Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.cer
File: Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.cer (raw, json)
Hash identifier: +8r9QwWHAgiYvc8Iyr147nB4TjMZ9BFQB24pmUa6/6k=
Subject key identifier: 3B:1D:B3:16:C0:8D:29:36:C7:4A:35:6A:27:7E:EA:C4:3C:B7:52:4C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021A70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Nov 2024 21:47:39 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 151849
IP: 202.134.56.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137840 (0x21a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 8 21:47:39 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91FA6CA/serialNumber=3B1DB316C08D2936C74A356A277EEAC43CB7524C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:82:97:95:58:c2:49:aa:48:7b:c4:ce:ee:
7e:25:30:5d:7d:0d:12:62:89:cd:07:4e:1b:bd:12:
ea:1d:4a:b8:72:73:c9:22:13:49:a7:6f:08:d1:58:
9b:b8:4f:f3:34:88:ed:78:90:9d:83:48:61:e8:4a:
e1:8c:90:c2:44:62:6a:0e:64:31:92:ae:99:83:b6:
8b:2d:59:76:23:64:91:d8:77:de:b1:b0:b3:2c:55:
36:6f:9e:6e:99:82:7b:25:6b:31:01:75:01:cd:f3:
b6:7b:4e:c3:ad:08:89:d3:03:2a:97:e3:17:93:16:
30:27:33:5d:3d:e3:11:00:3d:78:df:9e:ad:44:31:
26:8c:07:39:54:58:0c:1c:a5:41:eb:19:45:79:c2:
05:d6:8f:97:db:95:fe:51:58:75:f1:7a:7b:33:fa:
9b:36:97:92:24:3b:26:ea:14:0d:98:44:7b:73:3d:
f3:96:3a:f5:f5:00:7b:07:d2:97:34:74:20:ad:07:
31:ca:42:da:16:85:ec:fa:1d:55:26:17:b9:38:cb:
21:27:b0:f2:41:b2:c9:a3:65:0e:be:e6:5e:77:62:
fc:d2:e3:d1:2f:45:bb:70:47:6c:9c:fc:2e:30:43:
66:6d:9b:d0:26:76:8e:55:2c:04:df:6a:bb:71:1c:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:B3:16:C0:8D:29:36:C7:4A:35:6A:27:7E:EA:C4:3C:B7:52:4C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151849
sbgp-ipAddrBlock: critical
IPv4:
202.134.56.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:8a:6b:b2:14:48:f8:27:5a:03:e0:49:3d:da:e4:d3:3c:bd:
6a:22:5d:8b:65:6e:16:49:ea:6b:71:0d:8e:dc:64:00:98:bd:
36:10:8a:c2:0d:e9:f7:ef:b0:a2:ee:4a:1a:7e:75:b1:20:e0:
82:d0:e2:ec:63:f6:5f:bf:2a:c9:5e:11:ef:18:dd:c3:82:0d:
16:d1:c0:71:18:04:bc:17:1b:b8:ea:03:43:be:c0:37:ea:24:
53:97:64:b8:86:15:0a:de:dc:08:7b:10:75:e1:8c:74:97:59:
65:4b:93:22:3d:30:4f:d5:0e:9f:22:6e:f0:6e:86:79:e4:ab:
0a:f2:63:df:31:aa:af:1e:16:84:6c:0b:33:ae:e0:e2:8b:ea:
28:7e:f2:78:39:95:bb:28:11:62:6f:bc:4e:a3:34:e4:48:49:
d3:d6:fc:9e:91:18:b3:b6:c6:2f:e7:dd:5a:cb:79:29:86:91:
70:77:b7:76:16:57:73:a0:b9:b4:fa:74:9a:ae:7a:70:b0:b3:
39:e9:a7:34:13:9f:84:91:1a:ae:44:ac:4b:45:f2:f3:6a:f4:
c7:d4:18:3e:88:a9:5f:c5:b8:dc:27:3f:5f:6a:26:60:bb:22:
65:9d:ac:c4:14:c8:b4:42:9f:c2:48:26:91:a2:16:32:6c:0e:
50:63:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:07:44 2024 by rpki-client on console-ams.rpki-client.org