Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
File: gBcCvJze9z33Ob-31L0ve4iF4Hc.cer (raw, json)
Hash identifier: 2H7X5TXkhoo8M2jYpdYbae++eH4X9Xl9Xb2TKBV2yQg=
Subject key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E31C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Mar 2024 12:57:03 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 142127
IP: 103.162.136.0/23
IP: 2407:1940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123676 (0x1e31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 6 12:57:03 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:b9:af:fc:26:45:ca:7b:7b:4c:92:a1:ae:
9a:77:3e:87:8e:9e:ec:9d:cd:8e:26:c2:17:a2:3a:
82:42:5b:7d:81:ec:e0:77:27:0c:07:18:2e:72:3b:
6b:de:11:ec:20:78:5d:02:f4:b2:a2:51:b3:10:05:
fc:07:e4:dd:2f:7d:e2:64:da:ca:c6:b7:f5:73:47:
c9:49:93:7d:60:e4:8a:77:e7:2e:c2:1b:e4:43:42:
36:fe:3c:75:55:e6:e5:5e:95:43:2a:13:32:1b:4b:
a8:f7:7d:78:3c:39:12:dd:37:e5:aa:ac:b8:ee:26:
9e:93:e5:dd:99:08:e7:2a:73:f5:e4:74:85:a9:b4:
ca:ac:6f:35:20:3c:de:75:16:82:35:ef:9c:0d:bd:
83:e3:2f:cc:e8:89:85:b0:df:82:f0:49:cd:cf:51:
ab:44:62:71:b9:1d:e9:2a:ca:80:d7:85:af:3a:0b:
b8:8a:85:f0:e2:63:72:f7:1d:9d:ee:b1:e3:43:69:
84:79:23:43:dc:8b:a1:45:7e:05:40:0c:c5:4e:37:
4a:a4:e4:e7:a5:af:aa:a7:dc:2a:7a:60:80:e1:60:
cb:9f:7d:a0:5d:e9:c5:a7:a8:3e:50:be:22:84:74:
60:77:d7:61:0c:f4:da:3e:c9:a8:5a:37:70:c8:b3:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142127
sbgp-ipAddrBlock: critical
IPv4:
103.162.136.0/23
IPv6:
2407:1940::/32
Signature Algorithm: sha256WithRSAEncryption
d3:4a:21:ca:54:dc:54:c7:aa:6e:91:11:6e:0a:60:86:d7:53:
39:df:31:5f:ae:6e:df:29:ba:e4:7b:a1:82:4f:02:ba:0a:2e:
91:15:0f:9d:87:79:c7:50:30:21:52:ef:48:69:d0:3b:fd:00:
fe:d7:d7:ae:79:d5:3e:7b:2b:9e:8b:62:0c:2f:6b:5e:f7:d1:
70:5f:b3:d8:6d:98:82:b7:12:ee:64:fc:57:38:90:65:a6:21:
21:12:0f:f3:fa:fc:a7:45:34:92:8a:0b:64:77:f3:67:fb:3a:
27:16:0d:01:ad:a9:0a:f6:e0:e7:a7:db:7c:9e:2f:56:f2:f8:
df:a1:6f:aa:19:20:5d:6f:9f:11:94:42:d4:0f:91:9c:27:c6:
ec:de:cc:25:68:1c:d7:16:8c:5b:a5:e5:98:b0:41:43:b6:58:
9a:f4:83:20:0c:5d:e2:93:a1:1a:a8:73:08:5e:71:ca:a9:00:
b9:3f:9c:12:55:80:7c:6a:1f:22:3b:ea:55:74:e5:81:0d:43:
de:a4:8a:5e:b6:d2:52:d4:ec:00:d2:61:8d:3b:ba:97:ec:65:
99:b2:22:c7:ab:8d:df:9e:12:cf:4a:92:8e:ca:af:3b:b3:32:
36:70:38:df:f0:1d:9c:5b:e2:cf:2e:f7:5d:d3:e9:65:35:4d:
6f:3c:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:08:46 2024 by rpki-client on console-ams.rpki-client.org