Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.cer (raw, json)
Hash identifier: fz6Ho5izFgWYFMncKC9yCwUznLudAEoKUs0zllLY+WQ=
Subject key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C233
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Oct 2023 11:11:28 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 18220
AS: 24227
AS: 24230
AS: 45870
AS: 147172
AS: 149861
IP: 202.12.69.0/24
IP: 203.0.68.0/22
IP: 203.5.216.0/23
IP: 203.5.220.0 -- 203.5.243.255
IP: 203.6.0.0/17
IP: 203.10.112.0/21
IP: 203.10.128.0 -- 203.11.63.255
IP: 203.27.103.0/24
IP: 2401:6000::/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115251 (0x1c233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 5 11:11:28 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:f6:36:07:78:06:34:de:42:8c:34:aa:20:
85:1a:cb:02:67:07:24:d5:3b:7a:db:06:87:c3:da:
c8:5a:12:00:e2:ec:ad:cf:4e:ad:2d:13:d8:13:15:
f7:82:c2:b5:86:ed:31:20:cb:0b:69:0f:03:0d:e4:
bc:28:74:a3:c6:0e:6b:d8:93:fc:c7:25:0d:66:59:
26:52:39:8b:56:3a:89:3c:1b:51:67:c4:55:ad:92:
57:4b:48:56:de:b9:ee:90:03:6a:97:f1:2d:ce:cc:
3c:a5:48:cf:23:3e:e6:5a:e6:66:a0:d4:5d:9c:0a:
50:43:48:9f:2a:84:43:12:f4:96:37:ba:91:87:61:
11:51:d0:62:db:a3:6a:09:11:a3:1b:3c:7d:06:1e:
1d:05:19:4d:07:a8:50:9f:5e:d7:90:32:79:c8:02:
91:7c:c3:b9:7a:93:00:42:5f:87:01:c1:4e:f3:88:
e1:2c:7a:75:54:fc:c0:50:03:a7:ec:74:39:ba:a9:
51:32:a6:3a:15:f7:9f:7a:97:52:ac:bd:27:31:b6:
cc:53:99:a2:3d:a2:f0:b3:fd:59:e0:01:e3:fc:5f:
ce:68:3e:a3:ee:d9:4c:9a:0c:9d:92:f8:aa:d0:a6:
d4:81:86:60:35:0c:9c:2f:e9:b2:e5:af:c0:ad:c5:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18220
24227
24230
45870
147172
149861
sbgp-ipAddrBlock: critical
IPv4:
202.12.69.0/24
203.0.68.0/22
203.5.216.0/23
203.5.220.0-203.5.243.255
203.6.0.0/17
203.10.112.0/21
203.10.128.0-203.11.63.255
203.27.103.0/24
IPv6:
2401:6000::/20
Signature Algorithm: sha256WithRSAEncryption
1b:99:2c:cf:76:18:ee:63:09:19:d5:41:bd:7e:f9:01:7e:e6:
82:c3:7c:92:88:f7:1f:c8:d6:75:76:80:d3:90:d1:be:64:df:
ae:59:55:52:94:7b:93:47:7f:8f:20:31:ea:8e:53:2c:19:2c:
cf:70:6a:63:f1:6a:e6:75:2e:cc:c7:24:13:fc:47:44:9b:ad:
8c:e4:9e:fb:54:d0:de:a0:07:7e:0e:1c:53:b8:c0:44:ae:af:
6c:bf:92:d9:fd:d3:59:31:f5:fe:f2:47:80:19:69:0e:c2:b5:
64:e9:e1:33:a2:4e:51:c2:17:4e:6c:3d:f2:a7:39:1b:02:0c:
4c:0c:a0:ff:50:21:19:f3:67:83:25:3d:a9:1d:c6:d5:2c:3a:
a3:4d:6e:84:c2:5b:e6:f7:d9:38:48:37:3a:e4:95:00:e4:6e:
56:b6:ba:fd:77:2b:21:0e:c2:6a:53:20:44:97:f2:04:29:7d:
c8:05:76:22:49:84:df:b7:af:51:bb:c4:f2:49:3a:0a:54:3b:
7c:b0:66:1e:01:1b:d1:47:42:82:23:0e:27:35:ed:69:bb:7f:
45:10:9f:c3:a5:41:78:b4:f4:4c:8d:58:67:fc:a3:3d:88:ec:
41:ba:cd:c2:3b:1e:18:c2:2f:1f:95:ae:1d:62:fa:e6:31:00:
28:e5:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:52:42 2024 by rpki-client on console-fra.rpki-client.org