Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
File: QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer (raw, json)
Hash identifier: VOhrvxvzoUzZIdvuHwgIaYT0++zEYIrT+oDGXZewXzk=
Subject key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E576
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
Certificate not before: Wed 20 Mar 2024 00:27:39 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 38895
IP: 27.0.0.0/22
IP: 43.198.0.0 -- 43.221.255.255
IP: 43.249.44.0/22
IP: 103.246.148.0/22
IP: 203.83.220.0/22
IP: 2406:da00::/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124278 (0x1e576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 20 00:27:39 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:63:48:d7:4d:f6:67:8b:ee:0b:67:0d:e3:
41:48:aa:3a:82:2d:3d:a3:7d:85:b0:c9:24:e0:66:
ea:f1:56:94:bc:1d:34:72:04:ca:14:20:ce:87:55:
e3:1b:a0:6a:41:04:7e:79:80:a2:36:7a:82:05:50:
24:ea:89:d3:7f:f3:67:d1:e4:7d:10:95:af:01:0d:
20:ea:3c:a1:f4:a6:69:8f:04:9a:e3:a2:e5:66:20:
c4:b3:53:af:ee:4a:b0:3f:86:4c:4f:18:4e:96:ed:
24:62:b3:2c:1c:7a:dd:0a:27:f8:78:6b:de:6a:96:
ac:eb:b7:f3:42:99:8a:24:3e:27:b0:53:93:25:6e:
36:01:03:02:6a:9f:9f:3b:cc:31:44:17:b1:d5:39:
00:7f:82:d4:b2:43:09:c9:08:9e:2a:e8:e2:8f:7a:
28:92:0c:57:0a:15:85:42:53:0f:6b:a3:d9:ce:0a:
d0:ca:b2:95:d4:31:04:d3:69:93:70:21:ea:8d:ba:
24:0e:60:67:5f:52:28:92:ef:11:95:08:57:33:00:
48:42:9f:8d:c2:94:1b:38:81:d0:aa:8a:d3:2b:ef:
ec:ee:fa:3e:c1:32:37:a5:cc:78:12:90:7d:1d:96:
f4:49:95:9d:62:76:aa:30:34:30:9c:24:bb:ef:42:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38895
sbgp-ipAddrBlock: critical
IPv4:
27.0.0.0/22
43.198.0.0-43.221.255.255
43.249.44.0/22
103.246.148.0/22
203.83.220.0/22
IPv6:
2406:da00::/24
Signature Algorithm: sha256WithRSAEncryption
ba:2f:c7:c1:8c:f2:a4:a3:26:f0:30:a5:63:8b:b2:53:bf:4a:
13:ee:eb:ef:31:dc:6a:00:54:6d:ba:89:cf:2c:dc:b8:cd:f0:
6b:8e:f5:12:9e:c4:fc:97:fc:d0:13:91:91:cb:2e:91:6d:9e:
19:b1:1f:bc:3d:61:12:82:ff:be:7b:15:5e:67:c4:90:d5:63:
5a:d4:99:7c:c2:6b:51:d2:ed:e2:c6:7c:42:d3:b5:16:21:b4:
10:5f:45:21:75:04:13:96:3f:0b:be:92:94:c3:07:c4:84:67:
e1:6d:2e:97:a9:c8:3d:a1:a4:0b:83:0c:66:0b:ef:d6:57:cf:
16:66:27:9a:e1:a1:f0:f4:53:4d:ff:ea:2a:91:2b:cb:4d:ce:
93:ff:14:98:16:76:9e:dd:cb:fd:7b:b2:3e:bd:80:5a:f2:24:
94:78:5b:d9:01:6d:31:2f:6b:3b:37:50:cf:5d:0a:bc:f8:3c:
44:dd:d1:4b:cf:38:b0:e1:1f:de:71:34:fa:96:3b:ec:37:2b:
a2:c4:cf:2a:0f:5f:d0:00:1e:da:38:97:fb:3a:6f:cf:9a:b8:
01:b9:6b:2d:a7:c2:26:7f:ec:66:a6:95:ff:98:0e:d8:71:ef:
7d:9c:79:da:5b:2a:83:39:fe:3d:0a:2c:c3:5e:28:fb:5f:97:
8f:71:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:51 2024 by rpki-client on console-ams.rpki-client.org