Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
File: eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer (raw, json)
Hash identifier: qrtkqTr7Kdgl9VRxVZZHxu3FfpgoKIQBG1E8cubI6G0=
Subject key identifier: 78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A52C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 May 2023 18:05:44 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 38659
AS: 38803
AS: 56203
AS: 56220
AS: 58950
AS: 139001
IP: 1.0.4.0/22
IP: 43.252.108.0/22
IP: 45.124.164.0/22
IP: 103.2.176.0/22
IP: 103.26.60.0/22
IP: 103.29.76.0/22
IP: 103.58.216.0/22
IP: 103.145.116.0/23
IP: 118.107.184.0/21
IP: 2403:2a80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107820 (0x1a52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 25 18:05:44 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:8b:14:a0:0f:11:ae:b3:02:fe:68:a3:10:
24:6b:09:ef:8a:c7:bb:32:ec:5a:12:aa:03:81:ee:
54:3a:ff:c8:7b:19:05:f6:8a:8f:9e:0b:a8:7f:a2:
da:6b:c7:d5:08:a7:10:ad:8d:57:47:c7:8f:86:95:
e4:74:bf:5a:69:86:39:44:09:9c:22:f8:2c:47:3d:
c9:1f:26:58:36:5a:aa:d8:b1:3d:ca:d3:f8:ce:9b:
1f:5f:c5:4f:d7:15:23:a1:33:91:4a:31:56:46:43:
11:37:93:c4:11:b5:99:e3:9f:11:94:58:c0:0b:fb:
20:d5:4e:44:36:d8:e2:ee:8f:56:87:5f:19:7c:2e:
e0:8e:6a:2f:86:aa:21:05:9c:fb:00:2b:95:fe:0e:
6a:94:42:aa:fe:bc:65:6e:cd:09:ff:2d:7d:df:8a:
de:cf:da:7b:53:d4:5a:92:21:48:0b:7d:00:ed:d4:
47:58:88:7b:fa:ca:33:51:5c:cf:37:37:e8:ec:dc:
21:e4:5e:d5:39:25:b0:fc:68:c0:dd:cc:a1:fe:04:
2e:0d:54:61:bc:2e:58:b0:c2:48:ae:b9:a2:d7:80:
2f:60:82:68:c0:b1:1b:69:64:74:dc:8c:18:27:e4:
d9:d9:8a:6b:48:f5:db:f0:27:0b:b9:a6:02:94:c9:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38659
38803
56203
56220
58950
139001
sbgp-ipAddrBlock: critical
IPv4:
1.0.4.0/22
43.252.108.0/22
45.124.164.0/22
103.2.176.0/22
103.26.60.0/22
103.29.76.0/22
103.58.216.0/22
103.145.116.0/23
118.107.184.0/21
IPv6:
2403:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
b7:3f:74:49:76:d6:18:cd:fd:ff:a8:31:49:ea:ec:7c:5a:1a:
6f:9b:56:f1:5c:8a:59:c1:32:7d:c9:17:7b:6a:23:5c:f9:13:
63:94:98:67:f2:41:6e:aa:7c:97:90:f2:9f:8a:1f:47:f1:35:
86:d6:14:18:97:e5:96:2a:a7:7a:8d:c8:64:9e:03:ce:9f:4a:
cf:ae:25:6a:1e:f0:82:d0:d8:a3:f1:3f:7e:65:70:7a:2b:46:
b3:8a:4b:db:81:cc:bf:24:bd:8c:8d:d2:24:31:01:ed:7f:c1:
be:a1:e9:67:65:e8:e1:85:26:42:86:d1:91:b3:48:70:22:37:
ae:d8:7f:31:68:8f:c4:51:d9:de:e2:00:e0:a8:16:e6:87:d8:
3b:8b:bf:65:36:6a:52:04:5b:05:56:ef:1e:b5:96:56:79:7f:
13:26:7d:6d:7b:0a:a9:85:b5:77:40:3a:79:1a:19:58:6f:aa:
51:45:71:32:f2:a8:d9:ee:ea:76:75:c5:53:ff:d6:50:35:ca:
c6:87:9f:68:4c:fc:9a:27:1c:f8:63:6d:f2:37:45:b6:b9:bb:
be:d5:ce:af:2f:28:cc:7a:f9:38:19:4f:9d:5f:60:a2:71:47:
e9:ce:7b:5f:6f:b3:25:b5:ab:25:12:f2:65:6d:dd:4c:e7:b2:
2e:a2:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:03:05 2024 by rpki-client on console-fra.rpki-client.org