Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
File: aFlbmOTCezC6ozHOqscmF2fLkus.cer (raw, json)
Hash identifier: FQgtwM0HXcTDWbspVaa2joH8PY4xKANf+twW2YBXpLo=
Subject key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A7CA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Jun 2023 12:47:33 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 24541
AS: 58740
IP: 27.54.128.0/20
IP: 202.164.16.0/21
IP: 203.30.44.0/22
IP: 203.82.208.0/21
IP: 2402:8000::/32
IP: 2402:9f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108490 (0x1a7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 12:47:33 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:e6:9d:5b:6f:60:99:13:1e:be:d6:a4:94:
3f:9e:19:88:5f:45:dd:70:d5:34:da:06:6a:6f:6f:
70:c2:ef:cb:f1:58:35:fb:f4:ab:f3:bb:64:f4:e5:
53:04:55:7c:e3:12:30:9f:f2:a0:d3:a0:94:b1:49:
87:19:c5:08:39:a1:ac:18:be:a7:51:67:df:41:7e:
6b:74:e5:25:76:81:7a:30:84:e5:f7:fc:63:cf:8b:
6e:5b:12:ed:be:2d:39:24:0e:19:30:2e:d0:b3:2f:
00:ab:3e:3e:5b:33:84:ef:b2:6e:82:2c:ff:5d:ae:
67:75:1b:c6:9b:75:56:43:82:97:2c:27:9a:e5:4c:
9a:58:97:5b:bd:d7:b7:6e:72:13:96:74:44:7c:98:
c3:de:5a:3b:a0:66:77:58:c6:04:b7:8b:fa:30:e4:
ac:74:4b:7c:ee:6c:db:d8:37:b5:ff:48:35:67:d6:
27:ee:23:21:38:f3:7d:9b:ac:80:b3:83:67:8a:5a:
4b:08:b9:9e:cd:c9:5d:7b:23:67:30:3b:67:b6:84:
d2:e1:fa:55:06:23:a3:ce:93:a6:c8:b6:7b:9e:7c:
d3:1e:86:b6:f1:54:85:a4:31:05:71:15:87:cc:e3:
4b:0f:07:c3:70:77:a4:08:be:a5:b9:0a:04:4a:a5:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24541
58740
sbgp-ipAddrBlock: critical
IPv4:
27.54.128.0/20
202.164.16.0/21
203.30.44.0/22
203.82.208.0/21
IPv6:
2402:8000::/32
2402:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
bf:d1:ae:c6:74:53:52:1c:1d:79:58:93:63:0f:ed:36:03:ee:
14:a3:57:05:c5:be:84:79:2d:a4:33:b0:d2:e4:bf:d3:a2:da:
0c:ea:0b:d2:af:37:42:47:83:01:23:3b:8a:e6:69:9b:f3:4b:
c0:ff:f0:2f:af:d8:9f:1b:6b:9c:83:40:51:2f:1c:a3:82:63:
25:e9:aa:7b:55:61:da:a1:59:c0:54:ac:58:89:9f:9c:47:92:
49:10:78:22:25:5c:91:88:ff:bb:4f:7d:ec:56:cc:87:dd:28:
44:a8:af:46:7d:f7:fe:c3:77:09:c2:23:a0:5b:a7:bb:5a:80:
7d:89:6b:87:ce:1c:59:43:27:c4:72:66:67:f2:15:53:90:09:
39:82:3d:eb:8f:e8:99:52:6d:fe:07:e0:c9:d7:0c:db:e4:b6:
80:53:34:05:87:fa:f7:da:b2:83:92:92:68:a4:14:f9:f8:18:
00:e7:0c:53:64:2e:4d:8b:e5:5f:dc:d2:23:28:71:b7:d1:58:
40:f1:01:67:4b:dc:2c:6d:61:f6:b2:63:6f:08:04:5b:08:b1:
87:91:7a:f7:4b:8b:ba:e9:d2:34:c6:af:4d:9a:71:50:f0:5b:
f0:de:c2:30:68:be:61:0a:e7:c0:b5:af:ec:55:a0:14:47:54:
3e:56:a8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:47:58 2024 by rpki-client on console-fra.rpki-client.org