Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dR-knnEviM-ETM0Xnr4puX6hqsw.cer
File: dR-knnEviM-ETM0Xnr4puX6hqsw.cer (raw, json)
Hash identifier: OcQVVziBTfWU+vDFg6WQ25N4qyOh9cW9cQfXAwVqeZk=
Subject key identifier: 75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AB52
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Jun 2023 21:25:11 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 139035
IP: 103.138.188.0/23
IP: 2001:df0:4e80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109394 (0x1ab52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 21 21:25:11 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91DA59D/serialNumber=751FA49E712F88CF844CCD179EBE29B97EA1AACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:4f:9c:55:f7:5d:19:16:6e:c8:a9:80:d8:
fa:78:ae:f5:17:68:13:30:7e:53:b5:f3:45:03:5e:
d2:57:e4:c3:7d:d4:f2:f3:e9:16:7c:6c:2d:58:97:
8e:7f:5e:d1:d1:9e:30:ee:65:40:ea:1f:e2:f0:1a:
41:1e:59:2e:f8:ea:d5:f2:66:72:f0:f5:1b:d4:a2:
90:30:3e:dd:9d:fc:01:f1:f1:a3:39:3d:4a:62:c9:
6f:cf:11:74:90:44:6c:a1:0c:21:1f:41:0d:ac:c2:
93:86:2d:b3:35:6e:fe:ca:ec:5a:21:70:73:16:bf:
0a:6d:e8:24:09:d5:e3:64:ac:5f:d5:3b:79:14:b3:
c2:7d:ee:91:6e:ad:dd:f3:f1:60:7a:3c:66:68:73:
4c:f8:12:68:cf:17:14:bd:f5:7e:d4:34:53:59:2d:
f5:81:c9:47:89:44:46:9a:b7:35:ed:c2:44:16:2a:
e1:86:d7:be:1c:9f:e7:d1:d5:2b:88:52:d9:f1:8e:
9c:09:c1:89:00:4f:f1:01:f5:e5:a6:00:ac:a4:09:
4a:0f:c7:c8:53:ef:7c:83:81:9d:bc:23:3d:b0:e1:
77:18:f7:63:83:ae:ee:7d:41:66:61:13:f4:fc:e9:
d8:33:5a:b9:58:c7:37:fd:0d:a0:7d:ae:4d:0e:2c:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:A4:9E:71:2F:88:CF:84:4C:CD:17:9E:BE:29:B9:7E:A1:AA:CC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DA59D/563DE50E0D5611EBA3D15D2CC4F9AE02/dR-knnEviM-ETM0Xnr4puX6hqsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139035
sbgp-ipAddrBlock: critical
IPv4:
103.138.188.0/23
IPv6:
2001:df0:4e80::/48
Signature Algorithm: sha256WithRSAEncryption
b2:bf:85:24:1a:b6:4d:80:ce:b2:ee:5b:76:19:4f:cc:a7:e1:
54:98:0a:47:21:4f:f5:a0:ed:aa:4c:be:d7:96:84:58:6e:53:
a0:f7:d2:7d:26:8a:7c:8f:22:d4:5f:a1:e0:74:f7:60:6c:2a:
b6:45:ae:b8:68:f8:8c:37:ea:74:f2:2c:fa:fd:d9:6b:97:95:
fb:c5:0a:f0:94:66:f4:1f:68:88:0f:ef:3d:26:b7:26:26:9e:
9f:5f:0a:6a:7f:e9:c8:ec:34:19:6d:8a:fd:b3:78:1b:dd:16:
29:4a:b9:1f:40:89:bc:f0:b5:46:5e:ef:93:71:33:f4:68:29:
e6:2a:a9:4c:e1:09:87:3b:a8:02:4d:69:65:19:0d:fc:5a:b1:
f6:e7:32:88:b6:07:bc:b1:66:2e:10:87:e0:85:56:e8:93:51:
b8:2b:bc:24:99:97:25:d9:cc:83:d5:d7:b0:2d:0c:77:bf:83:
28:26:a5:31:15:02:37:a3:16:5f:d1:87:dd:2a:98:21:58:3c:
b1:73:0e:94:e5:26:28:90:bc:33:f2:b6:93:51:39:82:c9:14:
82:76:36:20:10:b1:4d:26:fc:0e:14:de:6a:2c:15:73:20:4b:
78:88:72:9f:56:74:0a:83:ae:9a:17:44:3a:1f:ae:86:cb:0d:
d8:19:f6:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:30 2024 by rpki-client on console-fra.rpki-client.org