Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNz0cp9FgmKIjvB6K9RnX24xE4A.cer
File: NNz0cp9FgmKIjvB6K9RnX24xE4A.cer (raw, json)
Hash identifier: NzGbJpmQ8RatO1HENpqudu7WKYb/kS0rLDZAxsGS3+g=
Subject key identifier: 34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CB84
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Nov 2023 14:42:47 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 137978
IP: 103.158.198.0/23
IP: 2001:df5:6380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117636 (0x1cb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 17 14:42:47 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9157B7F/serialNumber=34DCF4729F458262888EF07A2BD4675F6E311380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:64:10:cc:8f:7b:4a:ae:2e:24:c5:d3:2b:
0d:35:8d:17:47:5f:c7:1d:af:6a:aa:59:cc:7d:fa:
b2:95:d7:19:d1:53:8f:c5:a9:09:d9:f5:94:73:2d:
7c:76:b1:a0:ef:29:84:79:a0:e3:40:87:08:49:51:
59:52:c2:63:0f:21:f5:27:b6:70:8d:3f:55:4a:d7:
38:58:c1:c4:dd:30:c7:df:7d:1d:90:99:a8:b5:51:
07:c8:ba:fe:8d:10:89:18:99:76:13:1d:f3:22:35:
18:4c:87:91:c5:f7:ad:f1:27:d6:42:6a:12:94:f6:
73:85:9b:fe:0f:9f:4a:7f:41:47:d8:d4:7c:9c:64:
eb:63:f0:f9:d3:2d:8b:98:64:e4:85:70:78:e9:40:
e1:18:51:62:d6:bb:38:11:3e:ee:21:2d:07:69:af:
fb:6b:be:2f:f6:f4:01:33:24:6d:c7:bb:a4:d9:2d:
83:43:20:42:a6:b8:14:0d:f0:57:63:dd:09:1c:6d:
08:53:07:0c:bf:51:59:23:bc:c3:41:8a:6b:ef:24:
52:11:a6:60:d2:56:0a:5f:26:31:3b:22:70:2c:b9:
80:7c:af:30:2f:4b:64:55:aa:53:b2:35:2b:3c:7d:
1c:c0:bb:af:81:2e:64:58:cd:c4:ad:c5:08:a3:23:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:F4:72:9F:45:82:62:88:8E:F0:7A:2B:D4:67:5F:6E:31:13:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157B7F/37B82C5071B211EBB44A8463C4F9AE02/NNz0cp9FgmKIjvB6K9RnX24xE4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137978
sbgp-ipAddrBlock: critical
IPv4:
103.158.198.0/23
IPv6:
2001:df5:6380::/48
Signature Algorithm: sha256WithRSAEncryption
d9:bf:12:a9:f7:9d:3d:39:51:54:76:1c:a2:4a:64:58:64:a2:
f0:07:4c:7c:c6:1b:89:66:08:f3:b9:38:3a:74:d0:58:65:cd:
fc:0c:1d:bd:42:09:ee:b6:b9:db:fa:52:2b:ca:71:3f:e0:43:
da:cc:2e:54:0e:73:04:18:fe:e1:06:61:72:11:19:6e:98:6b:
c1:2b:fc:04:71:dd:82:c1:01:71:9d:ad:2f:6b:82:1c:7c:18:
ba:fd:84:5b:8c:14:c0:57:12:0a:68:7a:36:10:07:11:5a:f4:
23:83:9c:50:9a:e4:61:4a:de:7d:5a:bb:64:70:02:48:99:44:
61:f9:f1:e7:af:07:17:19:8d:80:34:16:3a:1c:a9:21:aa:0c:
13:4d:aa:77:20:d0:56:dc:b9:77:7b:5f:cc:ca:92:17:36:ae:
2c:ea:29:31:a5:a9:f9:c6:6d:99:a8:ce:80:17:a8:6a:78:88:
a9:7f:9e:77:b9:e5:95:12:cd:d2:c1:3d:2e:29:63:77:e3:45:
fb:94:d2:79:c9:13:5e:55:11:76:aa:8b:55:e6:73:63:0b:ab:
b5:ec:5a:9f:55:be:67:fb:95:dc:21:12:c8:0b:a7:48:53:a2:
75:ae:74:45:56:b4:e5:28:bf:0e:b9:88:f2:be:3b:51:62:09:
68:4a:51:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:54 2024 by rpki-client on console-ams.rpki-client.org