Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.cer (raw, json)
Hash identifier: reeZYELRXiEPs8PxIl+4sTkIOBqq7zu4X4+77s+JBio=
Subject key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0195C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Apr 2023 12:48:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 9280
AS: 17462
AS: 18345
AS: 23670
AS: 24113
AS: 24238
AS: 45261
AS: 45425
AS: 45671
AS: 56225
AS: 131229
AS: 132324
IP: 27.50.64.0/19
IP: 27.111.80.0/24
IP: 27.111.85.0/24
IP: 27.111.87.0/24
IP: 27.111.90.0/23
IP: 43.242.68.0/22
IP: 43.250.204.0/22
IP: 45.65.12.0/24
IP: 103.2.196.0/22
IP: 103.11.52.0/22
IP: 103.12.8.0 -- 103.12.10.255
IP: 103.13.100.0/22
IP: 103.13.186.0/23
IP: 103.24.14.0/24
IP: 103.227.28.0/22
IP: 103.235.52.0/22
IP: 103.248.189.0 -- 103.248.191.255
IP: 103.255.249.0/24
IP: 114.141.192.0 -- 114.141.203.255
IP: 117.20.0.0/20
IP: 117.120.8.0/21
IP: 118.127.0.0/18
IP: 163.53.232.0/22
IP: 180.92.192.0/21
IP: 202.51.160.0/20
IP: 202.60.64.0/19
IP: 202.125.32.0/20
IP: 202.130.32.0/22
IP: 202.131.88.0 -- 202.131.94.255
IP: 203.26.196.0/22
IP: 203.28.51.0/24
IP: 203.56.250.0/24
IP: 203.88.104.0/22
IP: 221.121.128.0/19
IP: 223.252.0.0/18
IP: 223.252.96.0/20
IP: 2400:8100::/32
IP: 2400:d400::/32
IP: 2403:b800::/32
IP: 2404:5300::/32
IP: 2405:1000::/32
IP: 2407:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103876 (0x195c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 3 12:48:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:d8:2f:ef:02:0c:ca:69:b2:a7:c1:2a:25:
ec:2e:58:4f:36:d2:a6:0d:50:a1:61:3a:6a:65:54:
18:2a:bb:ea:98:4d:5f:17:8a:3b:95:74:36:ef:c7:
06:77:22:b2:a8:d4:72:99:bd:83:12:0b:1f:9f:85:
b7:4e:0f:4a:22:a2:a3:59:2f:ee:f1:ad:51:41:16:
0a:ca:8c:8e:61:88:de:6e:71:ed:ba:ce:ba:c6:c2:
16:0e:24:74:e2:6e:be:fc:77:c5:9b:ec:e1:36:50:
e8:17:d1:ec:73:7d:06:6b:ba:e5:94:a0:28:ce:db:
5a:95:94:b5:24:69:7d:d1:6a:17:fe:9f:85:0e:8c:
f9:56:e5:d3:22:db:06:63:99:51:97:8e:35:6a:78:
4b:27:54:92:f2:ab:32:fa:8d:f5:f8:72:05:74:47:
be:b6:67:8d:97:12:70:f6:1b:f0:3e:3e:e2:35:b6:
24:ae:cb:a7:84:de:4b:06:a1:9d:95:2a:e3:05:4b:
fa:90:b2:90:57:3b:73:03:9e:57:af:cd:21:53:ce:
47:58:27:e0:e4:49:b8:1b:ec:36:25:48:29:c5:8d:
5e:cb:73:95:f8:7e:52:40:39:14:fd:cd:de:86:f2:
f0:a3:f8:27:2c:eb:ee:1e:45:cb:9e:64:fc:e0:ab:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9280
17462
18345
23670
24113
24238
45261
45425
45671
56225
131229
132324
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.51.160.0/20
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
203.56.250.0/24
203.88.104.0/22
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400::/32
2403:b800::/32
2404:5300::/32
2405:1000::/32
2407:2200::/32
Signature Algorithm: sha256WithRSAEncryption
d3:91:52:9c:3d:01:a0:71:71:92:46:9e:3b:16:0a:6a:51:bb:
d8:82:00:b3:65:8d:a6:9e:a9:ce:cf:64:3e:57:19:5a:f1:c7:
e3:3e:48:57:2e:de:20:94:9b:94:38:83:66:8d:98:ec:e1:69:
ad:c3:95:9d:b6:af:ae:dd:aa:52:43:f4:e7:5a:9d:97:e4:48:
03:98:e9:28:55:c3:57:82:12:7b:69:af:ad:e3:08:4f:b0:af:
4c:0a:92:4c:6a:f8:27:90:e8:57:13:df:22:3d:f0:a4:79:44:
54:e6:2d:35:b0:ed:7b:38:4d:41:e1:51:40:0d:13:f2:cb:cf:
14:86:71:dc:19:28:85:2f:bf:78:19:36:75:dc:df:d4:08:1c:
f7:79:a5:ee:a9:37:e4:da:b4:33:11:d5:a3:d7:8b:55:45:93:
11:d8:48:4f:c0:88:08:f0:2b:65:77:05:6f:8a:48:cc:0c:e8:
1e:73:4b:2b:54:dd:c2:1b:9c:7d:96:c4:ff:81:6e:04:bb:8f:
f4:ac:79:d3:37:c7:74:f9:6c:af:75:ac:79:96:d1:ed:02:b8:
7e:1e:80:af:04:53:f9:ec:66:ca:c4:8b:80:54:9a:83:9e:8b:
b7:c4:da:12:f3:e3:f9:f8:68:22:98:43:22:f2:21:f8:a1:8f:
ba:58:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:28 2024 by rpki-client on console-fra.rpki-client.org