Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer
File: ZTiBnzv0kyyggsFGry_qy--HjLg.cer (raw, json)
Hash identifier: 2wlbWn3hiPILzfXL65pfhBLEi/v0icdlaD6o3A1qz+c=
Subject key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DA64
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Jan 2024 08:39:00 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 141438
IP: 203.145.32.0/23
IP: 2001:df3:2640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121444 (0x1da64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 25 08:39:00 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5e:ab:2f:a2:00:71:4e:ad:fb:f3:9e:f5:cf:
06:19:ea:5f:8d:ce:35:03:78:de:81:b5:b1:5a:a5:
a6:88:70:69:2d:dd:e0:cd:05:db:04:fe:55:98:1e:
fd:5f:c6:2a:5a:80:0c:1a:90:62:9b:c1:06:1c:6d:
f6:14:a0:7e:3e:14:b3:65:03:8d:9d:27:7b:81:f7:
2f:14:ab:43:e2:57:48:d0:d8:e9:83:d8:ad:05:c5:
a3:9e:9e:a8:48:5e:66:4b:ba:28:d4:6a:fc:da:b1:
9c:33:99:b5:84:2a:61:f1:0f:dc:55:ac:66:8a:28:
14:01:45:ed:d5:21:6e:4a:87:00:f7:49:ee:7a:8e:
c3:cb:48:8d:44:6a:02:70:3a:f1:bd:58:f3:6d:36:
68:16:d4:51:97:58:11:04:d4:d4:18:25:42:45:56:
42:20:e0:14:f2:cb:53:a4:56:05:10:97:1b:90:bc:
49:88:e9:31:56:0b:2f:96:83:81:c5:26:ec:3b:a5:
c3:93:4e:f9:1f:89:bb:9e:20:0a:fa:34:83:ef:77:
c5:bb:99:1d:cf:80:51:de:0c:dc:ff:98:db:0d:89:
0f:8a:8e:bc:57:2e:be:7f:ab:5d:cb:dc:f7:39:09:
a6:29:0d:e9:fb:35:9c:74:a6:ca:69:d5:59:16:84:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141438
sbgp-ipAddrBlock: critical
IPv4:
203.145.32.0/23
IPv6:
2001:df3:2640::/48
Signature Algorithm: sha256WithRSAEncryption
38:c0:16:b7:4f:9c:e8:39:56:e4:37:fa:e2:59:3d:27:10:c9:
a4:2e:df:1e:99:78:0d:41:7a:81:53:7c:93:36:a4:7d:0d:3f:
88:93:7f:76:fd:81:09:8d:5c:8a:a6:ab:21:0f:91:37:de:39:
cb:48:47:e6:5c:18:b4:5b:66:62:da:b5:d9:dc:06:fb:20:c2:
09:2f:a0:40:f5:a1:0f:cb:ad:80:a3:89:c8:5c:fa:0e:55:7c:
7e:65:a8:b0:d3:48:60:96:2b:49:27:47:ad:4c:27:58:48:1d:
cd:da:e4:7a:8f:5a:98:69:f1:c6:32:92:13:fc:31:0b:9d:d0:
d7:c3:b1:7e:ae:95:9b:08:4c:51:0c:d7:88:57:e1:ef:9f:62:
73:27:2c:09:20:ed:ea:a5:12:3a:c1:36:fd:57:c5:e3:ad:c5:
c3:6d:42:a7:eb:a2:e6:27:d3:39:c2:ed:f0:a3:eb:fa:74:96:
95:92:61:62:54:7f:0c:d9:33:19:bc:f7:a6:74:ad:37:15:50:
78:1d:66:27:28:b8:f9:a0:f2:a9:f9:f6:3d:0f:a2:44:80:ca:
08:8d:8c:07:d9:00:cc:07:15:c6:e8:2f:2a:3c:e5:47:bc:04:
b4:d6:b1:df:22:cc:e1:00:fe:8b:de:bf:d5:e2:8b:0e:fc:08:
ff:34:7f:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 06:14:18 2024 by rpki-client on console-fra.rpki-client.org