Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
File: OqWspVx7NeP5Iru42qsdfYhw43M.cer (raw, json)
Hash identifier: lKawF9ttReA4yzKFpYEpfsd2SD1vMSBlE4mMvRMZAis=
Subject key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CECA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 16:50:32 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 133152
IP: 43.229.132.0/22
IP: 103.253.72.0/22
IP: 2400:5780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 13:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118474 (0x1ceca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 16:50:32 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:e6:6c:7a:5b:20:86:9c:00:5e:55:ad:7f:
3b:86:f8:ba:12:a2:c3:39:14:73:98:ef:a0:c1:64:
76:d6:ed:27:99:99:b0:e9:15:7f:78:db:57:92:96:
74:72:a7:6e:15:b8:2f:9e:bb:24:44:29:14:4e:d2:
53:38:85:72:9e:c3:db:eb:bf:2b:ea:6a:1d:10:7f:
bc:c0:0f:68:ae:ec:8e:78:7e:f6:6e:dc:d2:7a:3c:
b2:9e:73:76:67:ce:50:75:b4:d1:21:df:35:10:4b:
88:11:5f:0f:50:d9:ee:a9:1d:bc:c9:75:ea:b9:d6:
ea:7b:1d:ef:2c:97:36:3f:63:81:44:0f:21:40:d3:
7e:ab:be:f7:fd:41:f9:79:bf:26:9e:83:67:3f:7b:
58:5c:7a:23:5d:a2:fe:96:bf:17:b4:42:bd:75:d9:
6a:73:63:6d:4a:f7:69:90:e8:64:0a:cc:80:c4:d3:
69:8b:7c:5f:ab:24:b9:4e:f3:03:7e:97:83:0a:88:
41:14:95:b8:45:9d:2b:d1:bb:7e:f7:e3:6d:d5:35:
dd:66:6f:44:03:ca:27:83:45:0b:42:c0:ef:cf:78:
74:65:b0:39:e9:60:4b:b9:b9:89:52:01:6a:94:b9:
43:78:43:54:ed:33:b0:9f:34:8b:19:fe:a1:9f:0b:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133152
sbgp-ipAddrBlock: critical
IPv4:
43.229.132.0/22
103.253.72.0/22
IPv6:
2400:5780::/32
Signature Algorithm: sha256WithRSAEncryption
b9:e4:3f:48:9e:37:ce:0f:01:1b:c4:77:ed:e3:d0:79:d9:72:
82:7d:03:86:b5:4c:4e:48:0c:9b:b6:cc:e0:eb:b5:93:7e:cc:
f6:1a:ff:3e:ca:30:a6:19:6b:92:f5:8f:8a:9a:37:cc:95:e6:
a7:63:b1:d6:33:3d:ce:a2:b1:9e:94:fe:4a:9f:19:f4:72:6f:
6d:c9:ac:dd:47:25:ab:29:15:eb:fc:56:ee:b3:b3:29:d5:7f:
ce:47:62:01:d3:1f:2a:ba:bf:02:c9:4d:ae:1c:02:9a:0c:b9:
02:95:b5:60:1f:3d:6c:d4:d7:08:c7:e3:d5:c2:e5:5b:67:8b:
9c:86:a7:00:27:27:5c:82:ce:fe:ee:48:32:65:35:5e:7e:59:
f6:64:f5:bc:a2:13:90:e6:d8:00:aa:fb:67:0e:40:2f:8c:6b:
71:d1:b6:1f:51:27:70:46:6b:ab:a4:ed:f2:b1:90:ca:e5:b3:
cf:c6:ee:5b:d1:0b:b0:ef:56:d5:77:d1:51:ef:87:bd:61:49:
ee:45:e3:27:29:61:24:7b:6f:87:17:86:4f:bc:1b:65:66:90:
f6:11:79:bb:15:81:f3:6c:73:32:ec:e9:33:f9:07:a4:3e:0b:
ec:a8:45:82:9e:52:95:23:7c:79:27:ed:65:b6:ce:da:5f:9e:
cd:1a:f5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:08:09 2024 by rpki-client on console-fra.rpki-client.org