Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
File: gp2nBxh7qgC6hmJHVioV_n23Vyo.cer (raw, json)
Hash identifier: 2i2vbC7NQAmZk3Wav/CYbnrebdLGKIt94IHveA6sjlI=
Subject key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 011F59
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Jul 2021 02:48:49 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 140887
IP: 103.152.228.0/23
IP: 2406:36c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73561 (0x11f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jul 21 02:48:49 2021 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9183CF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:d4:55:35:7d:44:d9:e4:52:ae:2c:0b:02:
6a:46:83:63:29:60:b9:ae:61:ff:48:9c:31:19:5b:
3c:87:29:75:95:f5:f2:cc:ae:4c:31:65:58:93:83:
1b:73:c2:fa:c3:c1:b1:91:49:1c:0e:41:ad:f8:21:
bb:7f:f2:b0:8f:7b:5a:bb:a8:e3:fe:6a:ea:46:59:
23:dd:82:14:19:7e:d2:4c:ce:01:a7:83:25:42:98:
c8:31:9c:e6:76:d0:8f:83:6e:20:c1:33:16:c5:4c:
70:4a:b7:65:87:73:95:23:49:82:a8:45:f8:3b:b3:
85:6d:61:5b:26:8d:0d:2a:af:a1:85:2a:07:4a:94:
93:7f:3c:3c:9a:e3:59:62:56:d9:91:e0:af:d4:7d:
9b:16:a5:60:ef:f9:c6:b5:c6:19:2e:f1:60:39:93:
98:47:34:5a:9a:50:0a:1c:d0:71:ca:a6:70:fe:55:
9c:e2:68:c1:63:46:e9:00:1c:f2:28:7b:fc:9f:da:
4d:1c:2b:68:39:24:8d:2d:ed:ea:1a:45:a4:09:22:
ea:4e:87:f0:d2:42:ea:40:32:29:1a:73:26:5d:0a:
2c:0c:10:49:56:8e:5f:6a:0c:e4:6b:9d:c3:73:0c:
c8:74:71:85:5d:d5:61:a8:11:71:77:35:13:1d:99:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140887
sbgp-ipAddrBlock: critical
IPv4:
103.152.228.0/23
IPv6:
2406:36c0::/32
Signature Algorithm: sha256WithRSAEncryption
76:5a:96:1c:d7:58:45:6e:58:44:6e:2b:78:2d:8c:21:d1:8c:
85:f0:76:1c:76:1b:e2:66:c7:fc:81:95:ab:4e:80:0f:de:8a:
90:56:af:23:84:13:6c:f3:94:ce:2a:bd:02:b4:94:18:76:12:
f5:7b:ea:95:66:79:85:f2:77:63:fc:38:f6:c9:38:37:6e:01:
1f:d4:31:db:02:cd:6a:cc:c8:4b:7b:d4:e3:db:dc:77:04:6a:
55:75:ae:59:07:c4:ee:f9:2c:e9:06:74:11:34:9a:94:d7:8b:
a7:d8:7e:42:b5:d3:06:43:a2:ee:e6:67:9b:89:b4:9c:ce:4c:
a0:ea:62:51:52:7f:0d:7c:1b:f3:58:b0:ca:4f:b2:56:60:f7:
2e:34:66:c1:7f:e5:b3:a3:a7:e7:68:41:07:26:a7:b0:a0:58:
ea:b1:e9:d1:a3:ce:58:66:1e:a2:c8:47:8c:d5:2d:26:8b:42:
0c:09:41:1d:89:ee:55:ce:dc:6c:25:59:41:2d:c6:3a:48:d9:
6f:1b:cb:55:d2:83:fd:73:d4:2c:2c:88:1a:ca:4e:2c:bc:a8:
3e:d4:c2:c3:d4:d3:b6:5e:40:44:c0:2e:d0:77:44:a1:3e:fd:
31:a2:61:8d:ce:8b:f9:49:05:9b:af:a0:2e:74:9a:9b:84:49:
39:46:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:57 2025 by rpki-client