Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.cer (raw, json)
Hash identifier: tNwjZNsuU+lGoHP7bpzsUWZrxx/QLrPmkAwwPNQBhJo=
Subject key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EA5A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 07 Apr 2024 19:58:49 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 17666
IP: 43.246.164.0/22
IP: 103.35.136.0/22
IP: 111.67.32.0/20
IP: 202.9.96.0/20
IP: 202.87.96.0/19
IP: 2401:200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125530 (0x1ea5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 7 19:58:49 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91CEBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:12:36:1d:a4:9f:65:f0:60:9b:cf:40:97:
bf:83:26:8a:9b:d0:8b:8b:b1:65:95:e5:c2:7b:6b:
9c:c3:dc:14:01:5e:07:7e:e2:45:b7:d7:31:5e:0c:
70:6e:d3:2f:ec:61:f1:c0:17:d1:7e:66:72:1e:7e:
05:0d:f2:3c:97:5b:d6:ac:74:3c:48:22:59:5e:5c:
9b:41:2f:42:55:9c:55:dc:a3:a5:17:d6:a7:5a:83:
97:25:9a:b9:59:5d:74:52:bb:0c:6a:7a:30:67:4a:
03:99:5e:15:d3:d1:2e:29:bd:b4:d0:5c:d9:8b:fc:
a5:75:24:86:4c:64:9e:cf:a6:1d:43:e9:57:5a:c5:
27:01:9d:e0:90:f1:53:1e:e5:4d:1a:30:fa:80:27:
98:0a:5a:b8:49:2a:ff:37:53:c9:3b:01:d5:52:d5:
19:8b:1b:b8:79:be:f4:44:a1:03:ac:b8:d7:9a:bc:
cf:d3:46:bb:5d:e2:77:a0:4a:a7:d2:3f:51:bc:b8:
8c:21:09:f9:e8:8b:a5:91:66:db:37:54:48:f8:5e:
7f:84:3b:19:7b:bc:2c:2c:ef:ed:72:88:24:8c:d0:
12:07:00:31:72:34:8f:cf:ba:e4:b9:2b:9c:b9:05:
94:dc:f9:c4:1f:c8:28:fa:4d:6d:a6:ea:50:ec:fd:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17666
sbgp-ipAddrBlock: critical
IPv4:
43.246.164.0/22
103.35.136.0/22
111.67.32.0/20
202.9.96.0/20
202.87.96.0/19
IPv6:
2401:200::/32
Signature Algorithm: sha256WithRSAEncryption
41:cc:c9:24:af:08:7d:34:19:22:9d:84:ab:2f:07:56:f7:db:
f6:d2:3c:21:ed:55:46:38:cc:85:10:86:ae:c4:e0:42:32:39:
10:5d:76:4b:21:3e:6f:34:7d:16:8f:4a:b5:2b:f0:c0:f2:21:
9b:a1:f8:39:74:43:2e:36:57:bc:be:ee:b8:5d:ee:52:22:c3:
e3:f8:9d:b1:10:43:5f:79:e9:f7:3b:cd:1a:25:31:0f:a4:55:
46:57:81:20:cb:bb:54:4e:ed:cd:a7:07:81:37:2f:30:ac:38:
4a:ee:1a:0c:83:f0:43:eb:df:a1:54:94:68:77:a9:75:1d:cf:
4a:15:df:d8:48:f1:af:04:b5:20:d0:34:40:5c:0e:a5:17:8b:
0e:2c:45:87:06:ff:b0:4e:d8:6c:8d:39:e7:e0:5f:86:d8:61:
72:07:93:a1:14:6f:31:ee:02:f3:72:6a:88:01:ee:dd:7b:96:
9a:bc:39:c2:37:f6:88:a8:99:6b:ca:5e:45:0d:bc:ff:fd:20:
8b:eb:96:d6:c9:86:b4:c9:98:98:1f:db:85:6d:fe:a9:f5:14:
6b:69:5e:c7:96:fa:ad:57:5f:e8:f8:dc:1a:cb:ea:26:9c:db:
db:f9:58:72:e5:f0:18:b9:bf:ad:e9:d0:02:d0:1c:bd:44:3c:
9d:17:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:59 2025 by rpki-client