Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
File: gxf8eoKw7oZSDfGP_VcpURbaXfI.cer (raw, json)
Hash identifier: A4WlrvmzuWfY2iIWFddPW9Z9ZNPBCkIIDG1//KG+2qs=
Subject key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02166B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 26 Oct 2024 15:22:03 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 45327
AS: 59241
IP: 116.90.64.0/21
IP: 203.20.152.0/21
IP: 203.56.87.0/24
IP: 203.56.90.0/23
IP: 2403:5600::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136811 (0x2166b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 26 15:22:03 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:4c:c8:fa:fb:76:6f:41:8c:66:14:be:bb:
ab:ef:44:d6:59:e0:87:cf:81:b0:ed:ff:79:dd:a8:
52:1a:f4:cd:31:c6:d8:c1:d5:6f:5b:5e:d6:8b:a6:
3c:a1:38:1a:c4:fe:fc:09:e1:d9:72:c7:8c:7d:b3:
5c:a2:04:1f:a2:79:63:58:36:33:44:0d:24:5e:d9:
e5:f9:b0:e5:e8:cd:ee:2f:0c:22:72:a5:d4:2f:13:
17:6b:83:93:e0:07:45:42:0b:4a:10:d3:8a:0d:16:
c2:9f:6a:38:96:22:5e:be:1e:24:f5:7b:42:93:b8:
fb:6a:b4:00:49:14:1e:ae:73:22:a9:25:07:1e:e0:
2a:15:85:5f:90:21:94:2a:c9:eb:88:47:96:fb:d4:
cc:d1:9a:9a:99:18:94:f8:f6:4d:cc:72:e9:a3:c6:
fd:85:b0:15:22:dd:d7:db:34:65:87:49:e6:9f:2f:
bb:7a:3d:98:a5:65:19:40:fc:09:ce:c4:9f:34:f6:
79:dc:28:6d:52:35:76:67:e3:a6:d9:62:56:57:fc:
f3:4d:3b:0e:69:54:8d:ec:8c:c0:30:b3:37:00:12:
d4:f8:07:89:9d:74:a5:92:50:fd:eb:8e:74:ab:8f:
49:ed:39:8a:70:87:1d:e0:3f:15:2a:f0:b7:5c:5a:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45327
59241
sbgp-ipAddrBlock: critical
IPv4:
116.90.64.0/21
203.20.152.0/21
203.56.87.0/24
203.56.90.0/23
IPv6:
2403:5600::/32
Signature Algorithm: sha256WithRSAEncryption
68:02:1d:d1:f3:b4:7f:4e:ba:4c:5b:bd:b8:0c:48:09:a3:09:
f5:75:4e:2c:f8:9b:19:76:42:09:db:c2:dd:17:6f:80:db:78:
e7:21:a8:29:03:e7:f7:8c:08:2d:d4:8b:ec:58:7c:c7:05:73:
ed:29:b2:f4:8f:8c:a6:35:0a:a9:5d:75:23:62:d0:99:c8:56:
37:98:5f:fa:94:d9:e1:d8:e3:ee:03:d1:9b:05:9d:00:44:c8:
e5:bd:d5:dc:66:6d:a1:79:7a:68:7c:53:11:b9:4c:3a:03:cb:
50:66:2e:c0:2a:ac:ad:50:37:72:44:94:52:8d:f5:58:79:0c:
a1:ff:ed:be:0f:69:4f:64:9c:e0:2a:dc:35:b2:de:13:bd:1a:
c3:82:a6:be:bc:f4:c2:60:1e:e6:05:1e:3e:a4:7f:07:75:0b:
3c:09:45:3a:24:fe:63:ad:34:09:b3:8f:34:fa:30:f8:58:20:
3f:4c:77:66:f3:74:d1:0f:8d:28:bc:7a:05:99:d8:e0:57:75:
24:1b:e9:a3:4a:51:22:b5:9f:da:78:29:6f:de:dd:da:c0:3c:
c4:04:c3:8c:27:f4:46:d0:0b:78:3d:c9:07:4d:c9:fd:65:1e:
ab:ed:be:00:61:82:91:ea:26:9a:d5:a9:f3:8b:ed:89:c0:09:
94:77:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:55 2024 by rpki-client on console-fra.rpki-client.org