Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
File: QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer (raw, json)
Hash identifier: mJ412it44cgYAUfmzVzKfzKrsAMl96Fli75BJ5XPVeI=
Subject key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 018A9D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
Certificate not before: Tue 07 Feb 2023 08:55:20 +0000
Certificate not after: Wed 01 May 2024 00:00:00 +0000
Subordinate resources: AS: 38895
IP: 27.0.0.0/22
IP: 43.198.0.0 -- 43.221.255.255
IP: 43.249.44.0/22
IP: 103.246.148.0/22
IP: 203.83.220.0/22
IP: 2406:da00::/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 May 2023 12:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101021 (0x18a9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 7 08:55:20 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:63:48:d7:4d:f6:67:8b:ee:0b:67:0d:e3:
41:48:aa:3a:82:2d:3d:a3:7d:85:b0:c9:24:e0:66:
ea:f1:56:94:bc:1d:34:72:04:ca:14:20:ce:87:55:
e3:1b:a0:6a:41:04:7e:79:80:a2:36:7a:82:05:50:
24:ea:89:d3:7f:f3:67:d1:e4:7d:10:95:af:01:0d:
20:ea:3c:a1:f4:a6:69:8f:04:9a:e3:a2:e5:66:20:
c4:b3:53:af:ee:4a:b0:3f:86:4c:4f:18:4e:96:ed:
24:62:b3:2c:1c:7a:dd:0a:27:f8:78:6b:de:6a:96:
ac:eb:b7:f3:42:99:8a:24:3e:27:b0:53:93:25:6e:
36:01:03:02:6a:9f:9f:3b:cc:31:44:17:b1:d5:39:
00:7f:82:d4:b2:43:09:c9:08:9e:2a:e8:e2:8f:7a:
28:92:0c:57:0a:15:85:42:53:0f:6b:a3:d9:ce:0a:
d0:ca:b2:95:d4:31:04:d3:69:93:70:21:ea:8d:ba:
24:0e:60:67:5f:52:28:92:ef:11:95:08:57:33:00:
48:42:9f:8d:c2:94:1b:38:81:d0:aa:8a:d3:2b:ef:
ec:ee:fa:3e:c1:32:37:a5:cc:78:12:90:7d:1d:96:
f4:49:95:9d:62:76:aa:30:34:30:9c:24:bb:ef:42:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38895
sbgp-ipAddrBlock: critical
IPv4:
27.0.0.0/22
43.198.0.0-43.221.255.255
43.249.44.0/22
103.246.148.0/22
203.83.220.0/22
IPv6:
2406:da00::/24
Signature Algorithm: sha256WithRSAEncryption
63:18:93:49:08:3a:b6:ad:47:2f:31:54:84:01:48:0e:03:f3:
90:03:c7:dc:d2:c4:59:e6:07:e5:14:f7:8b:7e:f2:87:fb:75:
4f:dd:76:4b:14:a2:9e:1e:6c:37:d6:8f:f9:95:b6:69:62:b3:
39:96:66:06:f1:17:18:53:e0:77:3b:af:ec:c9:b3:3a:7b:55:
be:f2:72:2f:d0:e6:04:d2:5f:4e:c8:c1:4f:f8:8d:73:fb:80:
9d:6c:56:fe:61:a9:c9:46:b2:81:08:a1:2c:8b:a1:a3:30:4c:
2c:d5:a0:1b:3e:79:6e:2b:49:79:25:74:bc:0e:ca:b2:fe:7d:
de:b0:cb:9e:6b:5b:15:6a:72:53:e4:ea:9f:c8:13:dd:26:1e:
a2:b3:6c:ad:7b:a7:87:40:f3:8c:ff:e8:d9:80:40:67:72:1b:
dd:f8:f9:33:6b:9b:57:35:58:39:87:30:35:fd:06:3b:5f:c3:
ff:fa:73:dd:4f:c1:c7:b1:8e:ef:7f:ee:7a:dd:d9:47:56:bd:
e9:76:b1:83:0a:76:23:ef:39:4f:65:54:54:16:61:b8:63:88:
9c:4b:b5:f9:89:15:a0:d9:ac:c5:a9:ec:ff:2c:7f:a8:43:6f:
08:59:45:30:cc:ac:f6:b6:c6:43:54:81:db:eb:23:1e:87:7b:
1f:d2:88:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 13:20:09 2023 by rpki-client on console-ams.rpki-client.org