Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
File: QGGGPd9D57OxiePJwyF7wSuzXyE.cer (raw, json)
Hash identifier: hVejKMuJ3P0iQ8PWlRPqr/3v335xWBYFjcBLfvULbiQ=
Subject key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022208
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Dec 2024 02:00:38 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 38892
AS: 137562
IP: 103.110.142.0/23
IP: 203.19.2.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Jan 2025 09:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139784 (0x22208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:48:a8:f3:b2:fb:be:57:c9:b0:0c:cc:df:
cb:6a:24:fa:ee:c9:10:06:31:64:ab:8f:aa:b7:4c:
ef:dd:f3:b0:cf:1b:0b:5b:30:ca:94:f9:31:a0:42:
bf:75:b1:bb:71:87:1f:7c:85:21:97:64:01:f7:0d:
e7:5e:5b:24:2a:a0:bc:dd:d3:62:86:03:f3:a0:c6:
1d:1c:b4:5f:da:db:85:3b:f8:af:85:ad:dc:2e:21:
5b:ad:cb:db:88:c2:9f:d7:de:f2:98:f5:eb:10:28:
73:71:cb:50:7e:12:aa:a3:6f:79:44:ac:5d:db:84:
ff:c7:f5:e2:d1:06:1b:0f:be:d0:cc:2b:86:d0:a3:
6b:04:8e:19:02:a3:6f:8f:6a:b5:07:a3:5e:47:fd:
f2:b5:45:68:c6:f5:f6:7f:58:b1:f7:90:d2:41:99:
f6:6e:df:99:db:5c:66:90:4d:d6:5e:40:0b:fc:c6:
41:e6:1d:4d:b0:8f:30:c1:df:d0:b5:4b:51:fa:d2:
44:9b:e3:5f:59:e3:d4:b5:3e:e7:7c:00:61:83:b9:
43:13:5a:c2:f7:52:db:bd:cc:bc:4f:c9:42:05:00:
e0:32:3d:ae:3e:9a:0d:69:33:65:d0:9b:7b:81:b4:
e8:2e:58:69:80:b1:c9:ca:0e:3c:08:af:33:aa:8e:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38892
137562
sbgp-ipAddrBlock: critical
IPv4:
103.110.142.0/23
203.19.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:bc:62:28:82:56:1f:20:f3:af:85:aa:d0:ba:dc:b6:bd:46:
ac:63:01:b4:33:8e:89:9d:80:bc:69:94:1a:32:c6:fa:ea:d4:
98:74:ad:cf:68:c8:c1:e9:eb:7c:0a:2f:48:aa:90:52:dc:8e:
e8:12:33:99:b5:94:5b:18:52:46:48:f3:b1:09:e4:bc:0f:50:
69:21:10:21:e4:5b:e6:86:ab:0d:b4:60:da:12:18:cf:b3:5a:
25:a0:58:65:34:e5:c5:6e:31:a6:b1:3b:e6:fa:e4:2b:4e:78:
e0:c9:3d:91:a6:fe:77:d2:ce:c1:40:16:d2:d2:40:b2:f1:41:
9d:cc:bb:62:37:25:a2:3a:ca:fa:ed:be:02:d8:f9:a7:0c:a0:
64:d1:3c:64:ca:03:be:3b:66:34:42:40:af:a4:ec:1c:c9:19:
26:cf:17:09:c4:66:ab:3c:52:70:65:35:17:0d:9f:d0:78:e2:
0e:56:c6:df:a9:2f:8a:36:bd:a9:ed:1b:d6:ff:96:aa:58:64:
66:db:66:1f:57:00:ad:27:ab:09:d9:31:80:76:2d:f1:b9:11:
ca:1c:5a:2b:99:f3:0c:e3:c7:6f:99:99:ad:b6:d2:c1:e3:56:
68:ee:88:a5:e6:f2:ff:da:90:15:f6:fa:f8:5d:d0:53:b4:28:
7a:ce:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:25:46 2024 by rpki-client on console-ams.rpki-client.org