Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
File: WhnS_cg5Jydpb3BEm4syr3cgkag.cer (raw, json)
Hash identifier: nnoWxewSkfaxD2QXKNNkkQTi0U1iVHoXJ0193PV9fv8=
Subject key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C04A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/57/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Thu 28 Sep 2023 09:06:12 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 23858
IP: 45.117.100.0/22
IP: 103.57.164.0/22
IP: 2403:2e80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 03:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114762 (0x1c04a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 28 09:06:12 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:b0:4b:bf:99:05:42:32:11:3c:95:97:3c:
f6:9e:ca:13:66:89:6f:db:40:96:e0:b1:99:28:0f:
cd:d8:2a:90:96:a3:65:d1:b9:fe:d8:51:b5:2d:e6:
ec:d4:c2:21:12:88:62:60:c5:79:6a:48:fc:cb:38:
ed:be:76:19:ef:00:b5:e7:98:6a:85:4c:67:d7:12:
d7:19:24:80:66:6d:2f:16:5f:72:1c:9b:c9:c4:df:
42:fa:f6:04:f2:e5:36:bc:c7:da:c4:9b:67:ae:1b:
1a:f7:02:dd:66:23:f2:96:05:87:20:61:73:f0:f2:
9f:a4:27:bc:9a:0f:ea:a7:d0:37:f9:35:6f:1c:35:
f0:10:f5:b5:8a:8f:de:95:0c:98:4a:62:9d:63:ac:
c6:9a:be:90:3d:08:c9:3a:13:76:9e:7f:ed:27:40:
95:8a:14:96:aa:41:7c:4e:4f:7c:c1:24:7a:d0:f3:
0d:5c:0d:08:85:31:09:18:9f:8d:e2:b4:6b:6b:9e:
ff:ed:9d:1c:ab:9c:7f:98:4a:5f:12:06:c2:1a:71:
50:d9:6e:12:b5:5d:ff:0c:77:52:2a:01:dd:e8:0f:
16:7d:5f:26:f5:1d:e8:1b:53:d4:d6:a5:e8:a6:ee:
6e:c1:f6:38:03:74:33:3d:8d:f6:ad:56:cb:04:a0:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/57/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23858
sbgp-ipAddrBlock: critical
IPv4:
45.117.100.0/22
103.57.164.0/22
IPv6:
2403:2e80::/32
Signature Algorithm: sha256WithRSAEncryption
17:65:28:16:ef:5e:3c:d2:69:03:50:f9:44:c2:04:a3:94:31:
ef:f8:93:5b:2f:e7:55:74:60:61:50:8d:0b:0b:3e:0d:61:e6:
a4:fe:f4:92:ac:a5:0b:ac:2f:6a:08:f3:dd:66:2b:88:4f:b8:
72:31:dc:f9:79:1f:1b:08:5f:fa:e6:fc:b9:d7:e6:2f:e8:0e:
1a:ce:e6:c6:0d:32:54:2a:f5:ab:d3:80:37:2e:b9:fb:ff:56:
b5:a6:53:90:80:9d:f6:08:fe:45:d6:04:03:b5:91:2d:9f:ae:
dd:4d:28:73:f7:05:29:d5:da:7a:b4:dc:3a:d5:28:a6:05:fa:
5c:1b:6e:8a:08:dc:7f:ec:e9:df:0a:aa:7c:a5:34:3b:52:d4:
eb:5b:f6:d6:7f:fe:89:3f:e3:88:87:66:91:5d:bc:cc:bc:75:
ef:14:f5:48:7f:fd:8f:0f:40:e0:b4:a7:44:a9:79:1d:6b:a5:
3b:1b:01:33:ff:17:a8:c1:4e:43:1a:56:d2:96:46:88:a9:0a:
39:08:7c:12:7a:8e:a6:24:73:56:e6:6b:94:93:98:75:ca:71:
9a:d1:e6:6a:07:91:9c:a5:6d:36:10:a2:47:b9:4a:22:15:0b:
0c:5c:e1:56:a0:64:b2:db:0b:6f:e5:c4:99:2a:d9:98:f6:1b:
d6:b9:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:09:34 2024 by rpki-client on console-ams.rpki-client.org