Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
File: daQM7SSsrWLFirKOoOD3xeXhx4g.cer (raw, json)
Hash identifier: x2QfuQD6uIsWf0FBsRm72JllgZGDssto44X4SEkyhz0=
Subject key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F37A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 May 2024 03:41:36 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 152712
IP: 103.49.122.0/23
IP: 2401:9820::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Oct 2024 20:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127866 (0x1f37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 24 03:41:36 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:0c:26:8e:d2:5f:d0:3a:32:a5:6a:d8:71:
66:30:5d:94:c5:cd:f5:6c:29:92:d2:10:f2:9c:6f:
22:15:b8:f5:4a:53:f9:05:38:46:55:f9:5f:ba:8b:
c1:47:65:7b:c7:95:1d:8a:36:b3:ec:4c:e0:e5:c5:
86:4e:2e:07:b0:e0:13:68:c1:37:b5:74:3a:d0:51:
3a:72:38:9f:cb:5a:a0:91:32:95:f8:0c:5e:cf:3a:
9e:07:00:ee:e2:c7:e9:d3:fd:5e:e4:d5:c4:11:4c:
f8:5c:1a:8c:bc:2d:7f:f1:e6:26:49:9e:e7:a8:cc:
1d:21:cf:84:e8:cf:d5:d4:1d:fd:87:1a:54:41:15:
71:cf:73:5a:22:63:4d:ab:bc:8e:7d:4a:c3:86:f0:
63:80:d9:19:5b:a0:10:0f:a0:f9:20:d5:6f:99:e2:
e9:ef:7d:33:43:aa:60:27:2e:02:70:f7:de:d4:44:
51:5e:8c:0a:9d:78:bf:02:64:ec:42:11:c6:08:4a:
00:d2:1b:94:65:05:2c:91:72:6a:0c:13:26:c7:29:
4d:09:66:0f:8f:83:61:08:4d:e2:7a:f2:e4:de:c7:
a6:74:e4:23:08:15:3e:e2:32:e7:5a:50:93:25:b4:
18:4c:a0:68:ba:7c:ca:ba:4c:8e:f5:77:59:28:e1:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152712
sbgp-ipAddrBlock: critical
IPv4:
103.49.122.0/23
IPv6:
2401:9820::/32
Signature Algorithm: sha256WithRSAEncryption
5e:7c:6d:f1:44:66:11:84:1b:9a:95:ad:f7:aa:f5:2f:d8:3e:
d9:04:4c:b7:db:a2:43:20:3a:d9:2a:09:eb:18:d1:20:c0:4e:
c4:9c:1e:cd:6e:01:7d:94:b3:f4:ba:df:34:85:d5:2d:5e:31:
de:10:38:a7:f4:85:f4:c0:96:62:8a:6f:77:fb:f4:9d:33:78:
75:3c:81:61:1d:73:ba:f6:ac:7c:92:38:e6:93:b7:4d:1f:43:
d1:60:1c:30:ba:85:c8:70:2e:ac:29:7c:52:10:40:b8:61:11:
bc:1a:08:6b:24:fe:cf:fe:3d:64:a2:18:f0:e2:2c:20:b1:1f:
bf:b9:ec:0b:55:1d:9f:d4:45:63:0e:81:b0:51:dc:01:cd:be:
40:43:6f:c8:e6:aa:a4:b3:59:ff:9a:d0:dc:8b:08:1f:25:d3:
b7:f1:6c:6f:ac:1b:14:c8:50:0c:1c:59:99:0d:d4:ef:76:d7:
f9:13:f7:cd:72:0e:cb:16:9c:1a:20:e6:5c:bc:f1:d2:32:ed:
5e:75:6f:2a:36:10:bf:53:9f:2a:ad:0b:62:3c:0e:05:41:34:
74:c2:a8:0b:ad:3e:23:6f:db:3d:ee:bc:ef:ee:e2:bb:6a:9f:
76:c8:b3:18:83:d8:8e:96:8b:f1:5b:1c:5f:99:a2:63:5e:41:
af:d8:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 23:10:13 2024 by rpki-client on console-fra.rpki-client.org