Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
File: YBqj_Udwv8aa8kBvLoDtCOfca0M.cer (raw, json)
Hash identifier: grVxQp+u7mGkbppU+4sSk/arDQ67Q/4N/XCaHFw47ps=
Subject key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FB9E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Jun 2024 10:24:42 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 152731
IP: 202.50.129.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129950 (0x1fb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 27 10:24:42 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:cc:73:81:7d:2e:01:ad:ba:bd:73:15:c4:
cf:89:45:81:0f:8b:ca:4a:5d:d6:08:35:9a:95:a1:
1b:dc:52:e4:8d:cd:a2:d5:6a:e6:11:75:0f:39:b7:
2f:9c:41:2a:54:62:a9:bf:11:9d:1a:2d:e6:58:a8:
32:a7:28:25:9d:7c:9b:83:51:11:cb:c5:73:c0:67:
21:22:ac:bf:1e:af:e4:d2:97:29:03:9c:06:ca:fe:
31:db:d8:6e:11:30:14:12:ea:04:bc:10:1a:69:0d:
b5:10:f7:f1:33:11:33:ff:f9:70:2a:04:7e:7c:96:
69:f7:ff:05:f5:18:17:c8:00:d4:8f:b4:02:23:7a:
35:da:eb:2a:17:02:54:fa:2c:e7:44:40:b2:c1:2e:
18:8b:d5:b3:c9:cf:c9:67:87:54:43:d9:f2:a9:fd:
12:c1:84:ba:c1:32:36:81:7b:18:de:1f:7f:0b:1a:
ff:33:ae:de:3d:bf:0a:53:09:df:fc:86:bc:e1:cc:
aa:e3:dd:da:5b:65:93:6c:ed:f7:98:46:07:14:30:
3f:f9:a0:78:49:13:c6:b2:49:74:c8:71:b2:c3:bf:
b0:07:c9:99:9e:d5:75:a9:e9:00:0f:20:06:ce:00:
a1:14:76:4b:d4:21:b6:92:68:01:ce:4d:57:6b:e8:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152731
sbgp-ipAddrBlock: critical
IPv4:
202.50.129.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4b:14:c4:b3:30:b4:38:08:fe:cc:9f:e3:9f:cb:10:9b:6d:
d2:da:cc:b9:c4:54:2c:d7:64:91:d6:42:87:36:f3:9f:7f:50:
5a:2f:77:c2:89:6a:c6:d9:c5:12:55:fc:d6:b8:d9:f7:6c:dd:
ef:01:b2:c1:ab:ef:93:d9:b1:7c:89:53:fd:c4:4d:a8:d1:98:
88:37:81:d2:d1:a2:17:ab:b3:7f:ba:0a:41:db:de:72:f0:84:
19:a6:58:b8:04:4b:f2:c1:12:05:27:02:47:a4:ef:ec:77:76:
ec:8c:03:fd:e1:43:51:19:88:41:4a:df:e2:42:b4:64:7d:c5:
ba:33:fc:21:82:b3:a7:db:dd:1b:03:2e:84:3c:f6:6f:ec:7d:
be:56:44:b7:e3:2a:ba:b0:69:40:ff:5f:e1:17:37:fe:14:07:
e6:e3:3e:8b:7a:8e:e9:49:85:a0:9f:f0:71:01:24:19:66:d5:
6b:c2:33:ae:24:41:35:7a:0a:dc:10:b3:37:bf:c8:b0:c0:35:
cf:42:f2:7e:b3:7e:2a:02:72:24:a8:ae:9b:9d:ac:26:f6:04:
2a:b8:49:2e:b6:02:f4:f2:c3:c0:7e:05:d5:82:2a:a4:bc:ef:
9e:32:1f:97:cb:48:a5:b4:43:c5:29:b0:fd:9b:23:55:46:6c:
96:6d:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:12:44 2024 by rpki-client on console-fra.rpki-client.org