Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/guQjhs0B-IaA3TAN-_-ittLn5OY.cer
File: guQjhs0B-IaA3TAN-_-ittLn5OY.cer (raw, json)
Hash identifier: PAHj86ACl3aXLYqcnAFdXKged0NvufHRveSMsrIBZmA=
Subject key identifier: 82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FFB6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 12 Jul 2024 15:35:35 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 56067
IP: 103.30.124.0/22
IP: 119.59.96.0/19
IP: 2404:8240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130998 (0x1ffb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 12 15:35:35 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A919D530/serialNumber=82E42386CD01F88680DD300DFBFFA2B6D2E7E4E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:ff:d8:a3:db:b0:9c:c6:7b:8e:f9:ee:0b:
0b:dc:dd:d1:c8:6a:f1:f6:bc:df:99:42:79:3b:a2:
70:66:b5:f8:14:d7:d9:5a:9b:5a:3e:fe:24:e1:c3:
f0:0b:e6:0d:d3:36:62:e2:d8:ad:52:89:76:e3:46:
96:21:f8:ce:df:ff:43:9b:67:e6:6d:12:ad:2f:4e:
ac:69:0b:3c:9f:33:e1:87:12:0f:4a:70:75:f4:d0:
db:a4:2e:b7:f1:7f:27:88:a7:ff:25:ce:a7:09:f7:
63:85:ef:35:48:af:10:57:f1:c0:b2:2f:de:c2:b9:
a4:be:ad:d5:65:d3:86:b2:e5:1c:d5:6b:9d:bd:0d:
9d:d2:d2:26:32:8f:61:f4:9a:52:6d:3b:ce:60:0e:
5e:72:6c:40:ae:5b:69:6c:10:29:7b:a9:d3:a9:12:
51:8f:f7:a6:49:59:24:b5:cf:b9:43:37:24:39:94:
04:45:f9:b1:4b:8b:c2:9f:f5:18:bb:48:9f:0c:a8:
dd:eb:13:e8:6b:85:02:be:66:99:21:db:33:51:a3:
41:2a:d6:78:13:68:80:cc:b7:98:ef:15:c2:3d:7c:
50:8e:36:dc:10:95:a6:e9:c0:40:76:5a:a6:19:0c:
27:21:6a:b6:98:70:a1:aa:3c:9f:16:9c:b3:5c:50:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:23:86:CD:01:F8:86:80:DD:30:0D:FB:FF:A2:B6:D2:E7:E4:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D530/5E55F656406411EFA3C5B827C4F9AE02/guQjhs0B-IaA3TAN-_-ittLn5OY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56067
sbgp-ipAddrBlock: critical
IPv4:
103.30.124.0/22
119.59.96.0/19
IPv6:
2404:8240::/32
Signature Algorithm: sha256WithRSAEncryption
61:d6:d9:bd:73:34:e8:47:d1:94:14:c7:f6:5f:43:ad:38:2a:
11:d3:5b:59:9a:a1:0e:2b:1a:bc:b0:4a:ca:ea:66:79:2b:b9:
14:39:9e:03:cd:08:f2:0b:93:9c:0d:c4:04:b7:24:a4:dc:0b:
05:96:43:0e:b8:5f:41:28:dc:31:a3:28:77:9d:29:7e:69:ec:
be:91:fe:9c:be:25:9d:d4:ff:4a:1b:81:a6:dc:2a:f0:c5:18:
f0:a5:7e:36:80:a1:b7:f1:23:9f:8d:ba:32:3f:74:0e:12:6b:
dd:6c:70:72:06:0d:52:61:63:20:79:7d:9d:47:2d:70:47:87:
eb:91:d5:2b:ea:bc:80:0a:5c:cb:db:0c:7d:ef:ca:61:36:24:
83:3f:28:ae:b6:89:1f:f2:d4:cb:81:e6:12:10:71:91:f0:72:
99:71:ed:40:4d:ea:80:f1:e2:10:18:ab:3a:c5:01:98:2f:34:
e2:e1:8c:ee:2f:f9:21:22:2f:68:f4:ad:4d:b2:c6:0f:c3:e9:
7e:6b:69:6a:de:d2:15:54:48:18:6a:e1:b6:29:1f:67:36:66:
53:ce:86:5f:d9:53:56:0a:75:dc:20:29:51:a2:77:d7:f6:95:
39:3d:3f:c8:fa:d3:79:a3:bf:a6:c5:f6:a2:34:d6:df:91:dd:
49:c7:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:12:52 2024 by rpki-client on console-fra.rpki-client.org