Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
File: Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer (raw, json)
Hash identifier: D8ZHLsbcOdCytPCs8ebus01hWsKiChAXWrKPv/m0Ob0=
Subject key identifier: 49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 013ACD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Dec 2021 13:25:28 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 139784
IP: 103.145.50.0/23
IP: 2001:df5:4280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80589 (0x13acd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 15 13:25:28 2021 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91736B7/serialNumber=49EC39F91BC07EAF122AFAAA0BDB7B53D8810C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:63:c1:94:b7:e4:8b:dc:81:d9:f1:e3:ea:
a0:f9:ee:d5:c5:71:31:32:c6:0e:43:32:d0:cc:c1:
7c:8a:e7:81:6d:9c:75:7f:39:7e:c7:32:a9:1c:56:
ab:57:28:09:37:e5:34:70:e5:08:12:2b:fa:64:ac:
d1:78:15:b0:3d:e8:b0:c2:88:9c:48:b0:7c:6a:60:
bf:c8:6c:a3:1a:30:24:3e:3c:84:bb:a0:32:ae:f6:
c9:f3:f9:28:8d:66:9d:ad:41:cc:3c:c9:42:45:21:
22:23:e5:4e:37:01:96:b3:dc:6e:01:0b:f0:a1:60:
e9:a1:77:65:6a:93:5a:94:2f:c9:65:30:7d:55:dd:
22:0f:e5:ad:f4:c2:3d:80:ea:43:f1:03:70:21:e9:
33:dd:11:e4:63:2f:03:d7:b8:84:71:c9:c4:0a:ef:
4a:f7:e2:53:52:05:2c:65:ba:6c:3a:ee:2b:46:26:
5b:cd:e0:e1:b3:2b:68:96:90:7c:4b:4c:05:cc:59:
8a:1c:31:45:83:bc:fd:bf:c2:1e:68:5c:48:d6:cb:
9d:2e:38:89:6e:e4:4f:99:f3:39:ea:33:a1:37:66:
a3:76:cc:c9:7b:bf:a9:b9:f7:7f:95:5f:59:fb:83:
65:9e:50:05:96:6f:3a:90:f9:8b:2b:8a:6a:19:42:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139784
sbgp-ipAddrBlock: critical
IPv4:
103.145.50.0/23
IPv6:
2001:df5:4280::/48
Signature Algorithm: sha256WithRSAEncryption
c5:40:24:fb:44:f4:1f:b8:be:96:e6:96:04:9a:27:56:2d:14:
e1:ee:d0:5f:de:eb:00:fb:d1:d3:ef:2f:b3:f2:84:75:39:bb:
df:df:92:16:29:66:fa:49:db:fc:3e:ba:0e:80:92:21:5e:68:
41:e5:85:4c:eb:f5:88:e9:02:ee:7d:fd:4f:9a:22:24:5d:ca:
d9:5a:de:01:75:b2:56:32:2b:3e:63:43:10:95:1f:35:09:6d:
b1:91:83:d2:de:61:00:fc:95:b9:ae:a3:8d:9d:05:bf:e1:ca:
16:3a:5a:d9:40:ee:ce:08:89:4a:f8:1b:b6:4c:49:ea:65:46:
43:fc:c0:b5:98:30:a1:90:bc:21:ea:eb:6e:a0:b2:74:aa:e9:
00:fb:d9:d6:ad:fb:36:3a:da:7a:cd:0f:b6:ae:26:5b:54:d4:
af:ca:89:52:5a:66:30:5b:7e:5c:91:e1:bc:96:37:19:da:20:
78:20:e4:42:60:85:d0:d7:1b:3e:d5:51:c1:44:43:4b:b8:e2:
90:3a:00:87:15:2a:7e:84:ec:e2:49:4b:42:44:f4:50:24:7e:
ed:8c:61:23:27:11:19:89:48:22:0e:3c:30:8a:cc:6e:17:a1:
45:9c:66:01:69:ad:c0:f9:61:6a:a5:e9:27:07:0d:df:9b:05:
79:f4:11:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:43 2024 by rpki-client on console-fra.rpki-client.org