Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
File: cOo3wZMr00-ztIWaNIMaEOYR0PY.cer (raw, json)
Hash identifier: YrdNQ4iy0yDmkLO4BbKihKOMz7yY1cHUtDX1JWpnQfQ=
Subject key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C5E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Oct 2023 00:22:09 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 103.67.94.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116195 (0x1c5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 25 00:22:09 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:a6:b8:4f:78:67:92:16:d6:8d:03:c9:46:
f1:30:13:02:54:a9:ea:d4:14:c7:86:05:ab:20:4b:
12:eb:1f:dd:f7:c7:7f:22:83:31:91:ae:3b:66:73:
9a:97:0c:40:63:73:cc:3c:4f:d4:38:b5:66:9d:7d:
94:5b:bd:dd:90:18:ac:04:8f:a4:04:cb:e2:21:b6:
0e:4c:2f:b2:e0:22:45:9d:1b:38:a0:03:31:bf:de:
68:d0:e9:f4:67:c0:ff:cb:16:ff:76:e5:39:6b:e7:
3a:bc:52:cc:0f:c3:d1:53:d1:34:a2:de:5c:7d:e0:
7a:48:c6:36:67:94:72:cf:eb:48:28:74:42:78:78:
dc:a3:75:23:09:e9:f3:c9:a8:d8:0f:ec:38:5e:95:
6b:fd:76:f2:ed:9d:bd:40:09:4f:a4:ab:9b:3c:dd:
2d:b2:99:d1:f2:14:05:c2:dd:c1:8b:6e:0a:d2:da:
a6:62:d9:3e:68:3f:95:7a:f5:9c:31:f6:6b:6d:29:
ac:4a:ec:97:9c:2c:af:21:b8:05:70:f4:41:6a:fb:
d4:e2:0a:c8:0b:4e:ac:46:e0:6c:11:cd:51:a1:d9:
3f:99:d7:2d:48:58:dc:e6:d6:1e:82:52:4e:47:90:
9f:1b:45:70:57:b7:93:d1:14:df:2a:95:de:64:0b:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:de:bc:e5:e4:4f:40:c5:d6:c8:a3:9b:16:5f:6e:bd:46:4a:
6e:39:c3:d3:93:cb:31:15:60:80:e6:67:34:86:f6:0f:5a:e5:
c8:84:c5:46:92:d0:94:3e:c9:08:cf:8e:45:88:4a:b8:93:38:
e6:8b:49:c2:c0:32:34:fd:ea:d7:ee:a6:a5:c7:4f:b3:ce:d2:
9a:20:7a:70:b1:a2:5e:59:25:98:f3:31:e0:64:bb:4d:bf:ab:
8b:b9:2e:a4:a0:85:83:4c:51:2d:7d:5c:9a:d9:8a:52:f8:a8:
63:fe:6d:7b:89:7c:fa:02:c4:d5:a8:8f:eb:50:de:69:8e:63:
e0:9a:fb:68:ae:cb:0f:50:34:60:1d:94:08:a9:85:ef:c1:6d:
2e:7e:22:0a:55:5d:e2:6d:e4:78:33:ac:8c:67:74:82:41:88:
3a:98:11:5b:dd:81:91:24:85:ac:48:d6:c8:a0:66:0f:05:1f:
80:72:53:95:30:97:ff:58:d7:f4:99:a0:1a:62:42:1c:99:2b:
c4:06:dd:11:45:8f:47:b1:fd:97:a7:f1:07:cf:f9:82:8b:64:
2b:1c:0f:d6:a3:bb:6e:8f:7b:56:07:49:67:0d:e4:36:64:95:
05:24:ae:51:18:56:09:df:88:53:e1:4e:47:b4:35:e9:0f:ea:
88:e0:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:52:47 2024 by rpki-client on console-fra.rpki-client.org