Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer (raw, json)
Hash identifier: ecRLrrREr0A8JtUBqpi4j/rLRP8RfyPE/2PjkHKOWR8=
Subject key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021229
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Oct 2024 04:02:49 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 147000
IP: 103.172.174.0/23
IP: 2001:df7:7580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135721 (0x21229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Oct 4 04:02:49 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91F95E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:b5:e2:bf:84:92:2b:22:10:60:ed:60:4c:
50:7a:c8:39:8f:3b:0c:34:c5:7c:2f:67:18:4e:a4:
48:46:23:5a:6c:ba:00:32:0b:7b:81:8a:81:c8:93:
fe:df:b2:f6:7c:62:95:37:1e:53:42:43:64:f3:0c:
0d:93:83:87:db:bd:90:87:b4:9e:9e:6a:10:a9:18:
34:e5:de:9e:33:15:5e:87:90:1b:03:d5:d7:5d:3a:
a3:e6:66:e8:76:6f:92:77:4e:1a:57:d7:6c:1b:b5:
e4:50:d9:29:e2:8b:86:ca:19:92:c5:fa:0a:cd:61:
24:ff:b4:b5:8a:04:83:d2:74:68:92:1a:97:86:1c:
3d:2d:79:e2:ac:05:44:33:81:c7:9e:c4:ba:7e:62:
2c:46:1d:cf:19:3e:80:f9:d9:08:45:68:3d:b3:17:
bf:98:ff:9b:5d:ec:b4:0b:76:02:03:c6:63:b9:0f:
58:ef:2a:47:e5:11:31:96:e1:1a:59:ed:93:88:c7:
d9:4f:7f:44:a9:c1:e5:ad:cb:79:a3:99:c4:a5:89:
de:d6:51:a9:1d:61:a4:6c:51:bf:aa:a5:cd:ad:83:
a8:c2:02:b4:59:8c:3a:98:f0:78:fd:33:e8:0e:8a:
79:15:4a:1d:c3:65:61:5b:b8:f2:80:49:5d:68:b3:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147000
sbgp-ipAddrBlock: critical
IPv4:
103.172.174.0/23
IPv6:
2001:df7:7580::/48
Signature Algorithm: sha256WithRSAEncryption
c7:31:67:73:a9:4c:fe:09:50:bd:46:81:6a:6a:0b:d6:95:8d:
58:1b:22:f1:b0:a5:44:d9:9a:db:55:0d:7f:50:7b:41:70:3a:
1d:55:6f:de:a1:4e:84:aa:95:68:98:a7:2b:0a:67:43:57:e2:
8c:a1:1c:66:35:75:fa:de:76:4d:ef:79:36:26:c4:b9:4f:d9:
b8:6a:d7:df:67:63:47:42:2a:e6:fd:a4:bc:e4:b6:a2:64:d7:
3a:4d:c6:f5:99:49:10:64:35:ea:bc:37:d2:36:4a:44:65:20:
10:c3:db:d5:17:7c:65:59:63:7e:89:b0:4c:53:7b:ad:48:ce:
6d:68:44:c5:77:fa:84:94:eb:38:1a:d6:b6:c6:f7:de:9a:8c:
b6:48:55:a2:4d:94:bd:1d:1a:68:15:67:ef:d7:ac:30:f8:3b:
fa:cd:fe:af:af:08:41:9a:4c:4f:c3:07:8b:af:5e:13:90:f0:
0b:10:54:4f:f7:06:09:00:34:c3:2b:44:73:57:80:ba:9c:ba:
34:fd:ce:14:3e:1a:ea:97:45:d8:63:4a:2f:e5:df:a1:32:2f:
ca:28:9c:d5:2f:7f:1b:aa:af:b2:4b:46:ae:56:3d:a3:e1:8f:
5c:70:70:a5:cb:e9:ca:3c:7e:37:70:e9:ee:fd:cf:0f:34:c8:
42:56:26:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:16 2025 by rpki-client