Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
File: QwISXvsUnkUVYMdJW31DzZ6az_c.cer (raw, json)
Hash identifier: b8k6/EH1OB+++28L9emFBq/yjvAWD0YPKmKespVwm3Q=
Subject key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02166F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 26 Oct 2024 17:51:07 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 137236
AS: 139258
IP: 43.226.12.0/22
IP: 103.101.80.0/22
IP: 202.8.72.0/22
IP: 2401:ccc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136815 (0x2166f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 26 17:51:07 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:1b:e3:59:fb:3b:24:61:23:fd:87:1e:24:
e2:47:18:67:8e:d2:1c:0c:aa:9e:7a:d6:94:22:c9:
58:e8:f6:5b:ec:a5:1c:4e:72:e0:28:ca:ba:14:3d:
61:b1:89:b4:cd:a4:36:ed:b3:b4:10:6c:d2:f7:c4:
b4:d2:59:6e:00:2a:85:d5:19:17:0a:5b:ed:96:79:
1b:75:7f:71:3b:49:a3:ad:1a:ef:2d:6e:24:bc:fa:
02:03:09:d7:fb:9c:88:5d:68:6b:34:2b:e2:72:b8:
8c:8f:84:48:25:b8:cb:06:74:d3:84:e5:0a:5a:73:
4b:6b:7b:4d:e8:e4:15:9b:a7:ea:64:07:21:1d:76:
83:b2:b8:64:7c:d6:ed:d0:56:31:e3:7e:78:0e:72:
13:48:68:c6:70:7b:ae:b5:c3:94:ac:97:be:c6:4e:
69:c7:92:29:c2:b1:04:14:f1:a2:28:ea:d0:c2:9b:
98:8f:92:6f:86:8f:cf:b4:3c:c3:b6:0b:8c:97:45:
f9:32:38:ba:fc:20:a1:d9:ad:3b:7a:b5:43:3e:d6:
28:e8:d5:68:9b:8f:26:c0:2c:05:1c:4a:23:3b:e6:
ee:4b:2f:06:22:32:22:97:13:92:ec:ee:b9:79:b0:
64:ff:0c:11:d9:38:48:9d:cd:54:88:a4:65:14:d4:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137236
139258
sbgp-ipAddrBlock: critical
IPv4:
43.226.12.0/22
103.101.80.0/22
202.8.72.0/22
IPv6:
2401:ccc0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:64:5a:b0:4b:44:49:07:b6:57:e4:43:4c:e1:81:2d:ee:04:
d7:a1:7e:4f:60:42:55:86:f0:cd:df:b3:53:38:f6:cb:ad:79:
85:10:fe:6e:f5:09:41:9d:a4:be:45:d7:be:f3:c9:5d:8b:0e:
55:f0:66:b0:21:52:df:6f:78:c4:82:ac:de:d8:db:92:7d:8d:
ad:e0:a6:3c:58:e9:a9:44:c4:0b:e9:4a:72:23:ee:53:24:4e:
a4:cb:0d:b2:02:7d:fa:55:3b:0c:89:c0:67:99:8c:62:9e:87:
f2:54:6e:73:6e:0f:63:68:b7:08:30:59:8a:27:82:99:36:e1:
75:ca:8a:ba:ef:b7:8d:87:cf:08:31:f9:32:b6:31:99:58:d7:
91:09:97:72:d9:d2:0b:1b:fa:0f:62:f8:2d:b9:99:a8:4e:62:
09:18:72:da:3b:01:ad:e6:99:10:cf:9d:12:ba:01:bf:03:1e:
f6:6d:33:dd:0c:42:87:01:bd:93:1a:59:b3:49:27:7d:75:40:
59:b5:37:da:f6:3c:b0:a1:02:89:3f:39:01:96:6f:b7:8c:90:
1b:53:45:95:e8:dd:da:69:14:d3:c5:2c:e9:28:42:1d:53:98:
4c:af:6a:4b:3e:db:ad:9d:19:d9:c1:6c:dc:1e:6a:95:b6:14:
86:b1:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:40 2024 by rpki-client on console-ams.rpki-client.org