Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.cer (raw, json)
Hash identifier: RwIfdlKTFYvuKFYv+QLgP57dgJDCAv6cNLguEadtZz8=
Subject key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F3BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 May 2024 22:39:52 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58617
IP: 103.9.23.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127932 (0x1f3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 24 22:39:52 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:7b:3d:b3:30:22:94:3b:25:e2:4f:92:c2:
55:6e:54:fb:b5:65:70:26:a5:44:04:b3:5c:9c:19:
04:f6:f8:21:32:8c:6f:4c:75:5c:64:43:49:ff:f0:
42:59:11:94:ba:14:3d:32:5e:17:5e:92:1c:c5:39:
59:64:6c:f4:3d:30:fb:79:fc:1d:c5:85:b9:e9:21:
ec:94:83:28:fc:94:3a:75:44:72:76:50:bc:cb:c2:
bf:91:cf:94:78:5b:27:95:18:6b:7c:cb:ba:2b:f1:
70:23:24:06:7e:b3:17:3c:54:fe:18:36:c1:b6:8c:
6a:f6:a0:33:9b:46:4f:15:bf:58:2a:da:c3:32:17:
d1:b7:46:04:1e:f0:17:d3:b6:09:08:51:03:ba:53:
09:77:bf:88:77:c0:84:97:40:be:b8:78:74:c6:53:
50:b2:51:dd:20:af:de:55:d9:f0:00:09:c3:76:c7:
24:c3:3b:ba:05:52:09:57:aa:7b:40:2c:31:be:f0:
a2:b7:99:19:c9:a9:df:e9:e7:00:76:c2:5a:75:20:
75:25:37:f7:10:96:38:ac:b3:c5:0c:ba:02:68:f2:
f3:d4:03:44:f5:1a:37:21:d8:de:7e:b0:c3:4b:08:
de:58:b0:1e:9f:d5:0d:94:ee:7b:02:ad:93:de:87:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58617
sbgp-ipAddrBlock: critical
IPv4:
103.9.23.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d3:42:23:62:1e:f0:f8:7d:d9:8c:80:97:28:b7:7b:8a:04:
16:35:4d:1c:42:c6:88:0a:bc:7a:20:e9:30:cf:f5:2e:9b:dd:
8a:0e:cb:ce:76:90:10:37:8d:5b:21:04:d3:8b:b2:ad:ea:8e:
b0:1c:1b:c1:0c:08:19:a7:bd:1f:44:65:4a:3d:1d:6e:0d:6a:
dc:21:11:a1:96:7d:80:5d:a4:68:39:b0:bc:60:29:6e:11:bc:
77:b5:37:c4:b0:e2:bc:2f:d4:18:9e:a4:59:0e:fc:f2:7f:0c:
7b:e4:41:c8:98:e6:0e:4d:76:8b:61:44:c2:4b:f4:ca:03:b1:
42:05:45:8f:74:ad:e1:82:a6:9e:5f:38:18:3c:bb:b3:df:1c:
e6:db:52:77:39:16:07:70:33:f3:1b:36:5f:1d:83:37:5a:a8:
09:ac:cc:32:e3:0f:8b:e6:9a:49:3c:52:21:40:5a:13:b0:ca:
46:19:1b:a1:98:a6:27:96:27:8c:d3:63:b3:0c:a5:d4:f2:7b:
50:fe:5a:a3:98:59:f2:13:96:9b:ed:64:36:d4:38:c7:9b:a6:
d2:8e:eb:ac:f1:4e:32:d4:fd:19:93:c6:45:66:73:b0:f9:44:
77:b6:e4:96:be:27:e6:d9:58:2a:29:29:4b:7b:63:24:a0:0a:
24:d4:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:07:44 2024 by rpki-client on console-ams.rpki-client.org