Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
File: TH2sISA9rkFsH87q_FVlcgIiCKE.cer (raw, json)
Hash identifier: cTzDNjelqpqwALQZqPrD23/8vNPgLZdp1M8GshJ/YnY=
Subject key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0202FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Jul 2024 20:36:14 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 151501
IP: 103.235.162.0/23
IP: 2001:df2:aa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131837 (0x202fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 20:36:14 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:74:ca:5f:9d:81:59:42:74:b4:dc:1f:cf:
fb:17:e8:85:67:d2:8f:6a:d9:85:54:fc:69:d1:b5:
b4:52:19:df:eb:14:3b:2a:e1:c4:2d:eb:63:de:c6:
02:76:37:b2:17:ce:f1:63:57:d8:cc:88:0c:a8:25:
27:8c:93:76:96:f9:fb:73:63:19:29:18:b4:84:ef:
64:e8:7a:97:bc:dd:47:6b:47:62:e3:27:d2:e8:c3:
8b:ed:23:d4:a9:86:0a:e8:3c:56:68:90:6c:8f:bb:
ac:66:38:3d:b0:4f:86:d5:00:9f:81:bb:63:d2:3b:
3d:45:60:25:90:a3:9d:f8:8f:8d:9d:4a:b7:00:36:
22:f1:60:3b:80:cf:d9:88:01:69:2e:2a:a8:e0:20:
08:ee:eb:29:a6:a4:5d:75:33:b8:43:8c:62:52:bf:
07:e4:44:58:ee:f1:9f:98:fd:5e:e5:29:c8:6f:eb:
43:63:76:35:97:b3:72:bc:84:9c:6a:b8:45:1e:05:
a8:71:c3:30:3e:b9:48:93:80:8a:6e:23:ff:be:f2:
b7:05:19:83:1b:ff:ee:d2:8f:79:7f:f2:c2:5c:5e:
42:be:36:46:73:d8:c5:1e:0c:d9:75:bf:c5:76:c7:
44:3c:c3:5f:20:91:e7:cb:29:7e:dc:5e:11:b9:58:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151501
sbgp-ipAddrBlock: critical
IPv4:
103.235.162.0/23
IPv6:
2001:df2:aa40::/48
Signature Algorithm: sha256WithRSAEncryption
43:9f:72:91:ba:e3:ed:fd:11:bc:92:29:b4:60:c9:18:21:31:
30:30:15:7a:5e:20:a0:e0:6c:f8:bd:e7:47:4d:1b:eb:8e:86:
19:da:92:89:d9:f9:3e:86:43:54:40:90:93:e4:21:41:c7:4b:
42:43:e7:c7:ee:63:64:71:17:a7:7a:fc:55:a7:1d:8f:70:a1:
a6:fc:a8:63:8f:23:fb:27:b3:84:48:d9:45:18:4a:78:a7:b2:
24:95:61:ff:85:c6:25:9f:a7:d7:3a:1b:21:22:0a:5e:d6:30:
62:26:77:38:fd:90:a7:2f:39:92:6a:8c:83:3b:c9:bf:38:ff:
7f:91:12:1f:75:a2:e7:3c:55:76:bb:fc:04:28:ff:4b:21:b9:
d9:08:33:49:78:d3:a6:8d:03:09:23:39:f4:3f:28:70:06:60:
7a:53:6e:18:09:e6:1b:c3:af:57:42:3b:b3:72:4d:19:5b:16:
05:81:3f:b3:55:45:ca:75:5e:69:b0:4d:f7:17:09:2c:2e:05:
67:89:a1:9d:1b:69:5c:9e:77:14:f8:7f:81:0b:df:b4:41:f6:
c3:de:f3:dc:80:28:04:5b:ba:7f:91:68:5e:95:08:57:88:f4:
84:dc:bc:10:0d:84:92:a2:71:ad:33:01:63:36:f3:4d:04:6e:
e3:9c:13:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:49 2024 by rpki-client on console-fra.rpki-client.org