Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
File: gunGO3wseQh9WrEOid0oovfEnD4.cer (raw, json)
Hash identifier: ovoj7PsH+RdWGeHFE6Id/Fh/H805gSsS6ImZafjLlJ0=
Subject key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EAAA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Apr 2024 11:43:58 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 152684
IP: 103.129.14.0/23
IP: 2001:df3:a9c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 20:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125610 (0x1eaaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 11:43:58 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:5c:ac:ad:4e:64:c1:36:a4:0a:93:8f:57:
6f:4d:a6:73:b7:d2:45:ef:06:4e:6f:78:48:58:a9:
11:9c:46:52:40:3e:85:45:09:d8:32:54:c6:30:89:
b1:a8:73:cb:0e:1a:7f:df:6b:0e:cf:57:fe:10:ee:
d9:96:ac:3b:00:f7:1c:ef:86:99:15:3b:85:0b:6a:
a9:a6:46:9e:bd:90:77:20:e0:f6:00:27:64:9c:cb:
be:17:a6:e0:e7:bf:19:94:60:7f:35:13:e4:84:a7:
6b:7f:f8:13:c0:21:bc:d8:95:6f:e4:3a:9f:28:be:
96:f2:7f:3f:a8:d6:c5:96:cc:b7:07:12:da:2c:e1:
79:9b:e8:dc:f3:7d:24:15:35:13:94:fc:3a:dc:a0:
b9:44:af:b1:8e:3e:b7:1f:d8:fe:b7:b1:56:b0:bc:
7f:9b:79:9a:22:41:13:2a:ab:22:6f:c5:3d:6e:e7:
69:a6:65:fb:72:63:89:65:f5:aa:18:08:2c:78:1d:
07:ac:30:2f:95:66:62:e5:75:97:3b:bd:b6:a7:94:
fa:c7:da:1f:08:33:72:d7:53:12:fe:b9:41:0f:80:
6f:09:15:9d:93:5b:5d:89:51:48:da:94:49:39:4b:
89:b8:d8:30:3c:f9:ce:25:4a:e6:90:49:73:73:31:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152684
sbgp-ipAddrBlock: critical
IPv4:
103.129.14.0/23
IPv6:
2001:df3:a9c0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:06:37:eb:ba:7e:37:d2:4c:39:4e:e8:a5:f0:3e:7c:4d:66:
bc:47:2a:16:e2:d7:b6:65:35:6d:33:e4:d5:cf:5e:5c:8c:9b:
89:a1:e1:fc:87:e3:f2:b8:a7:68:f5:98:ea:37:71:ca:44:c4:
0a:23:6a:6c:3c:c5:52:a3:78:f1:59:29:ed:78:ea:40:72:a0:
ed:87:d7:b2:81:31:a4:a0:9b:30:23:24:39:d2:6f:89:03:84:
58:3b:6a:07:45:33:f9:cd:11:1c:64:09:cf:f2:b3:9a:c8:b6:
88:1e:67:45:64:1a:e6:20:1e:fd:7e:4b:89:8d:40:5b:f4:5c:
8a:de:05:37:6f:4a:da:ee:cf:0e:67:ab:9a:b3:6b:a1:ba:77:
81:69:1c:5f:8f:5c:07:1d:77:40:59:96:ad:56:1b:03:61:7a:
66:0b:37:cd:dd:ca:91:96:a8:43:96:95:1a:af:91:6c:69:a0:
14:80:88:f1:15:53:c6:4f:62:c2:23:e9:c8:d5:de:76:78:8b:
46:9a:3d:c5:4d:d0:05:df:06:ba:02:b5:4e:4b:07:af:55:d5:
8f:55:f4:0e:e1:09:a4:3f:56:87:23:d5:fa:21:b4:88:95:ce:
83:c1:2f:cb:f2:e6:28:91:88:e2:96:28:77:1e:9f:ed:ce:67:
ef:2d:64:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 1 22:08:27 2024 by rpki-client on console-fra.rpki-client.org