Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
File: ao09a_bbD13jJOQgxXOwqRhDx5Q.cer (raw, json)
Hash identifier: ldvSqeVy3YJE0nfWBckRnQe8U7jCWj1184gt3EiCqt0=
Subject key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021915
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 12:43:14 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 202.137.254.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137493 (0x21915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 5 12:43:14 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A911A108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:0b:43:26:67:99:f7:15:89:98:f8:c9:e5:
8b:7a:1e:82:9d:b1:21:f3:6d:2a:9c:6f:90:ec:6d:
cf:80:34:98:2e:fe:16:10:ea:7b:45:8b:9d:f8:71:
3f:15:f4:f0:f0:5f:c5:fb:e1:71:cd:d5:f3:d3:4d:
71:b1:77:1a:c9:00:b0:2e:96:78:31:9d:14:7e:51:
35:89:8d:4e:83:2f:f1:99:a2:4f:89:0f:27:d4:fe:
6c:c6:c4:0f:d8:fb:ee:ba:53:5f:96:b5:c0:2e:cf:
1f:68:26:71:86:bc:63:b6:c0:81:11:c1:d3:0f:81:
c4:32:d0:7e:74:37:45:71:bb:e2:a2:a1:a0:8c:29:
41:0a:f4:d4:ba:19:39:3e:37:e4:ea:1d:ef:c2:a2:
be:57:94:11:95:85:dd:1c:39:4b:55:39:83:f2:bd:
31:f6:b3:67:ca:98:61:c3:66:ef:90:5e:67:21:30:
13:78:9b:2a:f8:8f:00:0e:3d:15:75:f2:c6:36:d3:
cf:dd:cf:46:e0:bc:28:7b:32:5a:b0:17:b2:79:8b:
1a:44:c9:95:e2:5a:90:a6:73:37:ba:7c:e5:26:45:
24:22:75:af:85:17:08:17:8d:22:dc:73:e0:73:5d:
61:ff:7e:b7:67:b2:c8:dc:28:1b:d8:9c:cf:db:22:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.137.254.0/23
Signature Algorithm: sha256WithRSAEncryption
19:13:88:ef:46:8e:c0:64:cc:1f:0b:63:b7:ad:17:78:86:64:
2f:9e:88:44:b0:ed:03:f8:f4:cd:54:0f:8f:29:b1:b3:df:ef:
10:c3:68:1d:46:b1:9d:02:25:99:ae:ad:35:10:94:1b:74:ad:
ee:fd:74:70:eb:c4:5b:9a:c1:8c:81:5d:87:cf:b9:54:c9:3c:
08:84:4f:fc:4d:37:2d:5f:0e:10:0e:df:97:b2:75:90:64:10:
8a:e0:76:28:99:68:9e:91:fd:db:2e:10:07:68:dc:d0:b8:48:
11:28:7d:91:f4:5f:45:c2:d9:95:b2:af:0f:77:2e:78:ea:d0:
ae:bc:7d:5c:81:0d:b2:f2:48:5a:3a:5c:a1:09:cb:bd:e4:15:
e2:84:d2:8e:52:e9:f1:b7:eb:ee:25:46:a6:14:0a:e0:a4:63:
97:b8:d3:40:1c:26:96:71:ed:1f:d2:6a:5d:73:af:47:02:86:
98:82:aa:d2:2a:39:64:ea:02:97:1c:9e:1c:58:0f:2c:45:c6:
c8:8a:10:f1:c7:5f:7c:0f:69:d5:df:46:ac:2b:9c:bb:76:06:
a9:83:d7:80:71:c2:19:7c:12:83:38:0d:6d:ad:aa:3f:65:ac:
78:89:2f:f3:36:f6:8d:85:63:55:81:d4:b9:74:21:8d:cd:6f:
04:40:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:41 2025 by rpki-client