Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer (raw, json)
Hash identifier: U0ceL3IZyqU5AWv9bUAnfydp9LF9VKJDKjJh8WooVLU=
Subject key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021233
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Oct 2024 12:44:15 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 132859
IP: 103.25.115.0/24
IP: 103.74.216.0/22
IP: 103.194.229.0/24
IP: 103.206.187.0/24
IP: 2407:3280::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135731 (0x21233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 4 12:44:15 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:18:32:3f:c2:dc:06:d0:99:01:b9:d6:2e:
e9:33:46:b0:e1:b0:bf:41:48:a9:5d:97:26:1e:67:
24:eb:3a:04:44:32:e2:54:17:df:71:d2:eb:84:d8:
e5:95:55:53:06:36:1c:bb:a4:0c:c3:62:bd:0a:7e:
f7:d4:60:04:b1:2d:22:d4:00:72:bf:dc:14:49:50:
bc:3b:13:7a:b1:c2:48:4e:39:15:24:da:6d:dd:3d:
25:33:41:69:99:70:a7:98:0e:60:ab:a7:45:9b:68:
aa:ce:da:95:a2:a1:1f:6c:89:ea:73:63:f6:8e:e6:
10:b6:60:f8:af:55:c2:f4:ba:b1:83:b1:24:c3:c3:
90:54:9f:a2:02:4e:67:32:49:fb:0c:f0:d6:15:8c:
fe:cc:37:12:81:9b:1e:bc:db:86:48:52:93:83:ae:
52:14:9b:76:88:46:25:48:6f:23:eb:05:2e:8d:23:
25:f6:d7:6e:78:8d:95:12:88:0c:d3:fb:eb:9f:3f:
b5:fa:8a:60:46:7a:fc:26:8a:ba:c2:c4:f0:d8:36:
7c:e4:96:29:c5:36:6b:77:39:b4:f3:d7:b8:0f:32:
1d:39:a9:c0:b0:b1:6b:da:d9:6c:0d:98:f5:a2:78:
f9:57:a2:21:7b:83:c2:4c:97:2b:24:6b:59:f5:4a:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132859
sbgp-ipAddrBlock: critical
IPv4:
103.25.115.0/24
103.74.216.0/22
103.194.229.0/24
103.206.187.0/24
IPv6:
2407:3280::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b3:15:e2:c1:d8:6c:69:28:56:fa:dc:8a:5c:1e:2d:5e:26:
cf:b0:4c:ea:19:c4:2d:a0:27:61:5f:a0:27:e2:97:c4:5b:63:
53:a3:0f:23:00:03:74:7a:4e:79:c2:95:78:24:12:95:82:56:
b6:a8:97:26:32:16:28:e8:bc:f9:ec:a2:04:af:ed:15:3c:b9:
99:7d:81:e0:1b:8b:0b:c0:01:3a:3d:1d:3b:09:0f:ee:89:d9:
9c:ef:e8:5e:37:44:e2:11:54:9e:69:b0:6b:22:1a:d8:31:9b:
d0:da:a6:ff:7d:32:43:a5:95:d3:45:97:59:1b:fb:7f:13:3e:
9a:cb:da:47:12:62:40:2a:cf:cc:f3:9c:5e:5e:6f:a8:88:25:
ae:6c:a2:98:66:80:79:25:7f:90:2f:dd:6b:56:08:22:ce:8c:
77:30:dd:87:77:e0:0b:ab:02:6b:a5:e0:81:ba:83:6e:8f:73:
84:91:b1:5d:06:ff:5b:6f:af:4b:2e:21:7d:44:78:c5:e1:47:
92:96:69:a3:52:59:be:d5:c1:34:55:ec:ff:81:c0:0f:19:df:
77:4b:47:f8:8a:b2:58:21:f9:15:df:ba:aa:17:99:cb:3b:f2:
c4:c4:14:c4:53:6a:55:24:46:88:ff:b3:80:5e:cc:08:a4:20:
4e:73:88:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:36 2024 by rpki-client on console-fra.rpki-client.org