Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
File: hoEbsmeu-FQA2-cpcCMtQRotmuk.cer (raw, json)
Hash identifier: 24jGuY15CXgsdy1ei/xYZjvxBuHvXuqjr9l12b6ay58=
Subject key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0204E0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 04 Aug 2024 13:30:55 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 58655
IP: 103.12.172.0/22
IP: 2404:7500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132320 (0x204e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 4 13:30:55 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:1d:52:14:eb:48:10:f1:a2:19:9a:27:6f:
cd:a5:c9:37:17:e5:1a:21:f3:97:bc:90:5d:e0:93:
5a:6c:67:21:f0:fa:ce:1c:0b:8c:8b:df:43:73:04:
32:f5:17:26:37:66:14:3e:f7:37:14:d0:48:59:f3:
3a:03:97:69:44:8d:08:18:06:a5:b1:63:93:4c:fd:
0a:3b:4c:19:3e:2e:a8:b7:12:e6:af:69:31:21:be:
aa:da:f5:47:2f:af:02:c0:df:40:78:94:b7:b7:04:
2a:3a:a2:08:51:5e:26:b2:90:d6:76:c8:c7:f2:33:
e6:e4:4c:09:e8:02:ee:a6:5a:d2:65:b7:c8:70:bb:
49:06:60:0b:0b:7a:60:99:7b:4d:9c:a0:7f:76:1b:
38:22:f3:c6:f4:18:7c:3a:e2:4b:3f:6a:47:61:f1:
39:07:bc:36:7c:49:3e:2e:14:85:c5:98:d2:39:15:
1b:b5:c4:23:ac:87:df:d1:2b:98:87:46:08:ea:7c:
eb:b1:9e:86:da:86:f7:ea:a5:54:18:6f:55:43:c2:
69:08:79:cd:c5:13:8f:e5:5c:fc:22:89:d1:f0:4f:
f8:bf:2d:74:e2:75:06:ca:dd:51:d0:ec:0f:94:b2:
b2:f8:1d:c1:7c:fb:d8:87:bd:04:45:0b:08:3b:df:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58655
sbgp-ipAddrBlock: critical
IPv4:
103.12.172.0/22
IPv6:
2404:7500::/32
Signature Algorithm: sha256WithRSAEncryption
cc:24:46:be:ef:49:7e:16:69:04:07:8e:29:3c:80:7c:87:41:
73:e1:0b:d7:f3:76:54:53:18:47:a6:bb:36:4b:da:a5:fe:ed:
11:94:91:9f:3e:00:cc:ff:bd:96:76:34:e5:ee:f1:07:76:44:
be:92:c5:49:23:99:25:b3:ef:40:92:ae:e0:a1:44:18:23:d7:
b6:1b:7e:7b:5e:ad:fe:ab:1a:c1:2e:e0:dd:08:8c:07:ea:29:
15:a9:90:5c:90:ca:29:61:35:8c:e1:9a:03:c6:5f:5c:c0:3e:
3c:09:68:ac:cc:63:ca:c7:62:94:92:89:ec:ee:26:e0:7e:ae:
90:4e:24:00:42:83:e9:1e:ef:62:0e:59:94:4a:c1:90:91:45:
b1:33:55:fe:62:9f:78:6d:34:ea:36:1e:6e:88:bd:56:4a:cd:
e2:33:5d:86:be:cb:ef:7e:94:9e:e0:5a:48:71:ab:7a:4c:a8:
ed:e4:20:b9:b0:14:f8:7d:b5:67:36:d7:cc:aa:12:c2:a7:55:
08:14:b7:23:00:be:d9:45:1d:3f:d2:64:3e:c8:96:e4:b3:aa:
5d:84:0c:2c:51:b7:a6:20:ae:4c:d5:12:3a:2a:3f:72:a7:64:
3c:1d:7d:58:25:2f:87:e0:55:bf:8f:05:3e:83:aa:1c:ad:cb:
a6:f3:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:08:06 2024 by rpki-client on console-ams.rpki-client.org