Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.cer (raw, json)
Hash identifier: jl/4ghg8G/gHW+XEdNO/nzscPVQq03FRjFeif9lZ0VI=
Subject key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EF76
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 May 2024 13:01:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 9280
AS: 17462
AS: 18345
AS: 23670
AS: 24113
AS: 24238
AS: 45261
AS: 45425
AS: 45671
AS: 56225
AS: 131229
AS: 132324
IP: 27.50.64.0/19
IP: 27.111.80.0/24
IP: 27.111.85.0/24
IP: 27.111.87.0/24
IP: 27.111.90.0/23
IP: 43.242.68.0/22
IP: 43.250.204.0/22
IP: 45.65.12.0/24
IP: 103.2.196.0/22
IP: 103.11.52.0/22
IP: 103.12.8.0 -- 103.12.10.255
IP: 103.13.100.0/22
IP: 103.13.186.0/23
IP: 103.24.14.0/24
IP: 103.227.28.0/22
IP: 103.235.52.0/22
IP: 103.248.189.0 -- 103.248.191.255
IP: 103.255.249.0/24
IP: 114.141.192.0 -- 114.141.203.255
IP: 117.20.0.0/20
IP: 117.120.8.0/21
IP: 118.127.0.0/18
IP: 163.53.232.0/22
IP: 180.92.192.0/21
IP: 202.51.160.0/20
IP: 202.60.64.0/19
IP: 202.125.32.0/20
IP: 202.130.32.0/22
IP: 202.131.88.0 -- 202.131.94.255
IP: 203.26.196.0/22
IP: 203.28.51.0/24
IP: 203.56.250.0/24
IP: 203.88.104.0/22
IP: 221.121.128.0/19
IP: 223.252.0.0/18
IP: 223.252.96.0/20
IP: 2400:8100::/32
IP: 2400:d400::/32
IP: 2403:b800::/32
IP: 2404:5300::/32
IP: 2405:1000::/32
IP: 2407:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126838 (0x1ef76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 13:01:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:d8:2f:ef:02:0c:ca:69:b2:a7:c1:2a:25:
ec:2e:58:4f:36:d2:a6:0d:50:a1:61:3a:6a:65:54:
18:2a:bb:ea:98:4d:5f:17:8a:3b:95:74:36:ef:c7:
06:77:22:b2:a8:d4:72:99:bd:83:12:0b:1f:9f:85:
b7:4e:0f:4a:22:a2:a3:59:2f:ee:f1:ad:51:41:16:
0a:ca:8c:8e:61:88:de:6e:71:ed:ba:ce:ba:c6:c2:
16:0e:24:74:e2:6e:be:fc:77:c5:9b:ec:e1:36:50:
e8:17:d1:ec:73:7d:06:6b:ba:e5:94:a0:28:ce:db:
5a:95:94:b5:24:69:7d:d1:6a:17:fe:9f:85:0e:8c:
f9:56:e5:d3:22:db:06:63:99:51:97:8e:35:6a:78:
4b:27:54:92:f2:ab:32:fa:8d:f5:f8:72:05:74:47:
be:b6:67:8d:97:12:70:f6:1b:f0:3e:3e:e2:35:b6:
24:ae:cb:a7:84:de:4b:06:a1:9d:95:2a:e3:05:4b:
fa:90:b2:90:57:3b:73:03:9e:57:af:cd:21:53:ce:
47:58:27:e0:e4:49:b8:1b:ec:36:25:48:29:c5:8d:
5e:cb:73:95:f8:7e:52:40:39:14:fd:cd:de:86:f2:
f0:a3:f8:27:2c:eb:ee:1e:45:cb:9e:64:fc:e0:ab:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9280
17462
18345
23670
24113
24238
45261
45425
45671
56225
131229
132324
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.51.160.0/20
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
203.56.250.0/24
203.88.104.0/22
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400::/32
2403:b800::/32
2404:5300::/32
2405:1000::/32
2407:2200::/32
Signature Algorithm: sha256WithRSAEncryption
a0:66:55:e9:cf:3f:94:67:04:40:2d:07:87:c6:b8:72:fb:ce:
2c:4c:f9:3d:5a:78:c6:49:83:24:c8:39:98:1e:06:d4:5b:b3:
bf:3a:15:28:44:87:78:7f:db:16:56:cf:64:15:0b:56:c2:27:
9e:a4:b6:ca:5d:f9:44:36:de:c6:30:50:de:6c:30:ad:8c:5f:
a1:a2:07:4f:59:8f:ac:ea:e7:99:04:81:1c:cd:4b:86:be:d8:
34:79:a6:c6:96:5c:ce:d6:a0:1a:99:8a:00:ad:07:b1:70:92:
9a:64:b5:45:e6:7e:bc:b6:7f:3c:45:32:21:80:03:e9:1d:14:
4c:6a:3d:94:f1:f2:93:ec:d3:76:fa:a8:65:61:d0:be:cf:5a:
a7:e7:0f:81:b6:a7:55:f7:4c:9c:7a:bd:75:4c:eb:e6:0e:9f:
29:ed:6f:50:b3:cd:6f:5c:7b:a4:79:58:0a:e9:f8:d2:15:ae:
36:ba:ca:bf:ff:17:00:6f:ae:f1:f5:26:7a:ce:f8:15:65:97:
de:01:e6:94:6e:b3:af:28:3e:ac:b3:ee:1c:04:30:29:11:d8:
32:6b:38:a7:f1:9d:78:87:45:dc:ae:f8:c0:47:1b:b3:4a:d2:
92:ba:00:ad:b0:f0:b1:3b:16:e6:b5:79:4b:c7:14:3f:02:6b:
e3:0e:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:58:53 2024 by rpki-client on console-fra.rpki-client.org