Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
File: d_7bUqwSiVBJ40An4RJqb9FRHu8.cer (raw, json)
Hash identifier: 7p26ZJTwoaICTGIaHfzuiJ32j8hASuRyItUfpCmQifQ=
Subject key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021004
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Sep 2024 12:26:05 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 38053
IP: 180.150.248.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135172 (0x21004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Sep 27 12:26:05 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9114D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:79:67:2d:dd:08:24:f4:bb:3e:aa:e0:32:
97:e1:0b:4a:47:0e:8a:4e:c2:11:2a:1b:3e:7a:67:
28:a1:ef:01:ee:c2:24:02:25:48:c4:71:a0:94:57:
00:54:a8:31:f7:b0:b0:ae:53:9c:d5:59:c6:bb:e6:
95:0b:c3:50:78:1e:d7:af:1d:4c:1c:92:9d:d4:d5:
9a:1c:da:b5:80:e3:d9:be:e1:d9:60:df:70:4f:cd:
bb:c3:6d:60:52:7a:95:72:14:ab:89:14:9f:f4:9f:
f2:ce:5a:95:2c:56:c1:0b:b9:62:1e:fd:27:f7:be:
c4:59:a5:ea:06:02:9a:c1:5a:aa:f0:f9:9e:e3:48:
26:4f:74:fd:12:fb:80:ca:db:ed:e7:5e:6e:c2:d4:
6d:8e:df:71:02:e7:9a:34:10:07:d1:07:8f:07:87:
77:73:cd:ee:43:ed:38:d8:7a:fe:64:ca:83:17:44:
44:b6:66:6a:89:68:93:05:d1:f0:15:76:73:7a:a9:
a4:aa:27:2f:80:f2:dd:0f:dd:d9:bc:28:88:f4:21:
a2:ad:e2:c9:d7:aa:70:7e:c6:06:00:8d:19:2b:33:
e8:85:7a:3e:bb:20:a6:db:b6:52:4b:18:23:05:75:
0d:00:c4:11:46:0d:96:69:c0:06:f4:89:75:2a:4b:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38053
sbgp-ipAddrBlock: critical
IPv4:
180.150.248.0/22
Signature Algorithm: sha256WithRSAEncryption
77:e5:7a:5e:6c:d5:07:5e:df:94:a0:06:68:81:97:f6:a3:25:
fb:9b:62:5b:55:ee:15:89:35:50:99:28:1e:3f:70:d6:60:25:
57:80:fd:37:c5:6a:e6:75:84:f7:02:b3:8d:7c:31:d2:81:4c:
43:43:f4:21:ea:5e:64:ec:73:00:7b:bd:b0:90:a9:59:2c:19:
3a:c2:12:61:85:dc:c4:60:00:7f:51:00:6b:89:02:6e:b7:d5:
d9:cf:6b:7e:ba:f6:b7:c4:40:b7:05:f9:38:8f:55:2c:1b:43:
ad:ed:cc:bc:b1:89:43:5a:63:df:be:f7:6f:1e:35:c6:7e:0e:
34:11:b9:ee:3f:ce:ac:39:c6:34:0d:2b:a8:1f:f4:a2:43:33:
a8:64:06:b9:16:32:81:d3:bc:f9:d0:8f:78:41:e1:cb:8d:b5:
8f:6e:12:3e:d0:37:1f:a0:bd:b5:5e:5a:59:95:32:95:5f:02:
c1:62:a4:2c:f3:4d:07:d5:4b:df:f3:51:86:05:05:8f:19:65:
d0:df:bd:5f:2f:a8:97:0a:f5:15:0f:4d:8c:10:5b:00:89:1e:
cb:24:63:f0:13:a0:1d:2c:95:cb:2b:c9:6c:c6:51:f7:2c:65:
45:05:25:51:8f:2d:66:ae:0b:5f:ef:5b:1d:81:66:7a:0b:4e:
ef:19:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:44 2025 by rpki-client