Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
File: XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer (raw, json)
Hash identifier: shSsejQ9PyJK3CYnzpht0J83QAL3r9v9jFaWMsSre+U=
Subject key identifier: 5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A9E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Jun 2023 23:18:06 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 140997
IP: 103.153.13.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109030 (0x1a9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 13 23:18:06 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91C9561/serialNumber=5E3CF0251D8A6006B8285BD0949FCD9BA3F9EBB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:de:ec:ec:f9:7c:f6:df:7b:39:7a:e0:ba:
54:d6:af:1a:1d:4a:42:8d:d3:89:4f:82:47:e3:3c:
4c:f6:9f:f8:e7:39:1b:29:21:de:c9:fa:9f:82:2a:
b2:3a:98:43:6f:92:5c:ec:be:3b:72:0f:d9:25:fc:
5a:bf:9a:99:74:8f:4b:67:b6:27:64:ba:8d:01:40:
e8:67:3e:be:be:aa:5e:19:04:a8:c4:e0:06:5b:2a:
c4:b4:2d:70:34:99:22:0e:7c:f0:42:10:b6:b1:c3:
64:80:c2:cf:81:2c:d2:10:24:13:d0:c5:39:48:02:
9f:db:9d:7f:7f:29:df:ec:1e:80:fd:92:a5:9f:83:
6c:9c:7a:cc:03:8c:0e:9f:6c:cb:36:96:44:dc:99:
dc:44:97:0a:d1:5d:c5:41:9a:af:2d:31:ff:0d:c5:
14:fd:41:25:37:b4:5e:5b:05:ba:7f:8e:30:13:1f:
7c:b6:33:08:e2:f0:22:a5:13:84:c6:c3:82:ae:96:
8f:8a:d1:12:ce:72:71:4e:c5:5b:2d:23:77:95:17:
b3:b3:25:2f:aa:b7:54:fe:33:cc:6d:a7:65:a2:ac:
34:ab:6a:64:5c:42:a0:d7:27:88:90:1e:d0:57:d3:
42:56:44:e2:e7:1e:a4:75:5d:79:30:1c:ca:3c:c3:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140997
sbgp-ipAddrBlock: critical
IPv4:
103.153.13.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:de:85:e2:73:42:5c:fa:e4:e9:c0:33:dd:f9:52:7f:04:90:
4d:33:e3:ea:76:a2:33:13:82:c6:15:a9:c8:6f:88:5f:3d:f0:
7e:4c:f0:e1:d1:ed:3f:57:31:04:a3:9e:ee:58:27:c0:4f:12:
b7:ab:f6:56:5e:c0:31:da:66:1c:23:00:fe:74:5d:8c:70:8b:
b4:1b:c0:27:02:7b:22:38:c4:11:13:f5:1e:99:43:a7:de:44:
08:f4:2a:24:87:70:c7:00:78:97:3c:94:35:09:50:57:a4:09:
8a:bd:07:c9:aa:f6:0f:08:5b:06:95:7e:c0:c4:38:23:3d:af:
af:04:b4:97:fe:97:32:ea:c2:b0:73:d3:80:80:1c:dd:dc:c6:
2a:18:64:d3:57:1c:2a:b1:8f:80:e9:c4:b0:f4:13:55:e4:d8:
ed:4c:09:e4:1d:38:89:b4:1f:d9:a5:d5:67:a8:aa:75:1e:62:
3f:de:f2:5d:f6:c8:01:bb:16:cd:bc:ef:3f:7a:c1:0e:88:76:
98:63:e0:5d:3d:a5:3a:69:43:0f:5f:d0:60:ec:6d:1c:44:55:
31:31:99:fb:78:b5:f9:ec:bc:c9:ac:bf:a7:d6:7e:26:76:d5:
52:7a:15:de:9f:56:04:77:13:29:f9:ab:04:a6:63:86:e6:3b:
79:41:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:38:48 2024 by rpki-client on console-fra.rpki-client.org