Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
File: Y3kC4bqWiB1HLuyt-kW1V348HDE.cer (raw, json)
Hash identifier: MO6828hqvBsZpsVmDEw2oyM6nHZkcIC7h2xCN1geDv0=
Subject key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CC23
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Nov 2023 23:24:05 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 152106
IP: 202.36.228.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 20:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117795 (0x1cc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 21 23:24:05 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:c0:e0:0a:d3:8e:e3:2f:8a:62:c2:87:ba:
49:c4:ee:a3:74:c6:55:68:71:73:a8:ac:f4:a0:fb:
44:32:38:26:d5:e0:9b:1c:ee:c2:79:c8:66:c3:c5:
38:c2:44:21:23:00:12:f0:6a:89:ff:92:de:dc:70:
d3:db:c0:5d:09:a7:e5:33:3d:e5:2c:7c:3e:b1:b7:
cc:1a:3f:8d:8e:79:a1:c2:cf:f6:aa:ab:38:39:82:
8b:5a:46:a0:f4:ae:de:d3:92:ed:f3:80:80:84:c5:
af:9e:13:1d:38:09:29:9e:6f:80:86:d9:3e:b2:8e:
ef:52:58:6e:9e:6d:5f:90:9c:8f:bf:ed:c6:92:5c:
d9:1f:38:2c:14:80:b0:88:92:92:ea:89:b3:60:12:
21:d2:01:78:d6:e7:b8:42:cf:70:b3:97:53:6c:3c:
15:cd:34:3e:41:37:c5:af:27:bb:87:03:a7:bc:49:
11:e5:53:81:4a:c3:b6:37:d9:b8:5c:15:e2:ed:08:
9e:f8:ea:1c:0a:1f:50:71:a2:e0:3c:52:9b:28:ee:
5e:b5:b9:b5:bb:38:29:ec:c3:07:9c:23:5c:27:e6:
d3:78:bb:39:b6:69:50:a2:43:a4:53:b9:0a:89:81:
33:b4:ce:9e:9a:37:4e:78:7f:b4:44:ee:4c:bb:f5:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152106
sbgp-ipAddrBlock: critical
IPv4:
202.36.228.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d6:45:94:13:75:ee:82:8b:d1:32:6d:e2:88:0f:59:e3:9a:
f2:4c:5d:8a:87:6f:9f:0a:54:47:32:ae:da:4e:57:fc:39:88:
e6:07:79:11:83:14:4d:04:38:7a:55:fd:d3:0b:9e:71:11:78:
db:15:d5:84:5f:76:25:83:a1:13:cd:04:01:ed:4b:88:6a:43:
04:7f:b1:e7:bb:4f:a9:86:d0:16:51:d8:6b:57:cb:a0:db:8b:
0e:7e:d3:1f:4e:30:5e:0d:3c:49:fb:c7:59:e2:17:71:76:0c:
2f:71:a5:11:17:5b:0f:91:55:7c:6a:2f:15:80:34:62:ce:4b:
45:b9:22:11:45:7d:22:07:84:a1:78:34:42:27:78:f2:2d:88:
80:c3:10:ab:a1:9b:88:d3:cb:5d:82:10:39:33:9d:cf:30:9e:
71:6c:1c:99:f2:98:57:21:9a:e6:9b:c2:24:c2:ab:6b:b7:a3:
45:09:64:3e:de:cb:23:f9:95:6f:d6:b1:d8:c4:42:e3:d2:b0:
52:19:89:06:34:2e:f6:98:d0:3b:10:98:4b:51:20:27:85:fa:
1d:dc:b1:49:73:c0:f9:e3:7c:d5:f5:f6:66:c1:c6:1d:e9:4a:
2d:42:03:89:4a:dd:bb:d1:48:a2:da:c2:ab:56:65:32:da:f7:
62:98:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:08:18 2024 by rpki-client on console-fra.rpki-client.org