Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
File: Sr2iSte9no2c77NZONCoeIBMYuQ.cer (raw, json)
Hash identifier: L9cYzEprHGiwetNolz9ucsP6ZL1wN2h+0GeZ/p9A2us=
Subject key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C4A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Oct 2023 18:59:10 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 132429
IP: 103.20.232.0/23
IP: 103.75.20.0/23
IP: 202.61.106.0/23
IP: 2401:7a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115876 (0x1c4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 18:59:10 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:7b:3a:9c:bb:52:ab:ca:1a:74:1d:5a:a8:
e8:de:12:9e:02:c0:92:89:56:d1:12:ad:c5:78:73:
4f:2a:bb:b5:5e:e7:66:a7:c1:d8:bc:5d:30:ea:36:
ba:00:92:65:f1:a6:e2:c4:68:ce:76:e9:78:5e:13:
e8:71:9e:3c:49:e5:ea:9e:f0:cb:32:07:84:16:4a:
e7:7d:77:90:19:46:ad:48:31:88:dd:94:d3:ee:02:
27:38:b8:b5:74:35:45:6a:72:cf:5a:38:8c:b4:7f:
40:51:92:38:2d:20:82:6d:70:80:94:6c:98:d8:e3:
36:72:b6:f4:9b:6d:81:a0:b7:30:93:64:20:77:5a:
05:8d:32:7d:ed:3e:e2:26:41:05:24:6d:ca:47:58:
b6:00:aa:17:90:c9:3d:02:90:aa:80:d3:92:0c:46:
e9:b5:3a:4d:63:53:40:3a:9f:91:55:0c:3c:b1:1d:
14:f3:7c:16:dc:93:54:3f:87:a5:d2:fc:02:3c:e8:
bd:a3:4b:a7:b7:64:59:06:06:84:b2:71:9a:a1:a7:
f8:b6:7e:95:f9:8c:03:50:2c:38:d0:e3:bb:af:a4:
46:61:a2:cd:26:f8:b1:12:7e:42:9f:4c:38:f2:4b:
4b:33:bc:57:8b:b1:55:12:1e:45:5f:55:10:88:3c:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132429
sbgp-ipAddrBlock: critical
IPv4:
103.20.232.0/23
103.75.20.0/23
202.61.106.0/23
IPv6:
2401:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
2a:6c:6c:b0:2f:02:09:fa:ca:05:3a:32:f8:8f:81:34:84:68:
90:f3:cc:43:34:60:65:db:f3:27:c4:ab:a5:35:db:aa:ae:1c:
19:d7:02:0f:8d:03:e3:11:73:36:fc:92:75:11:2e:c9:c3:45:
40:03:5b:d0:55:b9:b0:d7:73:4d:80:7a:6c:73:2f:b8:d7:7e:
32:52:cd:4e:8f:eb:a0:2f:f1:9a:2c:6b:0b:e3:46:b2:2f:13:
79:45:c5:db:5a:b5:ab:42:cb:b7:b4:3a:6a:e2:b6:48:23:8a:
5c:4b:ec:9b:15:0d:6a:bb:53:30:60:1a:4c:f6:23:5f:fd:11:
98:9f:53:3c:f3:cc:2e:08:96:09:3c:ff:54:29:4b:9b:81:9b:
e1:ba:e8:4d:29:5b:99:7d:5a:47:ba:79:2e:5c:cb:a1:b3:f4:
1e:ee:a9:89:29:49:d4:45:85:9d:c6:fc:e3:4c:b2:f4:65:1b:
49:98:37:e8:f7:0d:7b:d3:ff:22:c4:ce:97:74:6f:90:ba:a1:
ba:18:3b:7f:b7:55:32:a0:29:cb:9c:1e:74:da:22:d1:d2:a9:
4b:6b:59:b5:8a:67:47:fb:cb:b8:f7:3d:a1:63:ae:82:fa:ab:
e0:0f:bf:6d:c0:34:61:0b:d6:1a:bd:4b:df:74:42:92:a1:d7:
4a:9d:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:23 2024 by rpki-client on console-fra.rpki-client.org