Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer
File: ZmruIMmoyx9DEkGPHiBXqoprxPs.cer (raw, json)
Hash identifier: 13FpRnOMbddLl4NnBVFbd02vpD8dtxNujZgUqXyRajs=
Subject key identifier: 66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DFF3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 Feb 2024 21:54:21 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 138352
IP: 103.180.10.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122867 (0x1dff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 20 21:54:21 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:b8:31:96:98:0f:20:ce:6c:1d:29:54:9c:
1f:be:53:75:82:49:b4:7b:5d:cc:9f:f7:38:bd:ab:
88:c7:88:df:5c:d3:29:4f:66:64:e8:a0:52:54:d8:
c6:ca:3f:47:fb:6f:b7:66:da:27:44:96:57:98:aa:
a0:21:8e:03:25:61:11:d6:96:9d:0a:6c:d0:ac:40:
28:9e:3b:a8:48:5c:03:eb:64:52:05:e6:ac:6d:8d:
c1:14:e7:cf:36:57:34:56:d0:a0:8d:71:64:49:c1:
25:08:58:1e:a1:6e:75:20:17:46:b7:88:e7:c8:2d:
c2:ac:0a:ca:5c:68:23:9e:b1:9d:fb:d2:e4:54:17:
68:3d:e4:b5:3d:bf:e9:ba:20:d0:f2:f3:04:8a:69:
93:06:ca:98:54:c4:85:37:8d:6e:c5:e4:16:71:b1:
3f:5c:df:e0:32:95:cf:6f:f8:10:bc:9d:88:a5:99:
4a:af:41:85:32:4a:89:cd:8a:44:d6:9e:b4:2e:56:
4f:ab:4b:e6:77:d6:57:21:a1:df:5c:68:06:b1:c0:
ab:c5:03:dc:38:9e:ad:0c:b9:04:66:bc:01:8f:a4:
f5:54:69:30:10:bd:c6:a8:db:aa:55:7e:17:17:fd:
0f:5a:10:ef:2b:44:9a:26:c3:79:83:fc:cc:49:50:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138352
sbgp-ipAddrBlock: critical
IPv4:
103.180.10.0/23
Signature Algorithm: sha256WithRSAEncryption
be:9f:12:8d:a1:82:dc:d2:1e:05:16:6a:9d:fa:00:be:fe:3c:
ff:03:db:cc:e6:e6:b6:d4:78:81:60:f6:09:5c:59:0d:77:84:
20:b7:ec:71:90:88:20:74:b1:0d:30:af:5d:e8:6c:8a:a8:3b:
97:f9:26:72:e2:a4:6e:ac:73:5d:30:e8:ca:33:1f:36:51:e1:
72:db:98:cc:f3:cd:94:1a:4b:62:be:70:6f:90:2c:70:7e:de:
68:2b:16:f5:ae:e2:7c:b9:10:2a:f8:11:38:3b:61:ce:9b:8d:
b3:3b:63:5e:cb:17:12:96:2a:3d:1d:cd:da:be:c8:35:81:be:
93:5c:28:cb:50:42:16:c1:c9:3f:20:bb:9e:ca:5f:d7:19:49:
cd:a4:ee:ee:1b:8b:f4:d7:59:4c:39:e7:33:88:2b:55:db:34:
36:ef:eb:71:fb:fb:2f:31:f2:e9:43:4b:22:29:53:2e:75:94:
b8:da:87:5e:96:38:46:60:af:eb:2c:bd:17:43:22:5d:00:11:
aa:b4:55:25:aa:82:73:f5:19:d4:d2:36:63:58:76:a2:f1:6b:
c2:42:77:94:32:96:f1:e0:77:90:a0:3d:d2:d2:90:a9:e6:86:
1e:c5:94:3c:3b:b2:f7:19:f1:1f:69:60:d7:19:67:0d:03:90:
95:7e:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:07:55 2024 by rpki-client on console-ams.rpki-client.org