Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
File: cJdlx9TTMfTDasa-NH-mah8CNJA.cer (raw, json)
Hash identifier: GBVXwL60cOcN90e2+7FCh9WDIU0++MMIo7PxvmZ1FsQ=
Subject key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D789
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Jan 2024 18:20:51 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 23905
AS: 131193
AS: 132003
IP: 103.10.233.0/24
IP: 103.196.108.0/23
IP: 202.36.141.0/24
IP: 2404:2000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120713 (0x1d789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 9 18:20:51 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:91:a4:3d:29:52:ae:cd:21:15:2c:20:f0:
ca:f6:9d:92:09:16:ca:e6:c6:3d:55:66:91:61:d0:
06:74:9a:7a:ff:da:0a:e2:f7:08:c5:87:f0:ff:0a:
18:a3:0e:d8:36:3f:ec:9b:03:26:7e:2d:da:82:06:
cd:4f:78:8a:41:97:8b:a8:72:26:42:23:38:80:02:
08:49:fe:c0:64:82:5c:c9:56:23:50:66:79:15:41:
d5:cf:0b:c0:cf:98:b4:1f:6d:24:7f:82:dc:e8:7b:
8f:93:91:43:af:aa:5d:a1:93:c1:c4:40:e2:87:ee:
9b:09:02:c5:0f:60:2a:71:42:c4:32:b0:9a:68:a0:
97:79:bd:04:4e:6c:cf:66:f1:6d:7b:78:93:c9:27:
c6:00:79:ee:12:1c:82:89:09:e1:34:35:6b:af:7c:
2a:38:10:9f:0a:18:75:78:12:75:28:1c:87:c7:96:
25:1b:bb:f3:86:9a:d3:db:f4:96:3e:b2:21:72:3a:
01:b9:b5:36:06:66:db:3b:2a:c1:d6:19:fe:df:8e:
b2:fc:db:6a:1a:19:5c:1a:8b:0b:6d:b1:96:19:6e:
c4:08:55:b5:1d:d5:7a:62:d0:73:1e:37:da:fc:b9:
1b:b0:6e:18:47:7c:4c:de:fb:de:6a:c4:f7:b1:9f:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23905
131193
132003
sbgp-ipAddrBlock: critical
IPv4:
103.10.233.0/24
103.196.108.0/23
202.36.141.0/24
IPv6:
2404:2000::/32
Signature Algorithm: sha256WithRSAEncryption
c0:29:c0:23:b8:bf:cd:ad:95:a1:1c:1c:3a:06:b5:ed:54:2a:
df:27:9a:a2:b8:4c:57:9a:5d:2b:b9:f9:fd:a7:34:c6:ba:dc:
57:54:94:14:72:8e:bc:04:cc:6b:f1:c0:be:94:76:18:79:18:
a0:a3:8b:02:19:ed:9d:e2:1f:39:94:c4:de:16:2c:90:2a:66:
46:32:07:c7:a4:43:d6:84:66:61:5d:57:1e:4e:fe:0c:0a:bd:
42:94:4c:3c:be:fb:25:04:75:ed:d4:bc:a4:57:d3:b3:4d:d8:
b5:24:a0:19:40:0f:32:b4:7f:9e:19:74:ed:fd:33:c5:9c:44:
f0:e9:5e:e8:8b:13:43:7b:c8:b8:7f:3e:6b:98:ec:2e:30:de:
e4:49:d8:38:f2:d1:e1:cb:9b:06:08:91:e9:57:58:13:39:ef:
6f:37:80:ca:7b:05:17:03:dc:7f:f8:9e:32:f2:45:f2:af:3c:
31:77:bc:9a:3a:8b:66:7f:a9:55:40:0a:36:21:57:21:c1:8d:
6e:24:1e:7d:42:e6:b8:90:6e:ba:8a:0d:df:0a:9f:e8:05:fc:
50:b5:32:14:35:3a:25:9b:a9:b0:af:97:db:5e:ec:09:1d:64:
87:ab:7a:cc:3b:be:8f:12:13:06:fa:30:e8:45:32:55:6b:ad:
8a:96:70:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:29 2024 by rpki-client on console-fra.rpki-client.org