Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer
File: Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer (raw, json)
Hash identifier: D/VgkcvNR0x3pqq2NG7zNfXuF6OanB5jBaY0/eLAZt8=
Subject key identifier: 62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 019EB7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Apr 2023 17:13:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 151081
IP: 103.230.82.0/24
IP: 2001:df2:31c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 15:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106167 (0x19eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 17:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91F4610/serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:0b:ec:e4:2b:68:b8:1a:36:3d:62:69:83:
1f:bc:56:95:69:19:f9:af:f4:f6:d7:32:d0:eb:2e:
d8:a2:5d:c1:ec:58:c4:7d:08:15:d5:ec:d2:71:8d:
7b:29:7d:6a:59:8c:9d:b0:ed:6a:4d:1a:be:55:aa:
52:a1:99:d5:6a:02:38:b0:6f:6a:d7:a0:6c:50:0f:
05:ee:1c:34:4c:bc:9d:b2:8f:23:32:c2:c2:4e:00:
57:3f:3f:ea:65:99:21:01:ad:a2:d1:20:9a:17:a3:
db:df:ff:d1:9f:01:49:fd:53:a2:b5:2b:f6:9d:05:
65:9e:a1:79:24:b0:56:c6:26:58:67:a3:12:c6:f6:
10:50:5c:4c:a2:92:06:d6:82:ca:7c:94:b8:f8:63:
b8:6a:55:98:80:55:47:92:98:b2:09:60:69:3b:43:
e7:79:9b:4c:d5:49:e8:6c:32:34:6d:d4:d8:96:58:
5b:0b:a3:39:29:0c:ba:1c:a6:fd:5f:a1:a7:e0:d3:
67:d5:c0:a9:dc:36:8b:ae:00:5e:2f:67:7c:45:56:
cc:57:90:d7:c1:2f:a8:8e:de:f4:81:36:42:ea:d8:
22:8d:3b:ee:fb:ac:6e:9e:48:24:60:28:b5:d8:74:
b0:11:e0:8e:52:38:81:e9:6f:86:57:03:02:67:98:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151081
sbgp-ipAddrBlock: critical
IPv4:
103.230.82.0/24
IPv6:
2001:df2:31c0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:81:b6:92:52:c3:a1:02:f9:be:d3:3d:aa:7c:e4:9d:ca:b9:
70:75:ce:f5:a2:5c:cd:a4:eb:46:94:f4:32:74:9b:72:71:2b:
71:a7:2d:c5:3e:58:6d:ef:e5:eb:7b:e8:bf:9c:11:96:21:db:
15:1c:50:76:44:4c:47:16:2f:01:e8:df:dc:31:b1:4f:d8:5c:
9b:40:54:36:2b:20:8b:31:f0:ac:65:9a:a7:4e:5b:9e:3c:a9:
59:46:00:00:72:dd:3d:79:31:2c:9d:0d:7c:38:c2:5d:c1:d3:
83:6a:57:73:a0:fa:59:77:7a:36:1e:fe:76:eb:0c:da:2f:8c:
33:66:b3:a2:e1:8d:db:09:bf:bb:49:6c:4c:b2:6b:c3:b8:f9:
51:17:6b:e8:b6:e5:77:d9:c8:f9:3d:e0:0d:ca:c5:0f:5e:05:
24:c9:75:c7:b8:ec:fb:5f:10:d1:c2:ba:08:6a:38:ba:4c:0d:
35:bc:10:39:ba:33:df:f2:bb:2c:e4:9c:97:71:11:1d:04:90:
fd:2f:b1:21:5c:3d:36:c1:ef:b4:b3:77:fa:4a:5f:79:34:33:
a6:64:63:ba:fd:9e:4e:dd:97:33:75:c3:28:dc:18:f1:73:39:
00:11:4b:92:40:68:90:22:ba:b2:c3:99:40:d2:18:48:7a:92:
63:ac:50:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:18:33 2024 by rpki-client on console-fra.rpki-client.org