Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
File: O8azIf17YMVg8V19JMrFozdED7Q.cer (raw, json)
Hash identifier: cNlKTdDNuhtK6ZqI5JPGcfKGPgrlJuAch3HrEUEqFGU=
Subject key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E153
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Feb 2024 23:31:23 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 137426
IP: 103.108.68.0/22
IP: 103.234.60.0/22
IP: 150.107.36.0/22
IP: 2402:6240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123219 (0x1e153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 28 23:31:23 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:68:a9:72:98:2b:c4:5a:9a:c8:5f:a6:0e:
c9:59:00:cb:76:f7:18:db:a2:6c:e6:19:69:b5:91:
67:2f:e9:e5:22:64:ec:4a:e8:9a:71:e1:0f:78:5c:
0b:e9:b7:f0:49:3c:08:5a:68:70:5b:3f:86:17:d0:
d5:a4:0b:12:8f:71:d4:08:09:ea:9a:54:bc:cd:26:
9c:34:e1:23:d8:38:6b:4d:0c:5a:26:20:33:40:dc:
41:1c:fc:ea:41:ed:b1:8c:70:32:ae:18:e1:18:87:
7b:7d:f9:8d:88:d4:cf:10:3f:e2:54:b7:b4:cd:f5:
44:21:59:48:da:03:b6:4a:05:c1:c5:af:f6:fe:cd:
0f:72:b5:49:84:b4:5c:10:81:23:d4:d0:60:e5:cc:
7c:da:a7:50:9d:37:00:6c:bd:ca:23:e2:29:8e:b8:
94:32:fb:53:0d:ef:d3:fb:21:b4:48:e8:32:02:76:
c3:c1:23:1f:e0:ac:c3:23:87:5c:05:51:9c:d6:dc:
db:55:76:b5:07:ac:74:95:96:30:40:53:15:a2:14:
32:40:3e:ff:d6:c7:44:01:47:77:cd:7a:0c:e8:c8:
f5:0f:61:84:d5:42:ef:e3:2f:94:35:bd:d5:df:f1:
fc:a0:73:20:7e:15:6f:b0:22:ec:d9:10:ac:f9:bc:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137426
sbgp-ipAddrBlock: critical
IPv4:
103.108.68.0/22
103.234.60.0/22
150.107.36.0/22
IPv6:
2402:6240::/32
Signature Algorithm: sha256WithRSAEncryption
24:18:97:83:11:d5:ee:4c:8d:cb:d8:af:42:9f:d7:d8:6e:50:
73:55:ef:cf:c7:50:ff:36:07:c0:ab:bd:3d:19:6e:6b:76:5c:
26:66:ba:5e:f7:6c:76:94:f6:9d:1f:47:ab:48:b0:7f:b9:cb:
d5:ca:ff:eb:33:58:95:fa:d2:24:03:cd:de:f4:df:88:41:55:
86:8e:98:68:3a:89:d5:e4:ff:24:c4:ff:bf:75:f5:74:b6:f2:
7e:4a:ab:50:50:f9:bc:3a:cf:64:83:19:d9:2b:2b:9b:ce:ae:
e7:ae:8c:53:c3:ab:5d:d8:b8:16:9f:22:c9:89:38:2e:c6:c8:
03:a0:be:15:8f:fe:32:82:38:5e:51:8b:88:06:05:0f:88:4a:
84:f8:55:b5:86:3c:4a:95:25:9d:0e:54:02:c1:1f:bc:b2:65:
0c:66:f3:b1:a1:53:2b:9b:45:ba:be:db:53:06:d0:5b:70:7f:
00:5b:60:37:99:82:5d:93:38:c8:ea:ea:ad:74:8d:66:1f:df:
0a:bb:40:0b:1a:76:c7:67:12:62:6c:a7:28:ef:04:62:78:41:
14:9e:a3:6a:80:26:43:79:78:c1:9d:d9:68:2c:7b:a0:77:c8:
ef:1a:52:90:c3:47:ff:71:fb:ed:62:c1:38:87:f7:71:4d:85:
0a:b6:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:55 2024 by rpki-client on console-ams.rpki-client.org