Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
File: f7FuQPo8p3_OJMTJpGRWg8OeihE.cer (raw, json)
Hash identifier: sFQ9TClA1RjnEZW/R1zaQkDbLgclsf9kXU+XGPFDSHE=
Subject key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CEF3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 23:07:33 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 141359
IP: 103.174.227.0/24
IP: 2001:df7:da80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Apr 2024 04:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118515 (0x1cef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 23:07:33 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:55:11:ce:49:96:30:47:f0:61:1a:43:ee:
fa:3a:6d:30:46:82:c4:ac:d4:d0:a6:77:8f:0c:42:
90:5b:b4:0b:ed:08:8c:dc:28:7b:ce:63:d9:67:e5:
d9:57:aa:8f:4b:cc:1f:86:af:e4:fb:f7:d8:36:ab:
5c:2d:6c:52:09:63:11:81:96:49:09:ac:00:8e:f0:
b7:ba:a6:7e:7a:b4:e8:f0:b4:75:61:4f:41:77:f2:
38:50:af:16:0f:70:2e:56:d9:40:26:b8:ce:25:f0:
f7:b7:9c:0a:c2:3e:40:b2:bb:a2:fb:51:74:a6:ee:
57:24:44:17:34:29:73:89:9d:07:ec:9f:75:70:46:
df:e1:04:a5:31:fa:75:b8:7a:79:44:d9:9c:4e:ad:
88:23:b3:50:73:44:76:ca:46:1b:cb:3d:b3:41:9f:
90:c2:57:b0:53:41:7c:f6:f8:e3:7c:6b:91:de:24:
ca:34:c3:22:f7:22:99:71:d9:b0:5c:ab:dc:0c:ce:
48:13:ae:db:52:20:54:2c:00:f0:56:18:b6:f3:44:
e2:18:c7:93:3a:a9:79:9e:5a:e8:0b:97:7f:86:85:
1e:7f:de:23:bc:cd:24:cb:5e:df:3c:8c:9c:f6:3b:
28:09:19:ee:a4:7f:a1:65:ee:4a:48:d2:db:3f:60:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141359
sbgp-ipAddrBlock: critical
IPv4:
103.174.227.0/24
IPv6:
2001:df7:da80::/48
Signature Algorithm: sha256WithRSAEncryption
ad:31:9d:6e:f4:08:6c:d7:61:f6:c7:6f:9f:ca:15:62:a9:93:
26:b5:75:26:1f:e2:a8:e2:df:59:63:eb:ee:5f:08:67:ff:11:
d2:98:6e:e5:c7:9a:11:a7:9c:17:4f:9e:58:8e:5b:e9:cf:df:
a9:5b:e5:90:d3:da:aa:7f:ed:08:60:b3:d6:0c:24:0d:15:ba:
fc:71:4f:11:39:b0:4b:f7:92:3e:43:11:58:b2:68:05:79:26:
60:45:54:d6:e5:3e:1a:53:0e:c0:1a:d2:04:d8:d7:e1:7f:fa:
01:65:ff:67:c8:40:0d:e5:cc:67:7d:2c:ea:c6:a2:c6:42:ee:
b2:10:91:1a:7d:c4:87:89:56:51:a1:31:d6:2f:08:b3:b3:05:
88:ca:b7:a2:52:95:78:88:ae:99:15:59:05:28:73:e7:fe:ee:
33:3e:0f:a5:ef:2c:91:33:1e:98:28:e2:85:c5:20:92:4c:13:
1f:f1:ea:ac:d0:f3:75:2c:73:76:ff:3e:39:6e:6b:b7:d0:9a:
cd:04:05:53:63:25:83:fa:da:6a:44:eb:22:31:a3:6a:80:df:
34:d2:dd:a4:ac:dc:a5:0b:94:80:0d:61:c4:50:8d:72:57:43:
f7:72:89:8c:23:bf:ce:15:b5:3f:e4:e3:92:77:98:96:1b:c0:
b9:f8:90:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:31 2024 by rpki-client on console-fra.rpki-client.org