Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
File: gL6TDjBkmxKs7o3EC1dat93mSUU.cer (raw, json)
Hash identifier: fYw6rXsYr6NO08WB9M+21zxutbIygGtF38u+Xvg3tkw=
Subject key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C2DC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Oct 2023 09:36:37 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 151844
IP: 103.249.114.0/23
IP: 2001:df2:ff40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 03:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115420 (0x1c2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 9 09:36:37 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:04:45:c4:e4:e4:40:e1:1d:2c:e9:60:90:
d8:09:22:5a:0c:fc:05:c5:03:df:34:e1:19:58:d5:
f2:a8:e2:ac:d6:19:b6:b3:02:3f:80:e1:91:8d:d3:
27:53:dc:5d:17:9d:cd:df:38:4e:ea:ab:52:33:47:
b6:8e:fd:b1:5a:4d:b7:5a:32:69:12:49:e1:30:16:
44:c4:0d:e2:31:be:1f:2e:c5:a6:35:48:ac:64:22:
f5:4f:5b:b3:ff:e6:de:e9:ef:23:cd:aa:de:e2:71:
9b:87:4d:ec:99:89:0a:6e:8a:4b:33:1c:0d:dd:97:
7b:1d:50:0a:67:06:5f:fc:d7:b4:be:1a:78:14:49:
94:30:45:59:f1:9b:f1:07:91:c1:63:68:e5:81:9b:
7b:8a:f4:84:a1:f4:66:8e:89:19:a3:ab:de:1d:dd:
99:35:75:09:bd:91:5e:08:9a:bc:55:30:ea:c1:ea:
99:2a:fa:f5:9d:2a:a5:f8:3d:4d:30:64:2e:a8:4a:
3f:5e:8f:1b:d0:59:e0:74:b1:6d:54:a2:ad:31:80:
7a:5d:46:1b:69:38:fb:1f:94:76:ed:df:3c:5d:2e:
ff:91:b3:ea:8e:72:6a:43:e4:0b:29:b7:d0:bd:48:
f1:97:e8:a4:8e:b6:66:06:72:07:92:06:ed:a8:7f:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151844
sbgp-ipAddrBlock: critical
IPv4:
103.249.114.0/23
IPv6:
2001:df2:ff40::/48
Signature Algorithm: sha256WithRSAEncryption
6f:92:8e:9e:36:00:9f:0e:4f:ea:ff:01:a1:a2:15:74:79:70:
06:77:17:90:44:aa:0c:97:5b:00:34:d3:3c:f1:d9:af:e9:a6:
a5:43:d6:32:92:e8:64:58:b4:bd:e4:3c:25:ee:1a:cd:f9:24:
24:db:13:23:00:42:d5:dd:c3:ae:ad:d1:8c:df:92:13:7e:a2:
7f:1f:d5:0e:90:6e:db:b3:91:3e:37:24:38:d8:76:99:83:d6:
c5:7d:ff:5f:0b:96:1a:ce:4e:47:2f:ec:f5:98:3f:d8:ba:7a:
71:07:f0:b1:ef:38:33:05:ae:65:55:c1:58:58:b2:41:c7:aa:
79:14:37:cb:56:99:66:0a:cd:02:2c:8d:82:d1:6a:1d:9e:6b:
b3:43:02:60:ce:7e:55:46:27:63:89:32:c0:be:34:12:9a:c0:
a0:c8:68:25:0a:ad:1c:f6:81:cf:2e:12:24:59:05:5f:b3:22:
b0:6e:7f:09:47:7e:fa:01:c6:74:a1:5a:fd:e0:17:06:cb:be:
4e:55:86:16:1c:4a:9e:cf:4f:5c:00:6a:50:fd:da:95:c9:82:
39:34:47:d2:5e:b0:8c:e7:63:8c:17:41:30:77:7c:b2:8b:be:
7e:f1:86:42:15:da:ea:c8:85:ce:4b:27:72:55:a9:32:87:02:
5e:b5:42:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 04:05:13 2024 by rpki-client on console-fra.rpki-client.org