Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
File: XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer (raw, json)
Hash identifier: tFP92Fevqf5V+0g7uOrbRfC4P0SM99MeIJtrPE9BN0s=
Subject key identifier: 5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F7D4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Jun 2024 00:13:57 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 140997
IP: 103.153.13.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128980 (0x1f7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 7 00:13:57 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91C9561/serialNumber=5E3CF0251D8A6006B8285BD0949FCD9BA3F9EBB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:de:ec:ec:f9:7c:f6:df:7b:39:7a:e0:ba:
54:d6:af:1a:1d:4a:42:8d:d3:89:4f:82:47:e3:3c:
4c:f6:9f:f8:e7:39:1b:29:21:de:c9:fa:9f:82:2a:
b2:3a:98:43:6f:92:5c:ec:be:3b:72:0f:d9:25:fc:
5a:bf:9a:99:74:8f:4b:67:b6:27:64:ba:8d:01:40:
e8:67:3e:be:be:aa:5e:19:04:a8:c4:e0:06:5b:2a:
c4:b4:2d:70:34:99:22:0e:7c:f0:42:10:b6:b1:c3:
64:80:c2:cf:81:2c:d2:10:24:13:d0:c5:39:48:02:
9f:db:9d:7f:7f:29:df:ec:1e:80:fd:92:a5:9f:83:
6c:9c:7a:cc:03:8c:0e:9f:6c:cb:36:96:44:dc:99:
dc:44:97:0a:d1:5d:c5:41:9a:af:2d:31:ff:0d:c5:
14:fd:41:25:37:b4:5e:5b:05:ba:7f:8e:30:13:1f:
7c:b6:33:08:e2:f0:22:a5:13:84:c6:c3:82:ae:96:
8f:8a:d1:12:ce:72:71:4e:c5:5b:2d:23:77:95:17:
b3:b3:25:2f:aa:b7:54:fe:33:cc:6d:a7:65:a2:ac:
34:ab:6a:64:5c:42:a0:d7:27:88:90:1e:d0:57:d3:
42:56:44:e2:e7:1e:a4:75:5d:79:30:1c:ca:3c:c3:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140997
sbgp-ipAddrBlock: critical
IPv4:
103.153.13.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:29:5f:2d:34:2a:f8:8f:3c:f6:d7:44:c5:5a:47:bf:8d:09:
5d:a7:78:e3:d3:a8:c6:5e:23:df:47:6c:0e:94:85:ad:26:71:
ad:8d:c7:08:13:f9:26:87:fe:9a:d4:5a:09:ad:8a:e8:1e:49:
f2:36:2c:42:7c:9c:28:8c:87:81:ae:d9:1c:40:a3:6d:ff:ec:
1f:56:fb:df:dd:65:fd:c8:7b:cc:02:bd:12:44:39:a7:f2:8a:
d3:fe:5d:f7:7b:4b:0f:62:d7:8e:38:a6:b0:05:82:f6:be:f0:
ff:df:18:21:a3:cf:1d:8c:a5:ce:b6:2c:b5:56:d5:52:c1:3f:
ce:6d:e9:18:b6:0a:f5:a9:30:e0:90:12:36:de:70:f2:e4:de:
54:18:4e:f8:85:3c:40:a8:a5:be:28:e8:91:dc:8f:39:a7:9f:
dc:df:2f:38:2a:09:49:31:54:23:fa:65:38:1e:9d:ed:65:bc:
ef:71:5a:2a:89:29:38:5d:bd:f3:d2:ea:27:c1:be:1d:07:9c:
a4:b7:07:09:9b:34:e7:07:97:93:b1:b6:2c:ba:69:ce:45:63:
70:d6:c2:3f:19:b3:38:b0:08:f0:3b:0a:fd:cd:f6:3b:55:c0:
e3:bf:a2:a5:c6:0a:a1:b5:fa:bc:32:09:1a:be:b8:5f:a5:c5:
ea:09:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:35 2024 by rpki-client on console-fra.rpki-client.org