Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
File: fcUQye6vE3-r4XHlViRtskYeJxU.cer (raw, json)
Hash identifier: fygUb+EFXRnCjRzgfJ32p+pvfWDHgnDUKfB+nY+Dci8=
Subject key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D25B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 16 Dec 2023 15:36:38 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 55845
IP: 103.232.31.0/24
IP: 202.74.32.0/24
IP: 2001:df7:2800::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119387 (0x1d25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 16 15:36:38 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:97:f8:c2:f9:df:0f:df:21:d2:54:80:92:
45:2d:a5:e9:93:94:c6:14:a8:57:bb:c7:56:9e:b0:
5f:25:11:e4:7c:b2:59:3f:4c:af:3c:77:0d:a1:fc:
21:ee:6a:8f:50:53:a2:2b:d7:91:3b:85:c4:6d:c6:
68:d5:a3:90:59:cd:4b:1e:c8:a7:37:53:f3:37:4e:
52:05:de:06:78:fb:b6:cc:67:be:8e:a1:aa:7a:9a:
b1:a8:a4:23:f9:2e:b0:2e:6f:b6:d0:fd:14:f5:80:
c1:79:01:1b:18:f5:ad:b3:ed:e7:6d:83:4b:fd:c4:
e0:da:73:e7:18:35:1f:33:58:cd:c5:62:f5:10:3b:
3a:57:fb:3c:f2:9a:2e:d1:c9:77:5b:55:ff:ad:0c:
c8:b6:bc:4e:5e:f1:4b:db:5f:50:cc:8f:44:3d:9f:
53:46:3a:4f:f2:ba:80:b1:95:f8:90:5c:24:ac:14:
d8:36:b2:4a:6d:09:81:a2:b5:b6:9d:39:41:29:c0:
b7:96:47:3f:39:45:5b:b2:b9:cb:fc:19:61:0a:85:
43:ae:6f:aa:61:af:a1:88:f2:c9:c6:b0:d4:1c:bc:
03:b5:ef:79:47:b4:17:57:c0:17:32:96:a3:e3:29:
c2:2c:ee:e4:4b:42:22:7c:83:e4:11:fe:7b:6b:21:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55845
sbgp-ipAddrBlock: critical
IPv4:
103.232.31.0/24
202.74.32.0/24
IPv6:
2001:df7:2800::/48
Signature Algorithm: sha256WithRSAEncryption
16:ae:45:7b:45:6a:fa:48:79:e7:e8:ac:ba:94:81:df:54:de:
f8:4c:a8:46:a6:cf:cf:cd:e7:5a:b8:62:3d:d0:c7:78:3d:e1:
37:fb:42:b0:35:83:ba:60:df:39:6a:c4:db:83:06:cf:d5:f3:
d5:93:24:3f:87:07:ee:34:92:70:d3:10:dc:67:1d:5d:72:40:
88:52:3f:94:8b:df:ed:03:20:3a:b2:a1:b3:c3:1a:29:3a:02:
43:6b:d5:e9:6e:94:c9:e0:40:66:98:48:65:d9:1f:1a:bf:62:
9d:08:8b:cd:2f:78:02:59:c8:98:07:c2:9c:72:bb:11:35:0c:
ae:22:a1:17:c6:31:cd:3f:eb:04:f3:02:bb:dd:cd:d3:27:a0:
ec:48:b7:12:ec:16:34:7f:ee:03:b7:63:1c:0c:d2:9c:0f:52:
c9:06:80:88:7f:ad:c4:e7:9a:9c:06:36:8e:4b:65:6f:fc:a0:
7a:bd:7a:d1:9a:4b:5d:8e:2d:f1:4e:bf:b7:0c:41:82:ce:33:
f7:2a:f1:a1:48:b7:1a:b0:36:74:dc:64:9a:46:06:48:2d:28:
40:f3:ea:44:ba:f6:1e:5c:15:aa:08:47:22:42:fe:df:3e:bd:
a7:48:33:c5:df:76:18:f0:69:5f:ef:c9:18:c7:dd:79:73:07:
39:d1:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:19:00 2024 by rpki-client on console-fra.rpki-client.org