Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer
File: YeQBev9HdnE8_cggXML7IXhGK6E.cer (raw, json)
Hash identifier: aGNekyzeJBcXvFaWgfJBWZph8qtygVYYhE42ArBQzz8=
Subject key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E763
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Mar 2024 17:40:29 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 134780
IP: 103.149.0.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124771 (0x1e763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 30 17:40:29 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:5a:8c:e6:dc:34:96:65:fa:e8:ee:00:40:
eb:e5:07:fa:90:b0:22:de:6b:95:ce:93:b1:da:81:
95:d1:77:71:bb:d1:24:c4:3b:dc:f0:98:5b:60:4f:
91:50:1f:9f:d0:2a:b2:4f:73:72:c3:69:2f:8c:ab:
2c:25:86:bb:b2:17:0a:4f:63:40:3a:54:8e:bc:18:
75:1f:80:ed:af:b1:27:e7:71:31:ba:ac:e3:f4:bf:
da:f8:1d:a3:07:38:56:3f:ef:76:63:97:fa:b6:38:
ce:7c:0b:01:c1:fa:f3:84:81:8f:a2:17:08:2a:3a:
17:81:89:03:9f:a2:ec:fe:04:0d:67:71:4f:0a:a5:
d8:6a:18:3f:71:d6:d1:da:40:a4:a0:a2:6d:02:9e:
63:53:6c:55:82:c3:5a:ef:5c:79:49:93:d5:d6:18:
f0:83:34:dd:54:fc:b7:db:32:4d:69:f6:62:57:5d:
72:97:5d:f8:3c:d0:40:76:96:b3:69:e8:ca:ad:ef:
d9:1c:dd:90:db:cd:f2:ec:65:9a:02:3b:b7:c1:49:
c6:b5:21:de:dd:45:05:4d:c8:ed:6f:d9:7d:a5:60:
f9:3d:38:ea:55:68:76:45:4d:73:52:f1:5c:9d:dc:
be:08:64:1e:bc:55:10:3e:55:73:9e:23:00:02:a3:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134780
sbgp-ipAddrBlock: critical
IPv4:
103.149.0.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:47:3a:d1:0f:a4:a3:d2:b2:87:5d:a7:90:81:c1:fa:a8:c3:
6d:22:dd:fa:b9:15:16:20:d7:08:5d:6d:57:3b:63:ea:b3:51:
3c:49:00:54:a6:02:d0:2d:e6:a4:5f:f1:a3:4e:ca:95:3e:e9:
8f:a3:a7:4e:30:29:94:6f:de:69:39:98:ab:9e:e1:89:8a:72:
0a:a7:99:da:9a:63:80:3d:7f:da:7e:a8:7a:aa:35:07:0b:55:
1a:b6:51:f0:bc:fd:22:7e:f1:39:2a:6a:ec:a7:56:69:07:f0:
7a:41:87:c6:f1:3d:e3:65:e6:9d:67:d1:c6:26:8c:c6:6b:b8:
00:8a:d2:b9:99:91:33:f1:f0:2d:82:55:7a:9a:43:ce:5c:57:
20:8e:34:a3:9e:b1:5a:b3:0d:dd:88:d2:08:f5:c1:d6:8b:a0:
aa:79:38:fc:a7:b7:3f:7b:60:9b:a5:51:e6:5d:75:02:f2:86:
88:4c:20:05:46:2d:97:24:76:73:c6:ee:59:36:7b:aa:f0:22:
86:80:77:18:3a:3d:5c:89:35:f1:06:e5:68:c8:92:0e:8f:5f:
8f:e2:2b:05:ec:fa:6c:da:3a:06:fb:db:04:11:3b:61:ca:84:
e3:05:6c:c8:24:2e:70:b2:52:3c:36:78:24:d9:19:e8:9f:5d:
b6:34:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:26 2024 by rpki-client on console-fra.rpki-client.org