Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
File: QidVkJNLMeOdgd28nAmFa39OWIQ.cer (raw, json)
Hash identifier: kLL99TtLXauyrQ80RqJl8HDf21ndQzdfc5cKoQ3g+so=
Subject key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020FF1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Sep 2024 02:33:35 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 55923
IP: 175.45.144.0/22
IP: 175.45.152.0/21
IP: 180.178.64.0/22
IP: 202.8.76.0/24
IP: 2405:b600::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135153 (0x20ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 27 02:33:35 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:a1:0b:a2:26:ab:88:e5:49:33:9f:b4:c0:
17:8f:4c:69:a1:7b:5b:44:a7:ea:03:37:cc:97:50:
2b:5a:11:7e:e1:6a:17:32:81:32:f4:b6:f9:e1:13:
2a:1f:cf:d7:4e:e1:31:35:5f:68:8d:b0:c4:43:22:
8f:e4:93:1b:26:04:67:b6:74:34:23:29:16:a7:9c:
b0:49:3f:14:bd:ca:3e:67:76:e8:c5:b9:5f:8f:22:
9f:b2:52:bb:54:6d:91:6b:23:d1:02:e0:07:09:4d:
db:bc:03:48:ad:99:92:4a:e6:ba:a3:dc:d9:dd:55:
2e:27:f6:32:44:39:e8:68:78:a1:bb:b7:0d:4e:54:
f5:29:82:4a:06:36:d8:20:c4:6b:2e:85:89:23:e9:
ff:38:6a:00:0e:6b:7d:08:e4:cf:ad:c5:01:93:73:
f2:0a:df:0d:f2:81:9e:80:e9:f7:c1:3b:c3:58:b4:
90:52:a2:54:b7:35:d3:fa:9e:04:2d:dc:f0:07:15:
96:52:3e:6c:64:c4:fe:ee:f7:48:45:7d:bf:c5:c5:
ea:c5:69:a9:56:06:19:34:fd:41:a3:bf:b5:c6:4b:
dd:d1:5e:21:5e:be:36:f0:54:65:f1:b9:c1:4e:1d:
ee:09:ab:25:93:9f:e8:20:ea:9a:3a:db:8a:c4:6b:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55923
sbgp-ipAddrBlock: critical
IPv4:
175.45.144.0/22
175.45.152.0/21
180.178.64.0/22
202.8.76.0/24
IPv6:
2405:b600::/32
Signature Algorithm: sha256WithRSAEncryption
8e:65:9f:a1:0f:05:a3:ce:54:e2:12:f9:07:80:0a:a9:13:c8:
a9:ef:95:9b:09:b6:61:69:14:20:9e:4b:1a:9d:de:e1:5f:d1:
89:47:14:6b:86:7c:c3:e7:cd:22:a7:ea:73:50:17:cf:dc:dc:
d8:cf:4d:98:1a:1e:72:db:11:79:40:76:30:a7:53:f9:91:5d:
9a:75:9c:6c:45:a8:fd:bb:f2:64:8c:73:f4:11:e8:0a:50:14:
4e:cf:b7:f3:2b:b5:e1:f7:7f:9c:43:c2:15:37:d7:f5:cd:78:
84:37:93:4e:06:8a:d3:e9:78:77:09:fc:78:7a:6c:f8:0a:3c:
99:02:90:25:22:45:e0:10:e7:33:19:fc:43:4d:1c:d4:06:3a:
40:7b:95:53:47:5d:f4:61:5c:35:e2:ce:ec:6e:4c:b7:58:c5:
01:1a:2c:c3:f2:8f:34:87:14:fb:9e:a4:3a:43:44:33:c7:00:
6a:99:d7:81:c6:9d:f5:06:fe:5a:e5:ac:d0:51:34:7a:0a:de:
5b:2f:ac:df:a8:cd:75:d5:7c:b7:a2:70:c5:b2:69:bc:41:9e:
23:a6:c3:01:23:ec:89:2c:0d:15:2d:94:8a:57:d4:32:6b:c3:
1c:dd:01:cb:b4:ce:46:de:8a:35:e9:26:65:5e:b4:15:48:3a:
53:09:56:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:29 2024 by rpki-client on console-fra.rpki-client.org