Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer (raw, json)
Hash identifier: sM+V54ExY1ItTM4uIE1g/hDaya3cYwk/QRaQHiVpd+A=
Subject key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F237
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 May 2024 06:13:06 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 132384
IP: 103.76.232.0/22
IP: 116.206.144.0/22
IP: 2407:7a80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127543 (0x1f237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 16 06:13:06 2024 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:f4:a1:0e:24:95:5f:a8:ef:95:27:02:f5:
12:66:ac:f8:63:96:75:bc:7c:2c:2d:f9:b7:f3:6d:
6d:87:c9:31:53:3a:00:46:ec:5d:ea:79:3e:96:40:
9e:4f:22:eb:21:64:4c:8c:28:50:55:2f:97:36:9d:
d1:ae:93:81:86:b9:0c:e2:53:63:ad:5e:e1:ba:1a:
cd:fb:17:54:9d:e8:9d:4b:bc:0e:b9:79:72:94:f5:
3b:50:f3:db:d8:54:18:d2:de:f8:75:1a:d7:0c:e1:
d6:ae:32:93:60:f4:65:b9:db:22:72:58:86:4e:38:
13:02:4e:2b:3d:c1:42:8b:57:fe:ed:53:8a:c4:2a:
9e:ca:b4:e1:2d:f1:d5:54:09:1c:94:7e:d1:49:0e:
c1:a0:cc:f7:ad:78:7c:43:52:9b:c1:a7:3e:1b:82:
df:7f:12:5c:cb:c9:b4:58:f3:f5:33:6f:9c:65:70:
5d:fa:a3:7a:d9:49:b9:98:50:be:49:73:53:dc:4c:
1a:b5:8b:b9:ee:a9:8b:44:19:63:f4:e8:5a:c1:bb:
aa:f1:a6:6a:2a:0a:e3:e4:8c:b7:7a:d2:2d:10:11:
cc:12:e0:ad:3a:b6:9d:90:ed:d5:bc:3a:a2:96:1c:
6a:77:6e:99:a7:c2:72:b9:8f:82:90:cf:57:e2:2a:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132384
sbgp-ipAddrBlock: critical
IPv4:
103.76.232.0/22
116.206.144.0/22
IPv6:
2407:7a80::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b5:17:3c:a4:ed:84:f4:0e:94:b2:5b:09:1c:65:5a:e5:57:
f1:e2:3f:c4:5d:1b:bd:7f:bd:46:65:e0:0e:fc:b3:b5:dc:b9:
11:1a:02:5b:79:38:d8:8f:1b:bf:d5:5e:02:1a:fe:a1:11:91:
12:9d:20:88:73:0f:58:f6:49:ec:83:66:a7:c7:12:3d:4b:a3:
77:03:d9:71:62:ad:41:4d:c9:0f:dc:08:69:ae:1d:7c:03:3e:
86:e3:24:d7:b2:01:6f:06:f0:35:b7:ae:10:23:bb:45:13:4c:
0e:1f:75:c7:8d:00:df:61:68:70:9d:3a:8a:95:89:ff:7f:57:
ec:e6:3a:1c:99:4c:4d:9b:a5:41:17:f3:dd:d8:11:cc:e8:5d:
b7:5f:fb:af:24:7d:9e:f7:b3:bf:2c:44:13:5a:d1:95:04:fb:
8c:bc:1e:cf:0b:e2:e1:07:51:b4:d5:19:17:2f:98:4c:6c:63:
30:c6:98:a1:67:0c:8d:92:21:c8:d5:fb:ce:67:93:57:ac:91:
3f:a0:50:90:7a:25:83:17:0b:7c:14:bc:1c:5a:17:cc:b8:09:
9b:a1:d9:dc:f6:48:62:d8:cf:36:31:7f:52:a1:44:2d:22:9b:
c7:b3:e9:ef:ce:3f:34:48:59:f4:ab:89:8c:6e:e1:ff:8e:94:
c6:9a:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:03:33 2024 by rpki-client on console-fra.rpki-client.org