Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer
File: SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer (raw, json)
Hash identifier: xgl2pGJLp6ET3HNrBKCEDNLVcsBO296p/3uAw6O0sss=
Subject key identifier: 4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Dec 2024 16:13:55 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 58808
IP: 43.228.84.0/22
IP: 103.245.164.0/24
IP: 103.245.167.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139091 (0x21f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 1 16:13:55 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9182EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:83:17:43:14:90:c4:1f:6f:83:22:b7:51:
49:2b:f2:4e:67:2b:61:86:30:37:04:5a:99:81:88:
b8:2c:14:e4:d1:15:4f:f8:3d:34:eb:26:e8:60:be:
bd:a1:41:53:13:a2:5a:dc:f7:bb:f3:a8:4e:5d:a9:
eb:e3:8d:58:3a:08:ae:2c:d0:24:47:ff:fd:5d:d8:
d5:a0:5f:86:48:88:7c:f8:0d:c2:b7:b0:a7:13:c5:
59:99:7e:f0:a4:01:09:2d:fd:95:a0:7b:fe:7c:c2:
44:0a:bb:3b:d4:0e:0b:89:b8:15:72:b9:76:b5:7b:
f2:fc:81:97:bd:1c:02:05:d7:c3:a8:0b:14:a3:85:
3b:29:d6:c0:f0:88:a2:26:20:3d:0b:1c:e7:64:df:
45:a9:31:7b:ba:dc:63:71:84:76:65:91:3d:c4:d4:
11:ed:65:1d:01:66:1e:a0:4f:d5:c0:bb:50:1c:c1:
d3:cd:42:5e:fb:8d:17:77:e7:61:b5:f1:14:3c:f5:
37:d3:f0:42:ef:2e:d5:2f:d7:bc:48:31:de:c5:af:
a1:6c:c6:d4:6a:66:c2:67:68:66:21:72:9d:52:57:
06:41:75:a8:2f:47:c4:61:29:50:0c:af:e1:4b:ef:
30:64:3b:b2:4d:0c:71:ed:0b:a8:d0:23:fb:44:fa:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58808
sbgp-ipAddrBlock: critical
IPv4:
43.228.84.0/22
103.245.164.0/24
103.245.167.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4c:14:96:65:43:5a:c4:42:76:f7:a2:1a:cb:78:fe:07:7e:
9f:98:32:35:ef:62:df:34:0d:46:65:dd:34:a4:db:2d:69:ea:
01:a7:47:3a:61:eb:9d:2f:a3:86:36:c9:13:83:5d:ac:20:cb:
13:28:54:62:1f:38:10:c4:f5:fb:d5:7b:7d:10:1d:39:88:cc:
37:67:72:b8:1f:11:f2:30:9c:0e:31:81:53:55:b1:0e:93:3b:
b5:db:c3:fa:de:78:1a:fe:71:b6:92:7e:6e:d8:43:c9:83:13:
3a:3f:47:eb:cb:a4:53:d6:b0:4a:b8:a1:c1:90:a8:59:6f:32:
eb:64:56:29:fe:b1:f4:3d:0c:6a:7b:1e:f4:2a:09:4d:62:0d:
f3:c1:b0:bd:8b:9b:2b:a7:78:14:1b:e3:74:37:ba:7e:d2:68:
b0:4e:ed:42:58:44:af:55:1d:61:37:88:78:21:9c:0b:21:8c:
b8:be:a7:2c:86:a9:ba:38:8a:ce:67:e3:5e:ac:be:bc:ff:dd:
95:81:68:d3:bc:ba:b3:1b:f7:4f:cb:b6:8d:0e:80:0b:8d:31:
13:80:9a:32:ef:b5:ca:db:5a:48:aa:4a:a1:11:ce:8b:12:5c:
7f:ac:19:31:9d:d8:b7:ab:d2:01:1a:f5:3b:bf:92:82:1b:6e:
77:fb:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:29 2025 by rpki-client