Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer (raw, json)
Hash identifier: JvrCllBkkh5HtMg7HVPF5xXqptggR76p4Gp9tRZlK4w=
Subject key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D3D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Dec 2023 17:53:56 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 139903
IP: 103.146.250.0/23
IP: 2001:df2:7580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119761 (0x1d3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 22 17:53:56 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:34:bc:36:7e:99:9f:dd:19:44:83:9f:03:
97:26:dd:07:cd:04:6c:7c:91:60:53:eb:d1:74:5a:
f8:46:26:8e:ff:3c:95:d2:52:c3:d8:1d:a0:12:89:
d9:c4:c3:9c:d0:04:a5:8b:3d:e7:f9:9a:18:6d:19:
b2:98:54:66:0c:5b:06:66:57:5f:71:14:9b:3d:19:
5b:5b:19:55:04:8d:d0:e6:b9:5e:87:0b:0d:d9:ce:
db:d6:14:9c:4a:43:a0:e5:88:cb:e2:b4:ca:59:89:
79:d6:15:f8:05:18:9b:f9:c7:ed:53:cc:c1:7c:c2:
11:76:b9:c7:2a:ec:bd:ea:99:9c:e0:69:b5:54:f6:
7e:18:f6:75:d9:13:ed:2e:53:58:81:76:44:a4:65:
7d:0f:5f:aa:36:2e:9d:2d:aa:e7:b8:83:97:7e:49:
39:72:8a:e0:aa:5c:f9:a4:66:ec:ca:b7:42:8c:2b:
d9:56:5c:08:19:65:bf:12:0a:e9:55:22:75:66:34:
70:70:8f:27:89:90:0c:38:e8:3d:e4:74:55:92:74:
f5:35:75:e2:ea:38:4b:d3:d7:57:34:21:1f:a5:b8:
90:55:0a:e4:c1:c6:a3:a6:79:b5:37:9d:56:a8:19:
77:0d:f0:49:e5:ba:8c:21:bd:70:d4:12:63:cc:b7:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139903
sbgp-ipAddrBlock: critical
IPv4:
103.146.250.0/23
IPv6:
2001:df2:7580::/48
Signature Algorithm: sha256WithRSAEncryption
af:32:5f:36:10:1a:8f:db:c1:8f:b0:98:fb:2c:75:ef:82:72:
ae:dc:07:e4:a0:17:7f:4d:07:44:fb:f1:0c:a0:e2:3f:46:11:
39:9c:3b:32:12:8c:07:24:09:7e:00:3e:5f:4f:b2:20:01:f0:
35:38:67:d6:38:78:e4:76:4d:0c:91:95:29:75:df:77:9d:e4:
de:1c:49:45:ee:f9:12:79:d3:43:5e:f6:bc:e5:ba:a2:8c:7a:
df:75:1a:ba:07:51:7a:d3:81:ed:f1:2a:50:a4:96:19:dd:d9:
a6:c2:cd:ff:0e:c2:46:a2:ee:d6:7e:a5:6a:da:ce:77:2e:ea:
13:59:57:4b:40:b4:8c:96:9f:9a:02:51:09:1a:2b:4a:ef:18:
dc:09:23:e3:b3:ff:f3:fe:d2:c6:ed:72:db:0d:c9:33:d5:e8:
43:d0:47:5c:6e:96:8f:f6:cb:a9:52:0f:28:d3:33:9b:d0:b2:
12:0f:92:69:8b:49:0b:65:c1:38:73:87:60:37:d0:42:e8:37:
cc:c6:8b:63:e2:f4:6d:16:32:e0:e8:93:9a:f6:cc:b1:e3:79:
6d:30:84:1a:1f:38:b3:62:b4:27:03:d5:49:87:86:1d:65:b0:
bc:49:9b:a3:72:d7:24:6e:14:e8:8d:39:77:22:b6:06:6e:8a:
e5:91:06:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:30 2024 by rpki-client on console-fra.rpki-client.org