Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
File: OS824KRQBTw9xm0uOJThDKcz3aY.cer (raw, json)
Hash identifier: 5HOKSzwHDR4ZB5grFGdWBq3Z+q6e/8204PYCIvotXIo=
Subject key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0209D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Aug 2024 21:11:51 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 103.68.192.0/22
IP: 121.54.188.0/22
IP: 2403:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 17:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133593 (0x209d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 21:11:51 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:f2:a0:0e:f1:96:bf:9a:62:b6:df:c6:36:
a8:4e:b7:30:e3:f5:44:18:76:f2:41:4a:f5:8e:5a:
09:33:b9:00:96:1e:cf:c0:18:a6:1b:d6:49:b1:98:
bc:b1:e2:d8:49:17:ed:6c:2b:2d:d0:19:1b:45:10:
34:6e:78:a8:9e:9d:c0:b9:cb:77:d8:b0:09:c2:6c:
ec:a8:16:43:23:31:94:83:31:bc:d0:cd:c9:5c:4b:
be:6d:70:38:89:8f:14:24:56:b2:b3:32:d0:66:bc:
4f:d3:d0:2e:bf:c1:80:21:5d:44:9b:8d:57:e8:d1:
fd:bd:69:36:44:a8:65:ad:13:32:0b:b3:fa:88:fd:
d1:c4:95:ac:e6:e6:96:07:a8:67:ae:fc:3e:4f:5f:
b2:9c:4d:20:e6:3d:d5:99:e0:c8:05:bb:26:07:a5:
4b:8e:8f:53:92:e9:90:ab:f8:f6:b1:f8:40:ab:c9:
c8:1d:d6:2c:2a:24:2e:af:90:c0:ac:ed:3e:72:32:
5b:63:05:91:6c:64:81:b7:28:af:53:61:74:47:68:
3e:73:79:35:b5:c6:22:88:85:3b:d8:10:ee:54:9f:
1e:bd:94:7a:94:a7:f6:74:d6:a0:a4:9b:7d:16:cf:
86:dc:dd:ef:04:2d:b4:85:6d:7f:c5:33:41:84:78:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.192.0/22
121.54.188.0/22
IPv6:
2403:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:49:94:7f:25:5e:31:fe:e2:88:7a:fb:95:61:b7:2f:ad:3c:
06:36:f7:46:16:5c:25:8f:40:d4:e4:af:ed:27:47:db:6c:c7:
e3:f6:e6:fe:31:bf:03:82:72:5b:48:af:48:34:86:fa:c8:2e:
ae:da:25:8a:c8:de:7e:5b:5e:19:4e:9c:cc:2c:98:00:48:2c:
d3:9b:72:58:1b:53:b3:f4:eb:f7:5c:de:ae:5b:95:27:60:5c:
17:74:0b:92:b4:44:e6:5f:b8:1a:3f:52:70:d4:49:1a:70:f3:
33:ec:db:30:78:de:fb:87:da:4f:d1:4f:85:48:0f:e9:fc:57:
38:6b:cf:71:18:d5:3d:65:1f:8a:04:72:e5:70:bf:ef:99:5e:
ac:90:ee:8a:7a:2c:9d:a9:05:26:4c:75:d7:d9:f7:1c:12:49:
1f:ed:1d:02:89:c8:cb:cf:ea:b7:3c:ac:fb:48:10:4d:8c:ac:
0f:55:a0:b9:d1:83:ad:c8:d7:fd:1c:72:a7:10:d8:58:89:43:
05:1b:d4:78:a1:15:8e:84:e9:e2:48:78:60:14:05:23:56:8f:
ea:ef:5a:c1:0d:eb:82:b2:00:26:35:58:fe:f7:ea:81:d5:b0:
a5:ce:07:64:12:58:2a:1d:e5:f3:87:a8:2b:a8:3f:1f:93:a8:
b5:3d:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:49:25 2024 by rpki-client on console-ams.rpki-client.org