Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer (raw, json)
Hash identifier: SASw9wuajArrHmpzVqPt4ap/IQvJvvW5n7zG+B7+vzY=
Subject key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FA77
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Jun 2024 15:16:59 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 139043
IP: 103.138.222.0/23
IP: 2001:df3:3380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129655 (0x1fa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 21 15:16:59 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:c7:48:f7:be:1f:c1:69:4c:02:a1:5b:8f:
5c:89:df:4a:d9:76:4a:b2:49:7e:65:ca:ed:5d:8f:
4a:4f:3d:df:fc:fc:cd:20:71:fa:58:8b:b8:e5:9a:
d5:2d:11:61:64:72:fb:4a:06:b8:64:4f:5c:ac:c1:
75:03:16:54:aa:89:04:fa:f4:75:08:2d:7e:9b:c4:
2a:af:da:a9:81:a2:23:fb:5f:25:ef:fe:db:11:bd:
29:3f:0b:f5:73:63:c9:14:ce:68:b6:f3:8a:53:3a:
c0:c0:19:03:68:e6:ea:e8:4a:02:5a:4f:aa:96:15:
e6:79:e7:86:47:5a:3b:9b:e6:a8:d7:c1:df:47:60:
9a:79:87:eb:db:07:ca:4a:2f:bb:7f:5a:05:5c:ab:
4d:02:fe:6a:2a:76:b0:ad:28:a4:8c:0f:a0:e6:fd:
7d:84:4d:b0:b3:6f:b7:8f:b3:51:43:06:d6:09:23:
50:a5:be:9d:05:67:59:3d:92:23:52:e5:45:a5:64:
97:cf:84:e6:7b:ae:00:35:44:32:8e:bb:88:69:d1:
b9:f9:17:54:5d:60:28:05:51:e3:6b:73:ad:60:f4:
69:d5:0f:1b:5f:d2:e2:14:01:81:9c:e2:13:37:0e:
13:4e:84:04:e5:b8:b5:ad:cc:89:fd:9c:10:f3:47:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139043
sbgp-ipAddrBlock: critical
IPv4:
103.138.222.0/23
IPv6:
2001:df3:3380::/48
Signature Algorithm: sha256WithRSAEncryption
1f:f6:25:51:c1:ee:44:6b:02:8b:aa:a8:91:5e:3c:e5:24:c8:
c2:0a:7b:e7:f4:ba:82:b8:c6:5a:27:a3:62:dc:74:d7:80:88:
e2:34:4a:37:14:b7:00:cb:00:85:2f:2b:18:52:bc:22:73:f4:
e7:cb:8e:10:fa:ca:6d:4a:ae:27:5e:a8:ee:03:2f:6e:8d:fc:
af:7f:a8:5e:7f:f2:49:4a:3f:1d:e0:69:e3:6b:e0:1f:0b:7e:
c9:d5:a2:a6:09:f4:fd:c8:3f:bd:92:fc:02:f6:41:44:48:97:
2f:0e:65:5d:e3:81:ed:a4:03:b4:3a:e2:77:b9:85:f0:fc:88:
0d:c3:ba:7a:ea:68:62:78:5a:13:ac:23:01:1e:1f:73:5a:31:
0b:e3:99:69:d4:0f:64:e9:75:75:22:b6:a5:d8:24:22:9c:70:
03:e5:db:da:f1:b6:a5:71:0e:44:32:c8:c8:37:e9:ab:24:18:
f1:97:88:0c:db:3d:59:60:3b:43:c0:00:41:28:2c:41:47:c6:
64:54:c4:ce:eb:67:1c:33:ac:d2:b8:fc:8e:2a:31:44:ee:c6:
7f:59:a5:c0:90:94:d7:97:32:fb:47:f1:e1:1f:7b:89:cf:cc:
fc:f6:82:b3:43:50:50:84:0b:31:62:6a:7a:f5:a5:1e:95:d1:
ae:a7:2d:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:56 2024 by rpki-client on console-ams.rpki-client.org