Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
File: QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer (raw, json)
Hash identifier: s16nWqhE81diPRZqipo8WOyYA/ZgNFHvksSYiV9K3ig=
Subject key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CF84
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Dec 2023 07:42:32 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 151805
IP: 103.218.226.0/23
IP: 2401:56a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118660 (0x1cf84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 4 07:42:32 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:e8:c6:5e:a3:0f:0b:cd:0f:73:6b:60:fc:
a4:18:30:65:b0:cc:1d:e2:14:42:bb:2b:15:c1:6a:
b5:8e:e4:4a:9c:28:6b:1f:51:4a:ba:bc:1e:10:07:
30:43:30:70:fc:8d:35:de:b7:04:1e:1b:ff:ae:f5:
04:23:56:aa:02:c1:dc:cb:a3:1d:17:d7:58:a6:4e:
a0:19:be:49:01:74:48:dc:97:22:93:23:ab:8b:45:
2e:0d:fb:2b:0d:7a:fc:8d:c7:39:b6:d7:15:08:d5:
96:23:69:12:59:95:28:f7:3b:d9:27:d8:db:0e:d8:
f2:55:35:c0:5c:e4:a8:67:61:ca:15:09:36:69:7a:
ee:f0:60:df:30:41:d7:ef:61:3d:1d:ea:a4:cc:5b:
e6:3b:02:10:50:70:19:42:16:1d:2f:aa:b8:e6:a5:
c4:4c:79:e0:64:d8:79:99:aa:12:88:e5:80:31:a2:
e4:88:c9:6a:a6:f5:9e:f8:10:33:ef:28:b8:6e:11:
6a:38:c6:91:cc:be:6b:da:d0:23:2b:ec:6b:32:36:
9e:1c:c6:e5:77:fc:2c:17:d8:6b:8d:41:08:ae:71:
a3:ac:7c:84:f7:e8:b2:a0:ba:30:de:a9:c9:5d:81:
92:6f:16:cf:0f:54:06:81:2a:2b:77:c1:d1:fd:37:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151805
sbgp-ipAddrBlock: critical
IPv4:
103.218.226.0/23
IPv6:
2401:56a0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:09:05:45:85:c2:06:54:ee:b5:84:62:53:25:34:97:19:52:
98:b0:e7:b7:39:29:09:95:b8:c0:b1:fc:5f:88:d7:c4:06:be:
6b:40:91:2e:70:db:78:1b:ab:ee:2a:b1:0a:15:54:64:5c:ce:
ae:24:78:d6:0d:cf:1b:7b:10:e0:3d:c3:e3:c7:1b:9a:ec:5d:
6a:e2:ee:7a:cb:42:8a:f2:95:6f:62:a0:a2:40:2e:c1:3f:98:
1d:71:d2:5b:69:28:5b:f2:bd:d2:38:5d:db:98:0a:36:70:e8:
b5:7a:f0:fc:90:2b:c7:28:42:2f:90:6b:b3:8d:de:cd:11:92:
08:2b:cc:d6:31:33:52:3c:73:bc:50:40:00:f7:55:67:66:a0:
f2:5b:9e:48:8f:14:19:48:3c:2a:b3:0a:54:74:d9:b1:ba:2a:
24:0c:75:c9:e6:ef:35:35:f9:79:16:dd:55:e9:f4:31:1d:3e:
3d:29:7b:a1:63:9b:de:02:46:f9:31:8a:95:bd:13:39:e0:36:
37:b6:e0:58:cc:1b:aa:83:cb:ad:ec:5c:bc:cb:e0:92:4a:46:
47:3c:c0:37:63:02:8c:13:59:20:90:f5:86:42:34:e2:a5:3c:
de:de:55:f1:d5:e7:32:d5:13:3c:35:c1:2c:f1:6f:5e:1f:da:
cd:52:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:14:11 2024 by rpki-client on console-fra.rpki-client.org