Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
File: U3TG518YYFJFWi2NpSkv7wCcya8.cer (raw, json)
Hash identifier: 8jK+4w/enkaqxJpAfoEiojoeJ/CFymdPylVxEIT1UL4=
Subject key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC1D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Nov 2023 19:37:13 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 63916
AS: 132068
AS: 134520
IP: 27.122.56.0/22
IP: 43.239.156.0/22
IP: 43.245.196.0/22
IP: 43.251.156.0/22
IP: 103.1.152.0/22
IP: 103.10.196.0/24
IP: 103.10.198.0/24
IP: 103.35.72.0/22
IP: 103.68.223.0/24
IP: 103.71.254.0/24
IP: 103.72.4.0/23
IP: 182.161.32.0/22
IP: 202.144.192.0/22
IP: 2402:c480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117789 (0x1cc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 21 19:37:13 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:98:f1:ac:b3:ec:cc:85:27:bf:41:44:a3:
12:ec:50:ff:b8:9c:56:e5:d3:7c:45:ad:2c:4b:3b:
1e:e9:07:f3:4f:4e:23:a4:d7:35:ba:2a:57:7c:2d:
d2:2c:b0:b3:af:a6:ee:c1:f1:25:6d:be:f0:38:99:
5e:40:5a:3e:97:1c:66:25:e3:f5:d6:87:8d:7e:82:
b7:33:18:1f:5b:d4:2f:c2:95:b1:86:89:12:a8:af:
9d:e1:38:cd:8d:b1:7f:fe:0a:bd:76:91:11:97:22:
54:bb:07:1f:7b:e9:f4:60:62:a4:2b:d7:b4:49:bd:
05:33:6e:41:05:c5:28:02:f4:05:c3:96:e0:5c:fe:
08:46:34:b1:c1:50:8f:b0:47:fe:29:c7:84:25:d0:
90:7e:d4:00:b9:7a:31:73:14:76:f2:3c:10:e3:c3:
0c:17:c1:6b:8a:05:e2:a6:cb:b8:92:c2:6a:ad:5c:
bb:36:68:59:2f:43:19:a0:18:d3:aa:86:d5:ff:ab:
28:3a:a9:49:3b:f9:a4:3e:0d:16:b2:4e:ae:57:46:
fa:c9:2d:76:ac:8e:ca:b9:59:a9:d1:1f:7d:a4:12:
61:50:2e:62:64:5f:a8:97:07:1e:28:4e:1a:da:6c:
a1:4c:c3:fa:33:18:85:83:25:55:33:17:b6:01:94:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63916
132068
134520
sbgp-ipAddrBlock: critical
IPv4:
27.122.56.0/22
43.239.156.0/22
43.245.196.0/22
43.251.156.0/22
103.1.152.0/22
103.10.196.0/24
103.10.198.0/24
103.35.72.0/22
103.68.223.0/24
103.71.254.0/24
103.72.4.0/23
182.161.32.0/22
202.144.192.0/22
IPv6:
2402:c480::/32
Signature Algorithm: sha256WithRSAEncryption
5a:92:21:73:50:a8:a1:68:ca:a3:f6:98:b0:94:8b:8d:3c:b4:
04:31:3d:2b:0a:f7:60:80:e1:6e:dc:fd:91:7b:08:90:e9:90:
9d:f4:cf:6b:aa:52:03:50:ac:2b:00:f7:a9:38:a9:f6:42:ee:
08:6e:07:10:4b:20:20:08:59:92:80:7e:d9:12:26:46:ac:f1:
79:c1:0f:28:b1:8d:0f:a1:57:9c:6f:3e:6a:33:8b:6d:b4:b4:
6a:7b:59:21:a1:7b:52:f2:6e:81:a3:c1:00:09:35:fb:f5:84:
94:c0:29:27:26:34:86:d8:d6:b0:ba:d0:0f:b6:c7:8d:d1:de:
c8:b8:6f:e6:d0:9f:72:c6:04:38:83:c6:ca:87:9a:e2:43:68:
c2:93:02:0e:c8:e6:01:d5:dc:a7:69:ff:a4:ad:8c:e1:f5:6a:
2d:e1:a4:d3:37:32:4e:27:67:8a:7d:cc:59:5d:76:04:ab:f0:
99:02:1e:a0:1a:1c:b6:ad:49:fc:92:fb:a7:b4:9b:f3:25:41:
95:2e:37:df:23:7c:96:42:20:4f:27:8b:cb:c8:b2:de:12:27:
e9:60:b0:99:63:66:28:4f:e0:fe:56:35:7b:8b:63:14:bb:0e:
72:cd:35:b9:d9:d7:2b:ad:1d:78:31:04:49:ad:61:56:03:c6:
79:e4:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:21 2024 by rpki-client on console-ams.rpki-client.org