Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer (raw, json)
Hash identifier: 1JjA5mWAWeoYOPpgIXfbTf2vEJJsz5F2f6UptVNDhDg=
Subject key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020EE1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Sep 2024 04:38:00 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 38175
AS: 38194
AS: 38206
AS: 38208
AS: 133086
AS: 138009
IP: 103.10.57.0/24
IP: 103.119.232.0/22
IP: 103.163.20.0/24
IP: 2001:deb:c000::/47
IP: 2403:4ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134881 (0x20ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 23 04:38:00 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:3c:37:7c:a0:ac:11:fb:09:26:72:05:a1:
c5:47:11:da:31:11:9b:89:59:b0:2f:61:0e:26:3d:
52:e3:b6:5c:f4:57:a6:34:6a:96:7f:19:ae:97:a4:
35:77:c9:67:69:03:83:98:b0:0b:9d:06:52:88:b5:
04:62:e2:1b:9b:77:8c:7b:12:b2:03:9f:d9:47:a1:
6b:12:92:2b:39:db:02:0a:f8:72:27:52:34:48:76:
62:4c:8a:4e:db:8d:21:ab:37:85:cd:a9:3e:fa:4c:
58:a7:80:fc:28:5a:ec:12:3d:9e:fa:8b:69:bd:7e:
68:c9:8a:18:fc:f3:5e:2f:88:4a:4d:00:f2:00:e6:
e7:de:15:c5:76:97:f4:24:a8:bb:64:d7:e7:8b:73:
dd:8e:76:74:f0:dd:ca:a0:2e:20:be:fa:49:0a:7e:
bc:64:0a:16:cd:46:84:2e:b6:3c:4a:6c:e1:cc:26:
59:30:76:2b:c1:15:6e:f5:c3:e2:ef:78:b0:db:41:
20:a6:e1:4c:55:7c:93:da:19:d6:9f:da:bc:66:f7:
fa:4e:ab:2a:2f:1e:ea:2f:b3:51:1b:f7:13:29:c9:
6e:f7:a6:dc:b7:8e:e7:a6:06:2f:2b:a6:38:db:c1:
89:75:32:a9:76:df:5b:0e:b0:5e:cb:0b:74:7e:66:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38175
38194
38206
38208
133086
138009
sbgp-ipAddrBlock: critical
IPv4:
103.10.57.0/24
103.119.232.0/22
103.163.20.0/24
IPv6:
2001:deb:c000::/47
2403:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
14:e7:dd:d4:10:7a:ff:4e:b8:64:90:e1:0c:73:3e:c6:cb:20:
ff:11:7d:03:4a:59:f0:cf:9f:c6:0e:4d:2e:d2:f9:f4:92:13:
90:bc:f2:35:c5:73:c7:b5:71:a5:35:a1:ee:1f:90:a1:39:04:
64:4a:6f:bf:d1:d8:04:96:c6:db:37:d6:69:00:c4:0d:8e:fb:
5f:35:a4:5b:da:4d:9f:29:a4:36:f1:ad:8d:4c:9f:72:30:24:
44:47:f0:c3:c4:e5:6c:a2:b7:72:a0:b0:1a:fa:3d:5f:cb:a9:
f1:60:7b:fc:75:37:11:5f:6c:de:b5:25:fd:f1:e2:a2:85:d8:
a4:56:6e:90:73:e5:cd:1f:29:20:b5:b9:30:f9:5f:fd:32:16:
ee:90:0a:a7:90:72:c5:05:64:10:e3:e0:b0:11:38:7c:72:b5:
07:33:da:01:d2:1d:43:83:28:c8:25:ea:c5:56:bc:74:4a:5c:
5b:7a:2f:c1:ca:b0:93:8e:ea:c0:c1:f7:3e:ac:33:cf:6b:28:
c8:d5:b2:88:7e:ef:63:fb:69:9d:71:e1:c3:95:c8:17:0e:97:
16:1c:95:b6:db:60:5a:f7:0d:22:23:94:ab:9b:a4:a6:d8:aa:
6b:b8:7a:03:a5:ac:70:ef:1a:88:4b:0e:e8:1f:ed:7c:2d:39:
6f:30:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:58:54 2024 by rpki-client on console-fra.rpki-client.org