Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer (raw, json)
Hash identifier: dLeudqHzDcmW1M7g95nlv8ax6Gsnqy04VnNtBFDYgb8=
Subject key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B135
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Jul 2023 23:55:14 +0000
Certificate not after: Wed 29 May 2024 00:00:00 +0000
Subordinate resources: AS: 38175
AS: 38194
AS: 38206
AS: 38208
AS: 133086
IP: 103.10.57.0/24
IP: 103.163.20.0/24
IP: 2001:deb:c000::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110901 (0x1b135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 19 23:55:14 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:3c:37:7c:a0:ac:11:fb:09:26:72:05:a1:
c5:47:11:da:31:11:9b:89:59:b0:2f:61:0e:26:3d:
52:e3:b6:5c:f4:57:a6:34:6a:96:7f:19:ae:97:a4:
35:77:c9:67:69:03:83:98:b0:0b:9d:06:52:88:b5:
04:62:e2:1b:9b:77:8c:7b:12:b2:03:9f:d9:47:a1:
6b:12:92:2b:39:db:02:0a:f8:72:27:52:34:48:76:
62:4c:8a:4e:db:8d:21:ab:37:85:cd:a9:3e:fa:4c:
58:a7:80:fc:28:5a:ec:12:3d:9e:fa:8b:69:bd:7e:
68:c9:8a:18:fc:f3:5e:2f:88:4a:4d:00:f2:00:e6:
e7:de:15:c5:76:97:f4:24:a8:bb:64:d7:e7:8b:73:
dd:8e:76:74:f0:dd:ca:a0:2e:20:be:fa:49:0a:7e:
bc:64:0a:16:cd:46:84:2e:b6:3c:4a:6c:e1:cc:26:
59:30:76:2b:c1:15:6e:f5:c3:e2:ef:78:b0:db:41:
20:a6:e1:4c:55:7c:93:da:19:d6:9f:da:bc:66:f7:
fa:4e:ab:2a:2f:1e:ea:2f:b3:51:1b:f7:13:29:c9:
6e:f7:a6:dc:b7:8e:e7:a6:06:2f:2b:a6:38:db:c1:
89:75:32:a9:76:df:5b:0e:b0:5e:cb:0b:74:7e:66:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38175
38194
38206
38208
133086
sbgp-ipAddrBlock: critical
IPv4:
103.10.57.0/24
103.163.20.0/24
IPv6:
2001:deb:c000::/47
Signature Algorithm: sha256WithRSAEncryption
d1:cf:1c:67:3f:12:07:04:5c:9e:da:78:09:9c:12:44:c1:ce:
36:2b:9c:9f:d2:7a:af:ce:8a:59:2a:f9:bc:20:f2:e0:46:9d:
1e:04:96:0d:70:1f:12:f7:90:e8:eb:80:d1:e9:4a:a2:ac:d5:
6e:ec:95:f7:46:48:12:9c:fb:df:5c:21:4e:06:8e:20:ce:26:
f3:82:83:2c:6b:9a:75:b8:4c:63:ee:e5:03:a6:c5:b6:a6:90:
ec:a4:13:99:51:1a:03:22:b6:b7:1a:71:b1:45:16:2f:6d:81:
b0:fd:e4:a7:d3:93:5c:f1:d1:76:b9:2a:c0:c3:92:c9:7c:c0:
f6:a6:46:11:0e:17:ac:b7:7a:c0:83:1a:2e:a4:0b:17:24:ad:
ff:a2:ba:fd:bc:f7:c9:61:a9:89:fb:9c:78:59:de:c3:f7:aa:
68:a4:63:c2:a9:ad:cf:e4:aa:c5:a4:ef:e9:b6:be:2c:f0:91:
5d:ba:21:77:63:b5:61:1b:4c:72:da:9d:14:01:39:ec:15:31:
8f:b8:ae:59:d6:92:7b:00:1f:d8:e6:c1:ba:68:83:e6:e2:7c:
06:8c:17:cc:c0:ad:7a:99:5d:40:4c:27:69:df:0e:9f:99:29:
af:82:99:34:ea:62:84:e8:5e:2f:f3:9e:5c:58:74:89:a9:fc:
f7:27:12:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:29 2024 by rpki-client on console-ams.rpki-client.org