Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
File: cIahuzAxFoOubaYN35fN9zN8tm8.cer (raw, json)
Hash identifier: qTcT+xnt7xAalWlBBGCdDWOYGHVf9x1Joo3brGu8gnc=
Subject key identifier: 70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: ED4B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Oct 2020 05:13:19 +0000
Certificate not after: Sun 01 Dec 2030 00:00:00 +0000
Subordinate resources: AS: 141195
IP: 103.156.52.0/23
IP: 2406:7dc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60747 (0xed4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 5 05:13:19 2020 GMT
Not After : Dec 1 00:00:00 2030 GMT
Subject: CN=A915E077/serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:49:9f:fb:fb:8d:36:00:d2:49:06:13:fb:
a6:55:ff:1d:eb:d8:a9:c0:07:26:d2:12:53:f2:e1:
cd:84:ca:3c:77:ba:44:bb:22:f8:ea:f3:44:fc:46:
a7:5e:b9:65:5e:41:ff:7d:d8:09:8c:63:71:fb:fe:
93:9b:0a:fe:34:5b:88:63:fe:b6:24:1d:c5:a1:8e:
5d:7e:52:92:57:b9:d3:17:42:73:25:b3:38:a4:c4:
cb:d8:e0:bb:3e:43:e8:0b:ae:59:90:0a:a5:72:35:
33:fa:46:79:c4:28:26:3a:e7:88:76:4e:a1:8a:63:
41:d8:10:22:a7:ab:b6:07:e1:ec:a8:5c:1c:34:57:
15:8f:8a:b8:b3:51:e4:24:87:94:2f:12:53:25:6f:
09:11:6e:d8:98:49:01:29:7a:13:85:80:35:4d:df:
40:b6:61:49:b9:bc:f2:3a:88:08:c7:47:fe:50:8d:
9e:cb:93:f0:4a:60:33:6f:d1:a4:af:30:6a:d8:cb:
83:ec:cb:fd:85:b6:d1:35:e0:1f:36:32:e1:a3:30:
09:7b:99:15:73:d8:be:da:24:21:c2:2a:90:8e:96:
db:ef:91:68:ae:95:db:21:71:b5:38:99:c8:d5:c3:
c1:2a:06:62:89:8f:46:41:7f:25:d0:24:cd:13:92:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141195
sbgp-ipAddrBlock: critical
IPv4:
103.156.52.0/23
IPv6:
2406:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:f7:f7:1f:4e:69:18:d4:80:b3:a4:5a:4a:87:43:e7:74:17:
5d:28:1c:55:38:bf:90:2a:5a:32:f9:89:5f:1a:74:89:0e:01:
d5:ba:a6:f3:52:e0:c3:60:17:01:67:f2:4f:b1:b9:7e:0b:cb:
a7:24:02:e4:ba:e6:a9:4d:a7:93:3d:0c:ba:a3:04:f0:59:ce:
e7:a0:9c:71:77:6e:f8:b7:9b:74:7c:3a:59:b8:00:f0:dc:c9:
b0:b7:cd:ad:12:55:3a:bd:55:a4:4d:0d:98:ce:ba:00:47:d3:
ed:ab:af:ff:ad:f0:f8:c4:ab:ff:ec:7c:2e:fe:f7:35:85:7a:
1d:fa:6d:da:dc:5c:54:ab:de:f1:56:f0:b6:8c:92:39:d0:78:
ab:46:c2:d1:0b:0e:69:11:35:ea:05:4a:52:c1:08:9e:21:eb:
e9:44:6d:a8:52:ed:cb:b8:4c:54:91:0d:35:5e:71:31:38:98:
38:b5:0e:34:f0:b0:b5:ec:a7:2c:ca:17:bb:12:3b:60:08:d2:
a2:b3:ef:10:68:5d:c1:e5:af:fb:fb:c2:dd:cf:b2:60:e7:79:
b3:95:bf:49:25:94:dd:b3:af:29:8e:69:4d:40:37:2b:85:4a:
a7:2d:d2:c2:d5:30:11:76:da:07:01:95:88:d9:dd:cf:fb:94:
60:47:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:11 2024 by rpki-client on console-ams.rpki-client.org