Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.cer (raw, json)
Hash identifier: oMcxHNpZoNLfmby6vrkq5qyoZCao+su6ajUbT9E2SRk=
Subject key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AA95
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 17 Jun 2023 18:25:08 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 58617
IP: 103.9.23.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109205 (0x1aa95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 17 18:25:08 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:7b:3d:b3:30:22:94:3b:25:e2:4f:92:c2:
55:6e:54:fb:b5:65:70:26:a5:44:04:b3:5c:9c:19:
04:f6:f8:21:32:8c:6f:4c:75:5c:64:43:49:ff:f0:
42:59:11:94:ba:14:3d:32:5e:17:5e:92:1c:c5:39:
59:64:6c:f4:3d:30:fb:79:fc:1d:c5:85:b9:e9:21:
ec:94:83:28:fc:94:3a:75:44:72:76:50:bc:cb:c2:
bf:91:cf:94:78:5b:27:95:18:6b:7c:cb:ba:2b:f1:
70:23:24:06:7e:b3:17:3c:54:fe:18:36:c1:b6:8c:
6a:f6:a0:33:9b:46:4f:15:bf:58:2a:da:c3:32:17:
d1:b7:46:04:1e:f0:17:d3:b6:09:08:51:03:ba:53:
09:77:bf:88:77:c0:84:97:40:be:b8:78:74:c6:53:
50:b2:51:dd:20:af:de:55:d9:f0:00:09:c3:76:c7:
24:c3:3b:ba:05:52:09:57:aa:7b:40:2c:31:be:f0:
a2:b7:99:19:c9:a9:df:e9:e7:00:76:c2:5a:75:20:
75:25:37:f7:10:96:38:ac:b3:c5:0c:ba:02:68:f2:
f3:d4:03:44:f5:1a:37:21:d8:de:7e:b0:c3:4b:08:
de:58:b0:1e:9f:d5:0d:94:ee:7b:02:ad:93:de:87:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58617
sbgp-ipAddrBlock: critical
IPv4:
103.9.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5d:ad:e2:22:7b:75:d2:af:2d:61:bc:97:ec:4d:5c:c8:72:
74:dd:c7:94:48:1d:0f:1f:25:15:a7:ff:df:0b:82:2d:f0:d0:
ef:d5:b7:96:9d:5a:55:27:24:d1:a0:df:9e:3e:67:db:26:95:
d5:ad:b3:c2:75:16:38:19:5d:3b:1d:e5:66:91:2b:3a:ef:a4:
b0:e7:0f:8d:04:ee:6f:3b:ee:e9:11:32:95:45:1c:e0:51:5b:
de:5a:88:f8:f4:dd:b4:85:e9:e1:95:6d:df:11:e8:08:2d:24:
3d:fa:1c:01:2c:e4:66:26:68:c9:ed:94:a4:fb:11:a9:b6:2b:
67:a9:0c:ae:c1:d3:01:1e:45:68:f3:d8:05:14:31:eb:0c:24:
c1:e8:f1:5e:b3:31:97:50:b8:21:9e:00:42:71:01:a2:2b:ab:
03:26:b0:8d:69:84:d7:a1:43:bd:50:2b:fa:22:03:12:14:c9:
bd:3d:b2:cd:5b:be:ea:2f:04:90:4f:02:1e:58:2a:fc:c4:9e:
b0:05:e5:d5:01:26:3f:6e:35:b2:28:ae:4a:58:e4:99:4d:a5:
f8:04:f3:82:0e:37:eb:be:4e:e2:b0:1b:2b:60:7c:60:70:e6:
4f:23:d1:75:e3:13:78:98:19:cd:01:f6:70:b3:34:77:a1:0f:
4f:98:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:59 2024 by rpki-client on console-ams.rpki-client.org