Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer
File: cn1G1OfHecpnYSxgtGVS68IZkPs.cer (raw, json)
Hash identifier: 8pCUcJPK4h/zoju57TrI2tuYm/GZ3cs3/aeC0acQeec=
Subject key identifier: 72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BB7B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Sep 2023 01:34:00 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 132146
IP: 27.123.228.0/22
IP: 103.71.12.0/22
IP: 2001:df3:d200::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113531 (0x1bb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 5 01:34:00 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91D4D97/serialNumber=727D46D4E7C779CA67612C60B46552EBC21990FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:91:43:6f:7f:91:6f:fa:58:2b:63:8b:36:
fe:60:b5:21:cc:34:0c:42:aa:44:d2:a8:af:d7:2c:
a6:34:da:fd:8c:6e:a7:15:65:fc:8c:33:61:f6:86:
5d:3b:0b:3f:d8:6d:8c:49:60:b0:de:a6:c9:00:21:
3e:ce:a9:ac:58:97:13:9e:86:20:89:77:31:a0:fc:
58:aa:56:93:10:a5:51:e0:d8:ca:7c:2e:64:01:da:
7c:87:54:1e:a6:b4:94:8a:a9:26:6d:42:f2:79:61:
4b:62:ae:14:65:0f:38:78:34:72:05:63:e6:9e:1a:
0d:57:75:e5:04:9c:f0:70:a3:08:b8:01:5a:7f:20:
b1:42:68:a4:50:b9:0c:85:e1:d7:2b:e8:9f:ab:8c:
fb:83:04:a3:c3:c0:d8:a8:c8:1b:13:52:6f:ff:6f:
5e:9b:f4:50:45:ce:c0:d4:7a:05:a0:22:d0:16:26:
98:4d:d9:48:0e:5c:8a:05:99:86:24:76:53:9b:59:
71:f2:c4:1a:df:8b:f3:26:d7:8e:17:c4:99:e8:a9:
1b:e1:8b:3b:dd:fe:c9:2e:25:ef:f5:a7:00:b3:a3:
24:12:fe:99:6b:75:0e:92:87:77:7f:be:c5:43:71:
91:2a:b2:e7:a3:5b:b8:05:cc:3e:bc:ab:a5:12:58:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132146
sbgp-ipAddrBlock: critical
IPv4:
27.123.228.0/22
103.71.12.0/22
IPv6:
2001:df3:d200::/48
Signature Algorithm: sha256WithRSAEncryption
2c:0d:fc:50:cc:f3:5c:c8:cf:f6:c1:d0:84:a4:99:13:b1:f4:
c3:bd:24:d3:48:b0:f3:3e:c3:4c:e2:58:06:f5:a8:42:96:86:
45:4d:41:98:eb:fd:c4:6f:0b:e2:af:70:1d:71:da:58:6c:bc:
a6:83:7a:8d:60:9b:93:dd:52:a4:ad:f5:ac:30:3d:c7:b3:4b:
bc:2d:94:07:6a:59:17:47:46:42:f4:29:a9:e0:34:a7:15:c4:
06:a1:de:49:0e:b5:8a:84:d2:ce:c0:2e:16:13:dc:11:48:b7:
9d:4c:0e:48:14:5e:a1:87:c8:49:82:5c:57:65:af:5a:62:7a:
b8:08:79:3c:96:79:a6:cf:9c:ab:41:e3:59:4b:7e:81:1d:64:
cd:11:41:fd:24:ce:e4:b5:ed:84:31:93:76:18:97:ac:ed:26:
75:d2:9a:e7:04:25:17:b8:b5:08:8f:0c:cf:0f:2c:e9:29:46:
92:1d:73:9e:cf:75:56:58:5f:1a:f5:df:2c:8d:ae:82:f5:c4:
72:db:0d:1b:d8:49:4b:cf:e1:31:61:b0:a0:0a:24:c8:60:86:
d2:40:a3:b0:5a:58:2b:00:7a:8c:75:33:3c:f8:f3:09:be:a3:
a9:7a:3b:33:01:a4:29:ea:20:3a:34:30:c1:b3:9a:53:1a:31:
9b:d3:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:58 2024 by rpki-client on console-fra.rpki-client.org