec:7c:23:0c:
0b:81:9f:41:2d:59:76:b8:a8:c8:ed:fd:d5:6e:9a:b7:b1:8b:
12:4e:b5:c1:e2:0d:1b:f7:db:e8:92:d6:00:5a:ae:81:a9:b5:
90:da:b8:7a:0a:19:ab:34:31:0b:03:e3:13:5e:e7:91:9e:53:
ad:f3:ea:f0:0c:4f:e1:82:15:ca:d4:e5:d5:70:dd:2e:67:d8:
54:08:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:38 2024 by rpki-client on console-fra.rpki-client.org