Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
File: bKwrcgiF6COCTBln7fw2Psh0do0.cer (raw, json)
Hash identifier: UzD7djgl1kNIxqlonNsP/83IiT96+cxz3J0MAs2Al6o=
Subject key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DFB4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Feb 2024 23:19:54 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 133951
IP: 103.49.204.0/24
IP: 103.93.19.0/24
IP: 103.112.46.0/24
IP: 103.114.231.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122804 (0x1dfb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 19 23:19:54 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:15:3c:ce:39:a0:0d:83:44:0a:71:b3:85:
e1:71:9f:d2:1f:55:ab:45:43:67:7a:f4:4a:03:6c:
d8:f6:e2:07:ec:4d:82:4b:e5:8a:d9:94:81:f9:86:
f0:29:27:16:01:6e:97:c0:f9:42:72:56:81:e0:5e:
bd:b7:0d:17:ee:b7:49:d2:5f:16:74:9e:7b:bc:89:
43:c1:fe:70:bc:18:02:2a:23:a7:31:12:c4:67:20:
a7:e3:04:e3:6e:6f:f5:98:7e:65:95:48:28:ab:92:
dc:6a:a0:60:23:2c:47:ad:b7:68:33:36:a7:a5:98:
22:ca:f1:29:23:f3:80:e7:82:39:43:b8:6e:71:03:
1a:39:7b:5c:73:d8:7d:b0:48:4c:5b:6f:c9:59:d2:
05:cc:76:21:f5:ef:c2:b8:ea:ef:90:67:8b:9d:bd:
3b:34:ec:9e:0c:0a:1b:f7:7a:b2:70:7c:bf:91:af:
78:94:a3:46:a0:e2:c3:39:95:04:c8:31:c7:43:6b:
3a:06:cd:1c:4c:39:b5:f7:74:d4:93:16:ab:4f:43:
76:5d:40:75:36:34:7f:fd:3f:c1:f7:6a:62:8b:46:
c7:68:cf:a3:73:f4:02:f0:67:db:15:48:67:11:02:
c3:fc:5e:c4:00:fd:15:19:af:6e:bb:8f:aa:9b:6e:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133951
sbgp-ipAddrBlock: critical
IPv4:
103.49.204.0/24
103.93.19.0/24
103.112.46.0/24
103.114.231.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:7e:ca:76:b0:84:a3:3e:fe:cb:04:38:ae:3d:04:a3:e4:c7:
09:ca:06:c4:8e:c1:81:2a:86:07:bb:d7:61:4b:af:87:10:61:
1f:04:03:e0:ae:40:1b:da:59:49:5c:36:60:19:14:ed:73:7a:
03:5f:95:a3:95:c4:e6:b3:de:9b:36:9c:c2:bc:51:57:5b:b2:
c2:84:07:25:28:63:1d:28:8a:c1:28:bc:45:44:c9:af:96:82:
38:1e:5b:98:38:aa:89:d9:c1:ea:f9:04:b3:49:d0:33:10:00:
b9:14:33:18:ea:79:81:24:eb:ea:5c:74:7a:a9:ea:02:0d:64:
82:5f:f9:ca:7d:26:57:78:21:be:cb:b5:d1:56:d3:87:13:94:
a5:f5:6b:92:54:b4:b4:ee:5d:34:5e:e7:bd:62:a8:de:2b:33:
77:e2:fe:25:50:58:fe:a7:6e:9f:1f:9d:28:22:47:1f:d5:75:
61:9c:11:5f:04:ec:fe:df:44:1b:b3:5f:b3:e8:f8:4b:c5:88:
78:51:7b:cf:62:a7:40:24:e3:94:4f:c1:56:73:61:87:bb:99:
1f:66:2b:30:10:c6:8b:29:78:ca:51:13:45:b1:14:54:f0:2b:
d8:4f:ba:f4:33:92:22:08:f9:ee:74:e4:a1:be:20:cf:f2:e2:
fb:41:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:38 2024 by rpki-client on console-fra.rpki-client.org