Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer (raw, json)
Hash identifier: BeA9Vz/5Z4PNNYk9ZrReJYYbw/WFkDBQcq+cjNc+cck=
Subject key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02187A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Nov 2024 10:19:14 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 134747
IP: 103.197.88.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137338 (0x2187a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 2 10:19:14 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91B9AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:e7:06:b9:3e:06:28:66:9c:97:0a:bb:0a:
a1:ac:8c:52:97:6f:54:ea:fb:00:04:21:56:c2:bc:
8c:8a:3c:d6:a6:2c:29:53:5a:59:b1:6a:d6:87:90:
15:79:1a:c9:59:92:83:3f:2c:e9:61:27:0c:6e:37:
07:cb:a2:5e:ac:46:d4:6b:5c:90:fc:1d:5f:ae:52:
de:4b:a8:fb:81:20:ff:ea:63:d5:74:d7:6f:9d:ac:
2e:44:2c:b9:86:52:9d:bd:9b:a2:b9:8d:fb:3f:75:
19:5b:47:ff:fc:6b:3a:e3:b4:29:7d:96:f7:9a:d3:
f6:11:50:cc:3f:ed:19:7d:fe:35:cb:e8:a6:9e:98:
34:fd:e2:ff:bc:12:f1:6e:fe:f3:96:01:64:5c:6e:
ac:f3:7c:6b:73:7f:85:57:7b:35:4f:f2:f7:91:00:
bc:90:39:c9:e4:fb:c8:5f:ef:05:64:c1:c6:93:e5:
ed:af:2c:75:a2:c7:79:0b:18:6f:cd:17:1b:68:ff:
89:62:c2:b1:0c:fc:58:35:fb:ca:6c:86:d9:5f:c7:
61:a8:4b:bf:dd:6f:e1:a7:e9:fa:f1:89:09:a1:f3:
d3:53:94:81:65:5f:00:c2:dc:d0:17:2f:63:80:e8:
d1:0e:d6:17:ae:dd:f0:19:fc:87:41:04:00:2e:5f:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134747
sbgp-ipAddrBlock: critical
IPv4:
103.197.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c2:a0:0f:e7:84:5f:e6:aa:bb:3b:d5:c3:ae:37:01:bf:01:
95:a9:fb:c7:ca:6b:2f:e3:84:05:6f:de:b2:51:f7:e7:9a:d1:
03:25:5d:0a:b5:43:4e:09:37:b6:70:c2:57:89:5b:2e:c1:b2:
1a:df:27:b5:72:e8:d8:b3:3d:f8:ea:35:0f:3b:b2:89:8c:36:
40:06:73:46:6b:07:19:d7:f8:f0:a7:e6:31:6d:86:8f:f2:5b:
d8:65:6d:86:15:be:dc:8b:90:23:6f:43:22:bb:1c:85:d0:eb:
de:d4:38:88:dc:b8:ab:20:40:32:af:ba:06:90:63:20:2d:1f:
f6:9b:94:b9:64:cd:20:53:72:63:0a:7f:f7:be:95:31:8c:6d:
4e:5d:b4:9a:58:bc:0d:bf:50:f6:3b:57:84:54:4f:05:1e:d7:
80:a0:cf:54:6d:c1:40:b9:c1:2a:3f:f8:d7:4d:b8:6d:5b:c1:
95:74:d4:4b:5d:25:87:1d:01:9d:c4:86:fe:72:76:6b:c4:5e:
d0:ea:08:89:ea:50:2f:27:d5:2d:9b:67:9c:4f:56:67:bf:80:
22:0b:2e:ef:b3:6d:6c:72:e2:13:fa:0d:00:9d:8d:a7:21:3a:
73:e2:13:a9:cf:63:6c:fb:97:c1:77:83:6b:84:79:1f:f3:13:
c4:df:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:44 2025 by rpki-client