Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer
File: _RYHGGNz6B9E0TeyoOlpV-YquKE.cer (raw, json)
Hash identifier: cQjfK48J3Nob/WmNWnvxiilP3FDc3R6/IWt/IAEM5H8=
Subject key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02048C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Aug 2024 15:12:54 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 59318
AS: 131207
AS: 135295
AS: 135429
AS: 136583
AS: 138010
IP: 43.245.200.0/22
IP: 103.14.248.0/22
IP: 180.178.124.0/22
IP: 203.217.168.0/22
IP: 2404:b300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132236 (0x2048c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Aug 2 15:12:54 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91EA958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:93:7f:d2:9d:c3:5e:60:52:96:53:59:b5:
1e:32:fa:e2:8b:e1:82:ab:59:d7:35:bf:0e:9b:8d:
6b:3a:a6:a1:bd:ea:16:31:60:32:0f:d8:3c:43:15:
45:47:d8:a3:d3:ba:9a:0f:e8:5b:c1:11:30:27:20:
86:ac:3e:62:a6:e9:5b:17:31:5a:79:e9:62:6e:0e:
d4:47:a5:a9:5c:98:1c:a0:99:35:98:d4:a8:2d:43:
18:4e:6e:55:68:8c:1d:90:49:5c:06:76:5b:76:b6:
b9:a5:b2:4e:56:01:3d:c3:a9:29:d5:9d:55:ca:ec:
7d:a1:f2:3b:a9:a4:7b:3a:26:00:77:86:44:1a:bf:
e3:42:10:da:57:70:d5:9c:83:7b:d0:4c:23:03:fd:
84:f0:b6:35:c3:dc:8c:66:77:2f:39:62:30:89:fd:
de:8c:45:3d:66:75:f2:6a:3c:a7:6d:de:a3:6e:2f:
4a:76:c7:c4:40:d2:69:0e:61:2a:aa:be:b9:1f:34:
13:f5:c5:08:f3:08:3a:1a:67:c7:0b:3b:5a:f0:08:
63:03:a6:40:b0:c6:ba:97:eb:9b:52:8b:53:57:e8:
8a:b6:b2:45:9c:8e:c7:ec:7f:9e:28:ef:d9:13:1d:
1b:39:aa:b8:d7:9c:10:58:41:ee:ee:56:62:eb:21:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59318
131207
135295
135429
136583
138010
sbgp-ipAddrBlock: critical
IPv4:
43.245.200.0/22
103.14.248.0/22
180.178.124.0/22
203.217.168.0/22
IPv6:
2404:b300::/32
Signature Algorithm: sha256WithRSAEncryption
02:23:61:1b:48:ce:9f:2f:2e:84:95:85:93:cd:fb:fa:ca:7e:
f0:b3:26:d9:50:23:9f:a8:39:48:3a:0c:5c:f5:3e:cd:0b:0f:
0e:5f:d7:92:3c:18:9b:74:73:7d:fc:06:68:e8:fe:ce:b1:81:
e3:17:25:5e:ba:64:1c:f7:07:22:ef:da:b5:7e:e0:63:0a:10:
ae:d1:ba:4c:8e:35:a1:bd:19:a8:f3:a9:ac:5e:65:4f:9c:c7:
f4:fc:40:2a:5f:59:a9:ea:db:0a:dd:54:c4:70:33:02:37:da:
bd:62:0c:14:3f:b3:ea:0e:fa:4a:45:ca:b0:26:21:89:a5:ec:
a3:c5:9b:ec:c4:57:25:39:df:f0:28:05:17:9e:f7:90:74:cd:
51:25:72:46:0a:e4:54:18:31:d2:79:15:c1:6e:33:08:27:11:
20:63:3f:cc:a4:40:22:f3:c5:d9:71:62:9e:e0:b7:f5:7a:1a:
b7:2b:9f:f0:c6:a2:23:07:e7:bc:63:22:e1:ad:2a:69:5a:96:
f2:43:63:bd:87:7e:bd:02:8a:4f:11:8a:7a:0f:3e:19:31:ea:
17:a1:77:2e:06:b2:f5:20:4f:1d:27:4a:d1:86:92:0d:c7:7d:
4b:1a:11:8f:0e:4c:20:37:44:de:57:b0:00:0f:7e:a9:e1:34:
e8:db:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:57 2025 by rpki-client