Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer (raw, json)
Hash identifier: 9YAnp/Cu3r/DpFy/xeSQ3B6QrutljWFlQ7GTK4n0QbY=
Subject key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 019F5A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Apr 2023 19:15:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 103.213.108.0/22
IP: 192.140.144.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106330 (0x19f5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 27 19:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:dd:99:60:c0:78:10:d4:f8:5a:2b:5b:e3:
f1:6a:76:b4:32:42:64:2a:05:96:3a:76:68:5e:6f:
e3:73:22:46:c5:9e:45:a5:c9:7f:ad:31:f0:e1:f1:
19:18:af:1a:be:c2:79:2f:0b:8e:15:d8:bc:f5:14:
77:b7:07:0a:67:cf:07:80:99:f0:66:25:f8:81:f3:
32:19:7e:19:73:3e:35:75:63:21:85:9d:c0:5e:b1:
b2:22:26:ee:bd:62:e6:1d:f8:03:7d:46:26:d2:6e:
f0:c8:c9:8d:bb:f4:9d:7a:5d:24:76:91:be:4d:0f:
34:70:e5:93:e0:89:92:e0:46:cc:60:16:d2:92:ad:
e0:8b:4c:5c:8a:eb:7f:2f:7a:d5:6b:ec:30:a1:cb:
e8:d2:f3:3a:c8:0b:c1:e5:7b:f8:a0:11:92:76:03:
be:bd:02:2d:e4:b8:06:52:2b:b6:9f:1f:7d:43:49:
4a:f3:3f:b6:b3:7c:5c:f5:45:a5:6b:c8:14:03:48:
f7:60:84:97:e4:c8:4f:44:25:b2:15:23:3b:0f:d2:
e8:bf:bb:78:8b:36:e1:35:b8:4e:64:ce:9e:fd:87:
70:53:6b:42:66:0e:a7:91:4b:fd:64:26:a8:5a:3c:
af:af:b5:fa:90:89:3b:b8:81:0d:ac:f9:44:ae:73:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.108.0/22
192.140.144.0/22
Signature Algorithm: sha256WithRSAEncryption
97:12:5e:e5:46:b9:1b:be:cc:04:35:a5:95:c3:37:cd:5a:33:
b0:bf:a7:5f:84:ad:e4:24:b1:08:b4:8f:31:0d:7e:86:dc:0e:
54:e4:65:d3:75:dd:b4:db:a1:cf:61:55:96:b8:6c:0b:f2:06:
c7:91:7e:ec:3a:9b:f2:11:92:b4:54:f3:59:71:f5:1b:d1:0a:
c4:cd:2f:39:21:ba:05:65:28:48:e6:13:04:51:c8:da:a6:c0:
28:63:8f:a8:b6:e2:21:bf:7a:aa:1e:00:b4:f7:e6:1d:d5:83:
e6:b9:90:fe:1a:68:87:62:98:9f:91:b9:be:19:42:02:ec:7d:
18:64:2b:d4:e6:39:83:8c:8f:77:76:8d:d7:d6:73:2b:38:3e:
d8:03:be:64:ca:14:44:09:dc:a9:a8:aa:e4:e7:2d:17:46:fb:
67:4f:bd:df:00:69:08:71:0b:10:c8:97:54:a5:35:47:37:2c:
3e:ba:e0:07:08:7c:eb:7d:bc:59:2a:e4:26:8d:fe:5f:23:d7:
60:ea:85:1b:54:9f:0b:e7:ff:d0:12:8e:4c:58:e7:6f:69:e2:
18:ae:1b:b0:ce:bf:a6:b1:16:23:7e:50:8f:47:bb:e8:75:75:
9d:0f:87:04:25:b7:2c:20:83:93:41:b3:82:2c:45:1a:3a:78:
06:61:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:52 2024 by rpki-client on console-fra.rpki-client.org