Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer (raw, json)
Hash identifier: AyX4bOX6CJ3d7pO3WWPvsdV9sdBbzfkwozxNHq9odik=
Subject key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F6F5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Jun 2024 21:34:09 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 139206
IP: 103.139.206.0/24
IP: 2001:df0:9180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128757 (0x1f6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 3 21:34:09 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:01:78:fe:e9:ca:db:dc:4e:df:ab:58:2e:
f3:99:62:90:36:1e:46:44:cc:2f:fe:28:10:ad:cd:
28:1f:b5:2f:56:f6:96:61:19:c3:5d:dc:a2:7b:62:
8e:d9:c9:56:64:c1:6c:50:48:04:fd:01:e9:6c:38:
62:e6:93:10:f8:63:f7:97:63:70:e3:50:e0:71:f4:
41:c8:76:c3:0a:9a:61:a9:ba:cb:96:50:2e:c8:00:
61:47:19:9b:c2:b8:5c:51:7b:49:1c:c7:dd:ef:19:
5d:53:34:2a:60:ce:ce:e8:ea:69:39:4d:24:9e:6a:
ed:be:a4:c2:4f:b9:72:e7:8e:7b:00:28:11:59:63:
36:54:a3:bf:3d:33:43:f7:b9:1e:19:15:fe:c6:f8:
69:5f:d0:3d:98:27:c5:b5:55:56:b4:d1:ea:96:0f:
e3:72:f6:39:db:e5:29:7b:af:50:4f:9d:07:4b:31:
4a:0f:c0:f6:05:95:f3:89:fb:97:e8:cb:fb:52:e8:
74:ab:72:11:71:f8:56:42:76:2e:6e:6b:72:9a:35:
c9:9c:6e:a4:e4:e4:85:2f:78:6a:ba:7e:58:7f:f1:
7a:48:68:46:fa:a6:a3:aa:70:40:e7:92:de:d2:ed:
9e:f2:4d:e6:d1:bc:f0:21:c1:f5:ac:35:a6:c4:7a:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139206
sbgp-ipAddrBlock: critical
IPv4:
103.139.206.0/24
IPv6:
2001:df0:9180::/48
Signature Algorithm: sha256WithRSAEncryption
05:27:1d:f3:c1:f4:34:8f:36:db:9a:33:76:e4:6a:ec:6a:39:
c7:ec:70:a1:e5:43:52:12:f1:48:6e:ee:f9:11:74:14:31:21:
7d:bd:a3:5a:ec:89:ec:25:69:2d:68:bc:c1:ba:84:08:7f:4e:
3f:d8:38:f3:bb:81:9f:94:e3:e7:cd:2b:5a:96:5e:78:5f:5f:
37:68:dc:ee:7b:35:c8:60:f6:19:3d:d0:a8:15:f5:ff:7c:69:
3b:32:23:d7:9c:81:41:f3:06:81:81:20:04:3d:3a:45:2d:ed:
0d:f2:fc:c4:96:3e:92:14:7f:cc:44:32:2c:aa:0e:bb:11:3a:
31:32:c1:8e:77:c5:71:46:9a:7b:42:69:c0:44:33:80:37:07:
8f:c3:45:7f:47:6c:3c:17:b3:a5:f3:ff:20:dc:ab:5f:47:d0:
ec:c1:a3:dd:d9:90:28:cf:21:5b:39:d0:43:1c:c1:a5:2d:1b:
fa:43:cf:b1:86:02:d3:06:40:fd:f5:72:5d:15:6f:30:5a:30:
c7:06:4a:61:91:a6:b2:95:a4:a6:4f:b9:98:ba:4f:89:27:e6:
b3:99:dd:13:cd:a1:8b:19:e5:4c:38:99:3c:f7:d2:64:c6:20:
bd:54:bf:5f:c8:94:c1:90:c0:fa:31:dd:ef:ba:13:8d:0a:26:
37:18:58:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:31 2024 by rpki-client on console-fra.rpki-client.org