Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
File: c7-jegclQ-L9dR5OBQw603ABDFk.cer (raw, json)
Hash identifier: qaUyxUyARenCQdkdkREstyqdfrWuQGn186o3QX3eRJk=
Subject key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F853
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Jun 2024 18:13:39 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 139294
IP: 103.140.234.0/23
IP: 2001:df0:da80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129107 (0x1f853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jun 10 18:13:39 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9195AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:a0:db:1d:00:2c:23:d6:36:36:77:00:66:
34:28:3a:70:77:d7:e7:7b:74:29:66:2e:b4:8c:7e:
92:a9:7f:90:6a:67:63:b2:7f:17:f3:c3:dc:40:10:
bd:6d:fc:3a:d0:c2:32:ab:8d:ad:66:85:eb:2d:06:
88:8a:24:a0:b9:15:cf:a2:6c:73:46:9e:85:ba:86:
9a:57:8e:9b:07:81:2d:4b:ba:01:99:40:14:52:3a:
3d:fa:f2:aa:97:c0:55:a8:06:c2:88:27:8e:d5:7e:
49:14:e9:4b:ab:8b:91:5a:0d:51:08:d6:16:1c:b6:
fb:6b:bf:c0:33:3f:77:e9:ac:5d:f8:5a:06:55:a5:
fb:e4:d7:58:14:0a:e7:09:37:40:c0:dd:74:75:2c:
c9:c8:d0:15:42:87:56:7b:5f:ca:04:de:e5:6a:2a:
4b:5d:af:f0:87:fe:a3:f1:44:fe:21:c2:1f:50:d6:
7c:9b:7b:a0:e5:ab:bc:95:45:e1:5b:0b:79:39:a8:
f9:e6:3a:db:ad:a2:c8:9f:b9:1e:84:c9:b8:28:1a:
e4:a3:ae:a7:07:43:91:b9:09:f7:0f:a1:9e:b7:f1:
23:78:4a:22:19:ff:ad:90:58:7a:09:99:5d:71:07:
f2:cd:9a:2b:09:f5:aa:3f:ac:24:aa:93:6b:06:31:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139294
sbgp-ipAddrBlock: critical
IPv4:
103.140.234.0/23
IPv6:
2001:df0:da80::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a7:6b:6e:15:4a:9a:bf:ac:9b:af:57:a2:35:b8:19:e6:96:
d1:78:ff:56:35:91:78:d1:89:26:6a:94:45:cc:65:14:06:e5:
d6:cf:fa:43:a4:74:a7:21:d4:38:a7:f7:e7:0f:56:b0:ee:6c:
d5:9d:88:eb:4c:3b:20:e3:59:b1:30:e7:2e:9a:06:b5:9f:b8:
95:3f:69:28:b0:b1:cd:e3:98:9e:7e:e8:0b:38:ee:b2:92:24:
9a:95:f8:76:66:d0:26:87:63:cc:b4:0f:05:98:e6:33:1d:8f:
30:d9:20:d6:1d:d7:bf:b4:cd:4e:7e:9d:49:14:73:30:39:65:
65:b1:be:b6:9d:1c:bc:0a:17:44:51:2b:14:57:6e:b7:78:77:
69:36:a4:9a:38:4a:a0:7b:54:4c:66:8c:2a:8c:07:a6:46:26:
28:e1:dc:07:35:07:2c:8e:34:ba:aa:3f:45:f8:70:00:e1:bb:
02:8a:a8:52:ee:4d:b4:2a:3d:fc:9c:81:e9:97:1f:58:2b:84:
e0:c5:d7:4a:e5:4b:97:0e:8d:88:68:26:f5:65:1e:7d:32:2b:
25:fd:4b:10:bb:55:e2:91:08:2e:ea:a4:fa:e8:dd:a5:85:89:
d6:16:59:12:ca:2b:49:47:b7:fd:d6:03:c7:1b:d9:c7:4a:e2:
33:c3:43:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:42 2025 by rpki-client