Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
File: ggn985rwLDua5QPyJddH5nqjzfM.cer (raw, json)
Hash identifier: Xr5qn1sKRKVIeDRC/HGsz//W29ghY7ScOjIEF8RxeCA=
Subject key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D3BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Dec 2023 14:23:52 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 135403
IP: 103.180.48.0/23
IP: 2400:5260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 03:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119738 (0x1d3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 22 14:23:52 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:ad:a5:bd:a9:10:23:f9:83:5a:fc:4a:7f:
0d:5c:ba:94:99:b5:a9:d3:46:e5:0e:42:51:bd:28:
b6:15:09:6f:91:ad:74:6c:7e:74:49:b4:51:88:d3:
e3:e2:61:53:c0:ce:c7:45:24:9b:7f:da:cd:56:7c:
ee:be:e3:67:52:44:26:1c:b6:26:5c:b5:ab:27:0a:
7f:1a:80:3f:6c:18:92:97:b2:4d:f3:94:eb:7d:27:
13:75:30:2f:84:07:34:4d:0c:15:99:f0:4a:44:4d:
b8:d7:f8:06:b4:29:f1:d9:68:07:65:ce:77:b8:79:
da:8b:1a:08:46:3c:1a:17:9c:b0:a3:ed:66:07:f5:
d3:ce:dd:29:65:39:8e:d5:f7:80:5d:68:9c:7c:58:
f4:23:1e:2f:71:92:ba:0d:3a:d4:ec:fe:e6:5e:61:
8c:7f:f3:8d:2e:ae:1d:d6:c2:9a:00:e1:e5:02:6a:
63:91:4b:cc:09:8f:32:a5:61:9f:c3:12:b7:1e:f8:
c8:86:39:13:a3:6f:62:8b:5c:52:ca:f0:9a:c8:c3:
60:ca:c3:57:8e:05:b0:f1:8a:f7:9f:fd:ce:09:10:
60:ca:47:ee:e5:d1:70:3e:72:e0:92:90:e8:72:c4:
9f:13:86:f6:1a:37:28:94:86:ae:4f:36:ab:c9:1d:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135403
sbgp-ipAddrBlock: critical
IPv4:
103.180.48.0/23
IPv6:
2400:5260::/32
Signature Algorithm: sha256WithRSAEncryption
1d:62:67:3e:e9:13:29:1b:11:94:db:63:67:1f:af:18:8f:ab:
d4:77:be:3e:c9:2d:ab:02:0d:3f:d4:f3:ab:5e:f9:60:8b:f0:
c3:9f:76:dc:b4:3a:63:64:bd:c1:59:b0:7f:4f:f3:01:e8:26:
0f:20:1b:c1:68:71:b1:97:a0:9d:dd:4c:c7:1f:2d:53:15:26:
f1:94:70:61:b9:12:b5:ad:c4:db:2f:ac:4c:14:b6:80:aa:63:
17:b4:95:bb:42:dd:28:b2:d8:8d:a6:ed:e7:5a:dc:27:a7:b4:
45:c5:94:0a:3c:11:1b:90:32:d9:6e:18:ab:66:06:cd:10:39:
d5:9b:d9:c4:61:f4:10:51:a9:4d:0e:55:43:12:b6:b6:86:e5:
50:bd:0c:2a:65:de:98:68:f6:7b:f2:52:65:1b:16:26:6c:6c:
d3:7b:0d:9e:17:c9:4d:d5:e8:24:b8:ae:f8:2b:4b:c7:89:7e:
98:7b:3d:65:0a:de:b0:ab:9b:db:48:ca:79:17:8e:f0:88:71:
29:0d:ec:73:15:3f:52:06:83:f8:d6:66:3b:e8:10:fc:54:2c:
2c:03:98:0b:5f:fa:b2:29:ff:5c:4a:58:33:2a:8d:6f:32:de:
01:a9:25:da:7b:48:16:ca:c4:f0:6b:37:55:72:d2:a1:aa:c8:
de:95:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:05:14 2024 by rpki-client on console-fra.rpki-client.org