Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.cer (raw, json)
Hash identifier: 1N0T0hCZ3acm3QX0SY2MtbTr5A06PVrCI3D6lJvOupI=
Subject key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF4D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 00:43:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 139023
IP: 103.122.214.0/23
IP: 2400:f0e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 10:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126797 (0x1ef4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 00:43:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:2b:ab:0d:0d:18:27:0b:d9:7d:ea:8c:02:
6e:08:17:4f:bc:b7:0f:59:62:7c:65:b1:8b:87:d8:
f6:ad:4e:05:08:c0:65:55:fc:5a:e2:37:c0:93:86:
54:0a:7c:e6:b7:a9:66:56:5f:25:db:41:b5:91:36:
35:14:9e:22:c8:4c:17:11:49:bb:d6:b1:35:3b:2d:
f4:1e:ae:53:9a:08:2e:5e:2a:50:3b:e8:47:47:11:
bc:28:e5:fa:2e:73:eb:18:a9:f4:06:5f:0a:f1:18:
78:78:83:0c:40:8e:0b:02:1e:ab:a9:85:34:91:ea:
a9:35:ab:50:fb:99:72:21:aa:52:d9:c0:8a:4f:29:
96:20:9e:dc:ae:f5:9d:11:84:6b:7d:41:32:68:81:
6e:c9:6b:b4:54:22:37:9d:fa:bb:b7:52:e8:03:f9:
73:af:74:ef:77:6d:76:6a:cc:e0:ef:85:74:d9:2e:
18:fc:e5:1c:3d:f1:49:d2:02:a1:f6:05:87:60:88:
77:35:31:a7:6e:03:13:a9:ee:d3:10:26:d8:5d:d8:
c0:66:a7:bf:0e:f6:7f:e1:34:19:77:ff:29:50:ab:
b5:c5:2e:39:76:f5:a2:53:71:a2:2f:05:59:08:c6:
bc:cd:c2:40:5b:f2:87:e9:fc:d0:e9:ef:26:8e:85:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139023
sbgp-ipAddrBlock: critical
IPv4:
103.122.214.0/23
IPv6:
2400:f0e0::/32
Signature Algorithm: sha256WithRSAEncryption
26:f6:68:95:54:87:a6:a7:8d:4b:68:5b:67:e0:bb:45:56:68:
e4:61:33:b3:05:01:29:41:89:c6:0f:20:e8:94:ae:4c:00:78:
50:4c:74:d5:69:7b:49:e9:aa:99:d7:bf:8c:86:e3:3e:aa:7a:
e3:b0:18:21:0a:90:4d:2f:f6:e8:79:41:49:da:4a:e4:31:d0:
ad:28:be:ba:e0:ed:54:e1:38:5d:0d:72:4e:30:0e:2d:b2:8a:
c6:a1:7c:98:7c:c6:a7:62:ae:75:05:4e:62:be:28:ba:92:16:
48:eb:51:d6:bc:47:17:b9:ad:e3:9f:ae:2c:43:d4:9c:b7:c4:
ce:81:32:93:c2:bf:fb:36:6c:fd:4c:0b:88:2f:30:d2:0f:9e:
de:a1:8f:d4:04:99:31:76:85:98:c4:fc:af:c7:ea:62:95:6f:
ff:ec:ca:14:b2:44:6c:6c:d3:92:95:d3:ae:b3:b6:93:06:e1:
b8:68:eb:6a:68:20:b1:a1:19:8a:d7:aa:95:22:2d:48:03:19:
8a:5d:47:ac:ec:23:c1:9b:cd:61:57:00:33:48:b9:25:e1:34:
2e:19:c8:4f:1c:31:2c:59:4a:55:69:12:bd:20:66:3d:c2:4b:
f3:8a:3c:43:51:1e:34:97:7e:93:4d:bc:51:19:25:11:7d:b9:
4f:85:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:35:21 2024 by rpki-client on console-fra.rpki-client.org