Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer (raw, json)
Hash identifier: iyIONZ7plJNx6kRqbaBplEDazNcGXdwpq5tovqYIlAo=
Subject key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02043D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Aug 2024 16:25:21 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 133079
IP: 202.36.175.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132157 (0x2043d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 16:25:21 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:67:04:db:89:29:e0:c5:25:b7:19:99:40:
fe:e8:12:88:3d:f3:21:11:7e:3e:5a:42:15:46:d8:
77:56:7e:38:58:d7:70:f8:18:88:c5:6b:1a:fd:43:
2d:ec:f4:2b:c7:39:28:38:04:51:c3:87:b5:59:67:
d5:aa:90:52:21:b8:8b:67:9b:5b:6c:43:c8:f7:ff:
9d:6c:19:be:83:c0:24:2d:f9:3b:03:ed:a6:87:86:
84:42:5d:31:ba:6f:ea:a7:fd:a2:36:c0:7b:1d:ea:
1a:68:08:ce:fc:e4:1b:37:1b:fa:be:e8:91:09:6c:
77:88:6d:c8:44:65:2d:02:e1:dd:b5:c4:87:ba:89:
14:00:ae:9e:6e:cf:bc:93:f7:c0:c1:42:d0:47:4f:
e6:84:f9:3e:d3:47:21:bf:fb:fb:2d:7f:83:9c:78:
27:2c:5a:07:8f:e6:65:55:03:78:ba:37:e9:fd:5d:
99:31:bd:fd:d6:83:a5:ce:17:ad:9b:77:15:6e:f9:
78:78:ea:ad:ad:38:73:34:56:44:78:64:a6:b4:6d:
c0:5a:e9:c9:de:73:b9:b6:ea:7c:70:95:40:43:18:
c0:22:17:bd:99:7b:59:ca:e9:18:a7:86:0a:10:99:
e1:fa:88:1d:07:61:f0:b9:3d:ac:7e:37:09:86:7e:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133079
sbgp-ipAddrBlock: critical
IPv4:
202.36.175.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d1:95:93:b5:9e:ad:b8:3a:ed:0a:b2:f6:a3:4b:78:d8:30:
7a:fb:d3:57:f5:ab:c0:59:d0:1b:71:18:72:49:10:19:68:ab:
5d:1c:33:96:a0:99:c3:ac:3c:05:74:8e:75:8a:a3:f5:33:e9:
07:d4:86:9c:34:3e:03:ff:fe:9d:22:54:29:31:3d:50:e7:92:
bc:1f:10:15:75:2c:41:1f:35:f5:38:45:20:3f:7b:ca:77:e2:
16:99:5b:8f:ef:87:da:ca:79:21:36:1a:b4:38:71:03:22:37:
01:27:21:cc:0e:63:99:1a:8c:00:83:b8:38:3b:11:12:f1:5f:
7c:3a:0f:ed:8b:39:74:6e:ca:be:4d:54:55:18:46:0e:ae:b8:
d8:00:f3:d8:37:ea:a2:f6:f4:99:3d:fc:1b:1d:13:9a:2c:5f:
df:e4:c2:50:11:47:c1:e2:76:50:8d:72:f9:74:9a:94:72:03:
87:05:8f:e4:7d:e8:d9:d0:6e:64:c2:54:8c:90:c3:f9:6a:f3:
76:d0:db:83:85:25:94:7b:4e:80:67:49:03:0d:9e:0c:a8:8c:
b7:07:b0:8f:81:ca:22:04:4a:3b:d6:dc:c9:04:5e:88:6f:3a:
af:7e:8d:dc:f8:a3:1f:af:b1:10:23:de:ff:90:37:d6:59:67:
32:ad:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:49 2024 by rpki-client on console-ams.rpki-client.org