Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
File: OS824KRQBTw9xm0uOJThDKcz3aY.cer (raw, json)
Hash identifier: GlAG0eEbRGIjIBycQIRuZ3fufuRlsdV9om51hoGaEag=
Subject key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B6C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Aug 2023 20:33:03 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: IP: 103.68.192.0/22
IP: 121.54.188.0/22
IP: 2403:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 15:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112324 (0x1b6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 14 20:33:03 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:f2:a0:0e:f1:96:bf:9a:62:b6:df:c6:36:
a8:4e:b7:30:e3:f5:44:18:76:f2:41:4a:f5:8e:5a:
09:33:b9:00:96:1e:cf:c0:18:a6:1b:d6:49:b1:98:
bc:b1:e2:d8:49:17:ed:6c:2b:2d:d0:19:1b:45:10:
34:6e:78:a8:9e:9d:c0:b9:cb:77:d8:b0:09:c2:6c:
ec:a8:16:43:23:31:94:83:31:bc:d0:cd:c9:5c:4b:
be:6d:70:38:89:8f:14:24:56:b2:b3:32:d0:66:bc:
4f:d3:d0:2e:bf:c1:80:21:5d:44:9b:8d:57:e8:d1:
fd:bd:69:36:44:a8:65:ad:13:32:0b:b3:fa:88:fd:
d1:c4:95:ac:e6:e6:96:07:a8:67:ae:fc:3e:4f:5f:
b2:9c:4d:20:e6:3d:d5:99:e0:c8:05:bb:26:07:a5:
4b:8e:8f:53:92:e9:90:ab:f8:f6:b1:f8:40:ab:c9:
c8:1d:d6:2c:2a:24:2e:af:90:c0:ac:ed:3e:72:32:
5b:63:05:91:6c:64:81:b7:28:af:53:61:74:47:68:
3e:73:79:35:b5:c6:22:88:85:3b:d8:10:ee:54:9f:
1e:bd:94:7a:94:a7:f6:74:d6:a0:a4:9b:7d:16:cf:
86:dc:dd:ef:04:2d:b4:85:6d:7f:c5:33:41:84:78:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.192.0/22
121.54.188.0/22
IPv6:
2403:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
66:7f:bd:7d:9d:da:e8:b7:b0:75:37:d7:b7:35:7f:3f:d8:ac:
a8:f2:c7:2b:28:fd:8f:28:bd:5a:22:f2:b0:8e:9f:99:af:7d:
dd:b3:de:58:8b:34:fc:f2:bc:c0:c4:45:2d:a0:0c:ad:3e:0a:
42:b8:36:3d:97:0d:d4:93:6c:b8:ad:0d:e6:a1:6d:23:5f:ec:
c7:c1:48:93:1b:d0:48:a1:d2:b3:b3:2a:b1:c8:1d:3b:ae:20:
52:ee:f4:41:39:79:de:71:8b:22:50:64:62:a5:cf:e4:22:4b:
5e:8f:15:0e:6d:54:3b:1c:57:4d:d2:3c:5b:51:45:e1:7f:14:
7a:2d:d7:f2:d0:a8:35:33:e3:41:4d:1d:55:08:13:81:40:45:
79:98:13:a3:31:d8:78:2a:9b:ef:73:e4:5f:39:09:63:58:e5:
9d:66:c0:d2:7f:a9:3c:06:57:0a:dc:07:33:8c:38:69:be:8b:
ae:8e:21:6d:92:8e:12:25:04:50:60:53:2f:a2:a1:63:24:4a:
ba:ad:8d:17:2c:1c:31:83:3c:2f:50:55:0f:86:a1:10:38:39:
d7:b0:19:1f:ae:db:f8:82:68:3c:36:ce:5d:19:b3:3d:4a:1f:
12:b0:61:be:26:33:6f:fa:ae:6a:bc:7a:ae:4f:df:4f:6e:3f:
12:01:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:36:28 2024 by rpki-client on console-fra.rpki-client.org