Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c9kAkk5wFUjm4yA4gPbAlypMKRo.cer
File: c9kAkk5wFUjm4yA4gPbAlypMKRo.cer (raw, json)
Hash identifier: 3tVVcg4PqGNJKE9S6ruKqW0fkzwH4kUl1Aui6H7c+QI=
Subject key identifier: 73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021AAD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Nov 2024 05:56:17 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 58411
IP: 43.252.148.0/22
IP: 103.242.140.0/22
IP: 2401:1380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137901 (0x21aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 11 05:56:17 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91C9E72/serialNumber=73D900924E701548E6E3203880F6C0972A4C291A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:e9:63:e6:aa:63:95:7e:99:d3:15:5c:19:
1d:12:59:4e:d0:74:0b:2b:cc:b0:ef:ee:21:48:de:
64:ff:8b:62:1d:38:15:1a:3c:64:f8:1e:42:06:18:
e7:96:9d:85:5e:1f:de:ea:f6:3a:7f:c5:00:ad:e4:
4b:0e:15:82:22:cf:a5:74:fe:3c:25:44:62:87:19:
5d:97:e2:8d:ab:91:00:e7:a7:28:79:88:8a:f7:f0:
ea:70:92:6a:99:b8:41:29:d5:25:80:5c:24:22:33:
1f:48:5e:92:4c:60:f6:24:88:d6:de:49:2c:8f:24:
9e:d7:5b:a0:f6:47:49:1c:c4:a2:d5:da:da:a3:95:
59:17:3a:4e:c2:94:c4:61:81:d9:49:cc:95:55:31:
6b:2b:53:23:64:fb:40:1e:a5:ec:2f:b9:e2:0c:0a:
de:d8:35:2f:0e:51:59:c5:bb:c6:c9:0c:30:58:bd:
fe:a7:8a:85:54:10:d6:6a:73:4c:90:35:fb:5c:40:
8c:3e:0e:8c:85:d4:27:9e:6b:2b:95:a7:cb:0e:e9:
9b:ca:af:e1:06:8d:5d:de:48:db:fc:6f:c5:e7:1d:
35:67:b0:33:87:79:d9:2d:15:9a:b4:bd:61:91:8b:
59:cf:65:19:25:9f:70:ab:31:f8:00:69:9b:cc:e4:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:00:92:4E:70:15:48:E6:E3:20:38:80:F6:C0:97:2A:4C:29:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9E72/E6B44902848011EFAAD8E233C4F9AE02/c9kAkk5wFUjm4yA4gPbAlypMKRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58411
sbgp-ipAddrBlock: critical
IPv4:
43.252.148.0/22
103.242.140.0/22
IPv6:
2401:1380::/32
Signature Algorithm: sha256WithRSAEncryption
8e:78:0c:e0:c4:5a:09:c7:23:bf:f1:16:60:18:53:51:5c:5a:
b9:4d:e5:4d:c6:d8:23:7d:ba:81:ef:4b:c4:9f:35:eb:c5:70:
af:90:c5:23:66:1e:d2:ef:7c:b5:03:01:4a:c4:1d:92:b9:08:
91:fa:86:c5:79:a7:e4:17:7b:52:1d:cd:65:af:b3:80:d6:7e:
65:5f:ef:ee:8c:54:43:23:26:84:78:16:e1:43:6e:f6:16:94:
6f:a5:13:2a:9b:3d:25:fd:bf:89:e3:3a:ba:67:5b:fb:11:9c:
ac:b3:d7:73:e9:e5:05:bb:08:70:b1:f1:8f:90:4a:43:3f:a8:
ea:ce:e4:0b:da:65:da:73:5f:fe:2b:8d:34:17:d8:cd:57:79:
40:8c:fe:eb:94:75:dd:e4:ba:f8:a9:75:f8:40:87:64:a2:77:
7d:19:82:59:b6:19:96:bd:74:56:e4:90:9c:80:d1:c6:10:5e:
5e:5e:f2:ef:9b:7d:0c:7e:5e:e5:d6:83:18:b8:a8:9f:f2:1f:
b0:6c:e6:b9:36:cc:ff:de:e7:8b:a7:fa:5b:9c:ba:94:23:31:
6d:0b:53:5f:d0:85:60:72:21:d0:db:30:11:e9:f5:6c:be:e8:
99:3b:0f:bd:cc:c5:bd:73:63:86:42:09:10:50:23:fc:1d:10:
bc:a6:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:38 2024 by rpki-client on console-ams.rpki-client.org