Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
File: f95kLEQhft58x2dxm6Z9A20X0Es.cer (raw, json)
Hash identifier: UFVHgEaZVsrE00tYjbKDaKwprsUHR9RpqQ/xEiiAsco=
Subject key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020240
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Jul 2024 06:10:10 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 132227
IP: 103.214.248.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131648 (0x20240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 25 06:10:10 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:2e:23:37:19:e0:13:a1:7b:80:a7:c9:4b:
89:ab:66:a8:e8:99:50:c7:23:d8:da:fc:51:3d:a7:
9d:10:9d:9d:cb:3a:08:28:55:fd:8f:87:30:ae:b6:
11:5c:74:66:a6:99:de:89:bc:cc:40:e6:17:98:c9:
e0:8c:4a:a5:d5:4e:e3:67:87:c9:85:2f:57:3e:ed:
80:ac:98:b9:1d:8e:23:bb:d5:b3:13:d3:84:4e:37:
16:56:42:36:6a:95:a9:03:2e:6a:8d:99:3c:8d:b5:
55:97:52:f4:e6:42:cd:88:43:ca:4e:fa:f5:16:e4:
6b:28:ad:48:72:61:13:ca:d0:28:6d:ab:b2:e2:ff:
ed:28:01:87:01:42:68:fb:d1:0b:f6:08:38:03:48:
1e:d4:9f:6d:a6:8c:56:1e:1d:17:70:83:fe:96:8a:
86:df:aa:ee:58:0b:81:ed:dc:00:d1:70:a2:07:04:
9f:17:10:96:eb:59:df:5b:49:2e:40:08:2d:54:13:
54:50:53:51:84:a3:fe:43:db:ff:79:b0:91:53:3b:
b1:d4:cc:1a:5c:16:6d:f5:2e:fa:eb:e2:0b:09:11:
51:53:23:a6:e2:db:11:94:ba:b2:8c:68:f5:2d:12:
73:8c:ad:94:87:50:a8:86:6c:e3:2a:44:16:88:cd:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132227
sbgp-ipAddrBlock: critical
IPv4:
103.214.248.0/23
Signature Algorithm: sha256WithRSAEncryption
30:21:95:fe:ba:74:31:93:e6:1b:8e:84:1d:57:16:a4:8b:85:
43:65:06:28:68:6a:9c:4e:1a:7e:be:2b:02:d4:05:f6:f2:ab:
8a:3d:de:6e:70:74:7e:a9:b5:75:2d:b3:dd:f2:b7:5a:33:2a:
99:a5:49:df:c6:ba:8c:11:a2:f8:52:7d:76:7b:2a:30:2b:76:
90:33:32:da:b7:c5:13:ca:c3:3c:6f:61:46:12:38:74:ed:54:
97:d6:a4:f0:57:c4:9c:8c:9d:d6:d4:15:f7:ca:ef:2b:66:6a:
54:bc:43:04:de:2c:8f:d8:0f:fc:85:dd:c5:3f:8f:a6:b3:4f:
44:ab:90:57:8a:65:14:97:6e:b2:21:82:f6:88:35:29:6f:45:
0a:ed:5c:f7:58:62:4e:4c:3b:d9:ad:23:8c:88:5e:ef:86:0c:
ef:f7:b3:43:44:1b:e2:7d:56:0f:df:83:bd:5d:9f:1c:aa:1a:
41:29:f3:ca:b7:59:8e:3e:f8:03:9b:17:b7:bb:df:0a:df:0f:
1d:4d:75:3b:78:76:d2:b2:d0:c8:95:3d:61:f5:a1:d9:dc:71:
2a:82:d9:82:2e:79:cb:23:cd:01:3b:0f:78:27:eb:99:16:21:
ff:85:b0:8e:ce:c0:fd:ba:4b:fb:bf:fc:60:b1:e0:28:29:2a:
d0:b6:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:40 2024 by rpki-client on console-ams.rpki-client.org