Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
File: hoEbsmeu-FQA2-cpcCMtQRotmuk.cer (raw, json)
Hash identifier: tkyizCeNKaAn1EjQ1lqXrOJg0FU8o8rUHggqdl/zMQc=
Subject key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B462
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Aug 2023 13:54:55 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 58655
IP: 103.12.172.0/22
IP: 2404:7500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111714 (0x1b462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 2 13:54:55 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:1d:52:14:eb:48:10:f1:a2:19:9a:27:6f:
cd:a5:c9:37:17:e5:1a:21:f3:97:bc:90:5d:e0:93:
5a:6c:67:21:f0:fa:ce:1c:0b:8c:8b:df:43:73:04:
32:f5:17:26:37:66:14:3e:f7:37:14:d0:48:59:f3:
3a:03:97:69:44:8d:08:18:06:a5:b1:63:93:4c:fd:
0a:3b:4c:19:3e:2e:a8:b7:12:e6:af:69:31:21:be:
aa:da:f5:47:2f:af:02:c0:df:40:78:94:b7:b7:04:
2a:3a:a2:08:51:5e:26:b2:90:d6:76:c8:c7:f2:33:
e6:e4:4c:09:e8:02:ee:a6:5a:d2:65:b7:c8:70:bb:
49:06:60:0b:0b:7a:60:99:7b:4d:9c:a0:7f:76:1b:
38:22:f3:c6:f4:18:7c:3a:e2:4b:3f:6a:47:61:f1:
39:07:bc:36:7c:49:3e:2e:14:85:c5:98:d2:39:15:
1b:b5:c4:23:ac:87:df:d1:2b:98:87:46:08:ea:7c:
eb:b1:9e:86:da:86:f7:ea:a5:54:18:6f:55:43:c2:
69:08:79:cd:c5:13:8f:e5:5c:fc:22:89:d1:f0:4f:
f8:bf:2d:74:e2:75:06:ca:dd:51:d0:ec:0f:94:b2:
b2:f8:1d:c1:7c:fb:d8:87:bd:04:45:0b:08:3b:df:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58655
sbgp-ipAddrBlock: critical
IPv4:
103.12.172.0/22
IPv6:
2404:7500::/32
Signature Algorithm: sha256WithRSAEncryption
b7:e7:02:c5:08:ca:51:ad:c0:95:bf:11:3f:85:47:83:d2:32:
cd:8a:e3:8d:41:3a:02:23:1d:41:55:90:b2:c8:5d:8a:85:57:
dd:7d:90:09:34:ad:9a:5f:93:9c:24:a4:54:30:6c:b8:ee:84:
02:c6:0e:ee:02:04:77:f5:1e:3a:6c:1c:f4:3a:28:0d:4c:93:
96:c8:c7:bb:de:15:bb:81:04:01:6a:5b:fb:b3:db:e4:9f:2f:
3f:a3:9c:1b:aa:e0:47:ab:1d:e5:fb:39:a4:c3:38:75:d7:16:
db:6f:4c:2a:4d:ce:04:6c:ef:75:df:2b:c9:85:b3:e9:12:5d:
9e:6a:c9:4c:58:fc:54:4d:1b:dd:1e:33:08:cc:50:70:2c:7b:
a8:82:b3:5f:7b:d6:ca:d6:33:7b:f9:37:ae:e5:21:10:a1:e7:
16:92:02:c4:08:3b:0e:45:0f:ac:80:c2:dc:98:1d:cb:06:89:
92:d2:4a:f8:a7:75:15:31:21:ed:bb:f2:f4:4e:ec:45:43:36:
65:c1:fb:71:94:31:17:a3:df:98:3c:5d:91:0a:1a:78:57:20:
a8:62:db:4f:c3:e5:9f:99:46:b5:40:99:28:a4:59:66:ce:e6:
70:5c:f2:fc:13:58:12:82:7d:17:8e:f6:6f:12:0b:bf:b8:d9:
99:16:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:58:01 2024 by rpki-client on console-fra.rpki-client.org