Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer (raw, json)
Hash identifier: GZ2c0rOLXzFbEzuroOz3/vS6IO0K3nCF/fP3L51kOh8=
Subject key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EDE1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Apr 2024 08:11:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142004
IP: 103.164.88.0/24
IP: 2001:df6:4380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126433 (0x1ede1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 29 08:11:41 2024 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:82:31:82:06:90:62:ee:bc:11:28:a0:6a:
f3:db:c0:17:c0:ef:c2:07:df:ee:cc:2c:ca:d4:db:
58:93:5c:06:9b:30:94:76:b1:3d:5e:1a:33:21:50:
10:5d:ef:5f:2f:5b:46:b1:75:20:d1:2e:c3:b2:45:
ad:4b:65:be:8a:8b:53:82:64:b0:dd:4b:e4:ab:cb:
17:74:83:7c:ec:d1:8d:41:82:e6:b2:09:a2:4f:0b:
5e:fa:8d:de:64:f6:36:7e:74:bc:7c:05:10:9d:fa:
48:0c:61:90:d8:2e:57:2b:66:91:70:fd:f0:94:01:
b9:c9:50:ff:59:84:61:ca:14:b3:6c:b4:12:45:04:
c4:6b:e2:98:98:3d:4a:a5:27:b8:21:43:84:48:42:
59:dd:d4:5b:13:8e:6a:91:6a:52:a8:ee:16:27:98:
84:ee:2f:75:0d:72:16:a5:68:1c:d5:76:09:36:8f:
46:e8:eb:b3:08:ed:0e:f6:22:f9:b4:11:c2:77:af:
54:20:00:23:0e:87:5f:6b:3b:29:80:cc:d1:77:6c:
f6:c5:ff:5b:be:f6:c1:d4:4e:e4:54:0b:73:63:1b:
6a:6b:95:3b:c7:39:e0:45:95:8c:94:f0:ed:d6:be:
e0:e6:40:c8:1d:83:64:da:d2:1a:78:2d:4d:a9:c8:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142004
sbgp-ipAddrBlock: critical
IPv4:
103.164.88.0/24
IPv6:
2001:df6:4380::/48
Signature Algorithm: sha256WithRSAEncryption
bd:a7:8f:82:0b:84:70:74:80:14:56:fb:bc:49:33:a6:fa:19:
dd:04:9b:e6:d8:66:e0:06:b0:c4:cf:e6:24:5f:f1:15:aa:60:
38:ec:14:b0:c1:b2:45:fb:45:8c:fb:07:5d:71:90:b2:76:45:
8f:1a:6b:49:86:e5:09:13:cc:d9:ed:0f:1c:ef:2f:7a:c5:f5:
52:07:24:76:e0:c7:c6:e6:8a:91:05:a8:df:88:7a:a6:2a:18:
6e:cf:a3:5e:7f:19:36:4d:d5:bc:17:1d:e7:4e:91:41:47:03:
59:a1:c4:a4:3f:fa:04:b4:1e:fb:e2:05:dd:1d:9c:49:a4:05:
e8:57:35:38:ee:9c:cb:00:74:5a:f2:10:02:82:16:08:32:05:
83:c8:e3:56:53:74:3e:5d:57:ff:ed:de:25:70:e2:e4:3b:00:
25:dc:5f:d2:c6:49:3a:55:ea:d0:92:a3:5d:a1:20:54:98:ad:
7d:5b:ff:1b:55:8f:88:3c:92:42:7f:97:12:de:9b:e2:c0:92:
c0:5a:f5:79:d5:7e:00:5c:33:f7:aa:f9:71:fd:3a:ce:0e:72:
62:37:97:0c:5c:18:2e:16:61:0e:dd:e9:be:13:07:38:58:ce:
d9:b9:8c:46:9f:f3:fa:7e:dd:e8:68:81:6d:04:2e:31:5d:06:
f6:d7:5b:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 00:53:11 2024 by rpki-client on console-ams.rpki-client.org