Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
File: Y3kC4bqWiB1HLuyt-kW1V348HDE.cer (raw, json)
Hash identifier: QYzaqBdPhKUrq95lLgtyxmwPBFo/nB1rsUBsGF3upkk=
Subject key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F85F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Jun 2024 21:08:12 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 152106
IP: 202.36.228.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129119 (0x1f85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 10 21:08:12 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:c0:e0:0a:d3:8e:e3:2f:8a:62:c2:87:ba:
49:c4:ee:a3:74:c6:55:68:71:73:a8:ac:f4:a0:fb:
44:32:38:26:d5:e0:9b:1c:ee:c2:79:c8:66:c3:c5:
38:c2:44:21:23:00:12:f0:6a:89:ff:92:de:dc:70:
d3:db:c0:5d:09:a7:e5:33:3d:e5:2c:7c:3e:b1:b7:
cc:1a:3f:8d:8e:79:a1:c2:cf:f6:aa:ab:38:39:82:
8b:5a:46:a0:f4:ae:de:d3:92:ed:f3:80:80:84:c5:
af:9e:13:1d:38:09:29:9e:6f:80:86:d9:3e:b2:8e:
ef:52:58:6e:9e:6d:5f:90:9c:8f:bf:ed:c6:92:5c:
d9:1f:38:2c:14:80:b0:88:92:92:ea:89:b3:60:12:
21:d2:01:78:d6:e7:b8:42:cf:70:b3:97:53:6c:3c:
15:cd:34:3e:41:37:c5:af:27:bb:87:03:a7:bc:49:
11:e5:53:81:4a:c3:b6:37:d9:b8:5c:15:e2:ed:08:
9e:f8:ea:1c:0a:1f:50:71:a2:e0:3c:52:9b:28:ee:
5e:b5:b9:b5:bb:38:29:ec:c3:07:9c:23:5c:27:e6:
d3:78:bb:39:b6:69:50:a2:43:a4:53:b9:0a:89:81:
33:b4:ce:9e:9a:37:4e:78:7f:b4:44:ee:4c:bb:f5:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152106
sbgp-ipAddrBlock: critical
IPv4:
202.36.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:98:2b:53:3f:48:f6:ff:76:cb:86:38:fd:33:a1:e1:08:f3:
65:3e:66:39:47:bd:f8:0b:71:70:64:70:88:9f:91:ff:23:de:
8b:da:25:d2:49:00:12:3c:89:0b:f5:a5:8b:de:f3:30:6d:bf:
c1:c2:cd:43:01:ea:ed:f8:78:8e:1c:27:42:1a:f6:13:e9:e0:
86:51:f0:f3:3f:49:ce:0a:63:39:7c:34:f6:f0:a3:0c:ce:81:
11:15:eb:7e:e9:e7:75:15:06:4a:36:0d:aa:fb:7c:62:32:53:
23:cd:d3:59:e4:54:1a:b3:55:cd:e8:35:b6:87:ab:10:42:48:
57:04:94:ee:75:eb:7f:4d:3f:9b:a2:6b:a0:44:a1:47:d7:b9:
7e:4f:90:6c:b6:da:98:90:af:8e:ea:f4:aa:97:ed:36:5b:15:
61:e7:f0:5b:9c:e1:de:2d:ed:d8:ce:20:be:25:42:21:5d:a3:
8d:40:b6:6b:7e:8d:c8:3c:84:0d:d8:3a:83:21:db:4b:b8:57:
d6:43:94:37:de:bc:43:bb:67:25:6a:ee:03:dd:f6:69:e1:e3:
50:70:37:6c:1b:a3:fd:4c:9b:c3:1a:ee:3d:d6:0a:8f:be:cd:
76:5f:b3:bb:38:8f:38:2a:fb:4d:be:c3:7e:c7:b0:13:71:f8:
55:03:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:53 2024 by rpki-client on console-fra.rpki-client.org