Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer
File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer (raw, json)
Hash identifier: Y1B/v74hXNvSnaFhWgcdXr9JzSnAQRdIEthw+3fQ4Nk=
Subject key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E989
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Apr 2024 23:50:51 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 38036
IP: 203.190.0.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125321 (0x1e989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 3 23:50:51 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:64:da:57:5f:61:a8:0a:b0:08:c0:53:4d:
ee:d6:16:12:71:66:2f:47:a0:d0:9e:e1:97:52:c6:
1b:65:b2:0f:2b:6d:2d:d0:dd:ac:20:58:98:8b:64:
ba:eb:87:d3:1e:c4:d6:8c:3c:38:f6:ff:44:87:56:
3b:f0:26:6e:c9:11:dc:c0:72:f8:35:52:e7:fc:50:
2c:3e:22:e1:ca:ba:95:d9:c3:17:3f:29:33:ea:c4:
d3:52:dc:2b:dd:f8:18:d6:92:f7:9f:57:e7:e1:1c:
60:35:b0:83:98:92:38:b1:cb:bb:42:75:1a:9f:df:
a4:0e:96:90:40:a4:4f:ba:f5:08:c1:93:9e:77:15:
75:a9:46:bc:56:e4:66:81:eb:2e:a9:b4:0f:c1:89:
57:8c:3f:42:1b:2f:5d:a5:78:d7:b6:ac:b4:c2:ab:
03:22:f2:3a:af:bb:25:68:7a:1c:8a:3a:98:d8:76:
cc:d4:b3:d7:30:05:4c:b8:cd:62:27:c0:0c:32:12:
bf:25:a5:46:a8:d2:20:a3:4d:1a:40:3e:50:38:f4:
a3:66:7b:51:81:26:ba:7f:7e:1c:cc:03:b0:1e:26:
37:0d:7d:0b:10:df:d8:4a:ba:7b:a6:30:c0:28:ef:
1e:14:dd:af:1c:45:17:0d:1b:47:43:06:f5:3e:b1:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38036
sbgp-ipAddrBlock: critical
IPv4:
203.190.0.0/22
Signature Algorithm: sha256WithRSAEncryption
80:e5:f2:80:4a:99:28:5c:9d:a3:96:e2:bb:fb:16:fb:ac:30:
0c:a8:0e:99:d5:c8:61:de:75:3b:27:05:0c:b8:59:f6:fc:60:
1e:75:a4:cc:18:49:39:59:aa:40:be:22:2f:82:c4:a0:36:3d:
fa:d9:9b:85:9d:59:cb:43:46:69:c4:db:c3:18:1c:92:91:07:
c1:d2:24:40:48:21:6e:02:94:5a:71:38:f3:83:e8:0d:82:d4:
90:2b:82:f7:6b:39:b7:f4:5e:b0:ff:25:b7:7c:a1:2c:52:a2:
c2:ae:4e:c9:26:f1:e7:0d:e9:d8:ce:7b:7b:cd:80:bb:20:90:
17:53:04:24:9b:dc:56:63:14:ea:00:4a:6d:29:5b:68:4a:42:
2d:52:d0:6d:a8:62:ec:54:9a:a1:0a:7f:2e:2b:10:74:f8:4c:
34:f6:10:c4:bf:eb:5a:0a:ef:d1:40:a1:6c:9a:fc:62:2a:d4:
68:14:e1:88:6e:62:3d:b9:13:81:6c:1f:51:89:d4:ff:fc:6d:
24:7b:e3:9e:2c:13:7b:bc:4e:b5:97:9b:dc:7a:02:a1:22:b6:
20:6a:25:07:31:b2:7e:7c:d7:d2:48:5c:2b:60:a1:83:04:4e:
3e:ef:10:9d:5e:1b:63:13:03:5d:40:2e:27:07:bd:d2:c9:11:
5d:a1:cb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:29 2024 by rpki-client on console-fra.rpki-client.org