Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
File: UuFqm4muyCoM8IXPWufcPrCPDJE.cer (raw, json)
Hash identifier: shMyb1I0+EC2KcpnNWaftV2CvK3vnermYVKguHvlCu4=
Subject key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FEFC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Jul 2024 15:09:21 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 132236
AS: 138458 -- 138459
IP: 103.8.30.0/23
IP: 103.127.152.0/23
IP: 103.131.32.0/23
IP: 2001:df5:1600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130812 (0x1fefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 9 15:09:21 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:f1:0a:15:f7:66:50:93:bf:0f:d2:62:7e:
96:d9:01:98:f0:f9:b2:ac:70:39:9a:d3:10:d6:f2:
bb:6f:fe:a3:c9:4b:86:58:a0:df:69:a4:32:6b:81:
74:f4:56:fa:2f:e2:b5:c9:d1:71:dc:a7:8b:59:9d:
22:c2:be:03:cb:2b:2c:3a:50:0f:95:7b:5a:59:a1:
68:2f:94:0c:0f:01:b0:a0:b5:61:93:04:46:ed:fc:
36:2c:54:89:82:fa:f9:66:70:25:cb:5a:a1:04:26:
8f:71:40:b4:2b:83:21:ae:04:e2:f3:2f:db:f3:0d:
78:79:d4:4a:f6:86:5f:85:ab:22:42:60:49:c6:d6:
ec:13:d3:4c:30:22:d0:ac:ba:23:8a:5d:28:bf:a4:
02:98:be:4e:19:14:5f:00:40:2c:66:73:75:2c:c9:
b1:85:36:18:30:ae:72:ba:d8:22:84:d3:7b:e2:ce:
c4:8e:da:3e:d2:de:d7:60:7f:9b:4a:8b:d1:3b:f3:
62:6d:1e:ad:f8:ae:95:15:4d:44:b8:e1:07:8f:fc:
36:02:97:65:e3:55:a8:51:8b:a3:06:a3:74:4c:1d:
32:2b:f8:67:d2:1c:4a:88:e3:9a:7e:6c:7b:b7:83:
2a:9d:b0:71:9c:9b:bc:1f:51:5c:9b:c6:e4:eb:8e:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132236
138458-138459
sbgp-ipAddrBlock: critical
IPv4:
103.8.30.0/23
103.127.152.0/23
103.131.32.0/23
IPv6:
2001:df5:1600::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c0:d7:9a:f2:d9:c2:89:da:e0:be:69:0a:66:51:fb:12:98:
9f:dd:4c:71:9d:ea:ab:e9:55:91:02:5b:de:1a:b2:f1:bf:da:
8e:b3:58:7d:b2:a2:51:b8:35:03:ff:1b:1d:db:d8:c3:49:ac:
43:6a:f5:4a:1d:da:23:09:e0:56:27:f1:d8:9d:a0:3a:4d:85:
ad:8a:55:d9:32:8e:d3:9e:b7:68:78:93:eb:e4:b1:40:59:8a:
3c:53:e7:e3:c8:74:3b:5d:88:68:f2:17:30:e6:a7:82:d1:47:
9a:f5:46:65:d2:7d:c8:61:c4:4c:b4:6b:fe:6a:39:68:50:1e:
a0:68:19:67:19:99:63:58:20:c7:72:ae:fd:82:67:83:83:7d:
9a:cf:87:f6:24:48:37:f1:80:4e:94:dd:f7:0d:db:fc:0e:7f:
21:35:29:71:d2:b2:cd:6a:8d:b5:c9:33:fb:e2:2c:6c:d8:b7:
e0:e2:4d:82:6b:ee:d7:15:a9:3c:62:d3:2b:6b:69:c4:4e:71:
07:12:dc:7e:90:fd:58:fe:75:f5:a2:1a:51:90:3f:80:70:e9:
42:8d:3f:a0:0a:d7:6b:17:73:e9:86:a7:d9:be:1f:a5:72:16:
f1:0a:18:41:71:9e:05:21:1f:bc:0c:af:4c:bd:26:c6:92:b5:
a1:5f:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:32 2024 by rpki-client on console-fra.rpki-client.org