Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer (raw, json)
Hash identifier: wGMX27p2Mgp/GAkYfwMhFOFBSuhcopetI3E9AWQpFeQ=
Subject key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D07E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Dec 2023 15:05:50 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 45531
IP: 103.246.20.0/22
IP: 203.170.20.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118910 (0x1d07e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 7 15:05:50 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:a0:50:89:2d:6c:18:db:7f:cc:3c:91:12:
a8:d2:f0:17:76:33:be:2e:bb:57:2a:6d:cc:0e:18:
2d:2c:08:4c:9f:a6:3d:53:ce:d4:d3:56:e5:6a:cf:
ab:64:87:7c:31:c3:b3:66:11:61:37:a8:49:fe:d2:
6e:e8:2d:8a:4a:70:27:10:47:d6:a9:af:6f:0f:56:
5a:08:b1:d1:2a:c6:6b:58:53:0b:55:e8:d8:24:05:
b2:9a:6b:50:65:58:0f:c5:1c:12:ed:50:ca:18:a6:
78:fe:1e:7b:6f:ae:72:62:66:6f:65:62:6c:30:98:
7d:f2:0a:0f:37:18:6f:87:de:37:de:2c:64:7d:10:
25:49:cd:52:5d:72:4a:27:eb:31:89:fd:77:25:c4:
1b:9a:1c:8c:88:f0:79:9f:1c:e2:2a:c2:e2:e1:8e:
55:bc:e6:89:9e:41:9d:a7:5a:d5:4c:19:09:37:f0:
2a:15:f3:6b:ed:00:b0:d2:f1:71:f7:c5:76:84:3a:
68:0b:e2:90:87:db:d3:b1:64:e9:39:1e:49:54:09:
e2:2a:8b:12:00:51:fb:54:c2:e1:4e:87:18:78:6c:
a0:9e:3f:0d:bf:cd:13:99:c6:7f:82:e1:be:4d:65:
d0:24:c5:5e:df:ac:2a:3a:75:d6:e0:4e:2d:b5:b5:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45531
sbgp-ipAddrBlock: critical
IPv4:
103.246.20.0/22
203.170.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:a9:9f:66:b4:86:bf:d9:56:49:4f:14:f5:c6:a4:4d:06:27:
ed:e4:fe:39:a8:d3:c2:d9:98:1b:2f:84:c0:06:c0:bf:42:1a:
54:57:7e:9f:b8:20:63:51:a6:31:d6:b5:96:42:22:b5:62:3a:
ff:f3:8a:fd:0e:d6:f2:e6:5a:aa:33:10:38:9e:49:61:08:9a:
fa:94:f5:33:95:df:c5:09:e3:bc:81:4e:33:97:52:b3:4a:68:
b2:50:fd:d1:d0:8e:45:11:92:cd:71:b8:dd:72:11:79:f2:43:
17:fa:0c:12:41:ad:8f:f9:90:b2:6e:48:fe:6c:d9:86:4b:ef:
fe:05:62:9e:68:b9:1d:33:ec:1d:06:70:2b:c6:5d:43:e7:fe:
1b:12:23:0a:6b:43:cc:54:fc:01:08:c3:71:23:00:f4:e4:51:
6a:75:6e:6b:62:e2:7d:3b:f9:9b:bd:9a:0e:6c:b4:0f:52:dd:
92:da:fc:9c:ae:ed:96:d0:53:4b:7d:22:1e:4a:aa:4a:bd:62:
a7:80:97:df:4b:29:f4:17:b7:20:b3:09:97:ad:1e:66:22:22:
a1:22:52:c9:fa:e2:a4:1f:d8:7d:db:65:2e:d7:1e:27:fa:72:
b2:00:c7:a9:e1:10:e2:b9:cf:95:5c:ed:c2:e0:d9:a9:e9:ff:
ab:58:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:22:28 2024 by rpki-client on console-fra.rpki-client.org