Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
File: ao09a_bbD13jJOQgxXOwqRhDx5Q.cer (raw, json)
Hash identifier: wfb4RGt0FpAmCLafNqDByE9YsBZV96gaOlI6zfnmuFg=
Subject key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C432
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Oct 2023 08:50:00 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 202.137.254.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 06:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115762 (0x1c432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 16 08:50:00 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:0b:43:26:67:99:f7:15:89:98:f8:c9:e5:
8b:7a:1e:82:9d:b1:21:f3:6d:2a:9c:6f:90:ec:6d:
cf:80:34:98:2e:fe:16:10:ea:7b:45:8b:9d:f8:71:
3f:15:f4:f0:f0:5f:c5:fb:e1:71:cd:d5:f3:d3:4d:
71:b1:77:1a:c9:00:b0:2e:96:78:31:9d:14:7e:51:
35:89:8d:4e:83:2f:f1:99:a2:4f:89:0f:27:d4:fe:
6c:c6:c4:0f:d8:fb:ee:ba:53:5f:96:b5:c0:2e:cf:
1f:68:26:71:86:bc:63:b6:c0:81:11:c1:d3:0f:81:
c4:32:d0:7e:74:37:45:71:bb:e2:a2:a1:a0:8c:29:
41:0a:f4:d4:ba:19:39:3e:37:e4:ea:1d:ef:c2:a2:
be:57:94:11:95:85:dd:1c:39:4b:55:39:83:f2:bd:
31:f6:b3:67:ca:98:61:c3:66:ef:90:5e:67:21:30:
13:78:9b:2a:f8:8f:00:0e:3d:15:75:f2:c6:36:d3:
cf:dd:cf:46:e0:bc:28:7b:32:5a:b0:17:b2:79:8b:
1a:44:c9:95:e2:5a:90:a6:73:37:ba:7c:e5:26:45:
24:22:75:af:85:17:08:17:8d:22:dc:73:e0:73:5d:
61:ff:7e:b7:67:b2:c8:dc:28:1b:d8:9c:cf:db:22:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.137.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:b5:ad:dc:81:45:4e:e1:a5:d8:90:8c:a7:25:9b:4a:9d:3a:
6e:ac:08:19:bb:fb:71:a7:8f:ee:a2:be:97:a7:32:5f:89:c2:
ae:7d:19:90:26:83:0f:d6:4e:9f:3f:6d:f2:4a:9e:35:59:70:
f5:f5:ec:c7:c5:4b:99:69:54:44:47:a9:a3:64:3f:b7:4f:3d:
1e:9d:d8:73:64:3c:72:3d:e2:83:ac:82:7e:81:37:f4:7a:f0:
0b:87:26:d7:4d:cd:ef:d6:84:16:f2:69:82:8f:44:11:de:44:
90:85:7c:06:5e:a3:23:29:00:7b:58:f1:9b:9e:c6:f7:5b:7e:
fa:2f:94:48:40:d4:88:5c:37:f0:19:69:a1:f4:eb:3a:dc:86:
6e:7b:1b:92:0c:d5:42:70:6d:27:83:65:0f:60:8c:f3:25:7b:
ce:85:af:67:78:3d:d8:82:e7:a8:d3:f5:7e:8f:41:f7:d5:f3:
eb:2f:0d:ad:54:44:c8:da:37:09:26:9a:45:48:64:04:ed:6f:
3e:80:fb:62:85:32:31:44:7d:2d:2c:fa:dd:55:8c:2c:c2:4e:
78:8f:d7:c5:45:e7:d0:32:fd:ef:cf:0a:4a:b5:1f:e9:07:a5:
72:1f:93:fa:af:d9:dc:df:e7:9e:e5:66:8f:c2:81:27:22:d7:
cc:88:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:03:39 2024 by rpki-client on console-ams.rpki-client.org