Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
File: iOe1QfQimNbptRZdllJGzBzB9aI.cer (raw, json)
Hash identifier: cqFzBcb7x5i6Q5CDXEGClKb5fVXIscb0nq0lg4bvRIM=
Subject key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E086
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 24 Feb 2024 17:25:50 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 138575
IP: 103.133.140.0/22
IP: 2404:4d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123014 (0x1e086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 24 17:25:50 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:33:ed:59:7b:50:8a:19:f5:73:77:ec:2d:
29:d1:bd:ad:6c:e7:e5:55:e8:d0:86:f9:eb:17:47:
70:3e:17:6e:b3:97:13:8e:40:f0:e4:2e:bc:83:37:
24:a1:2b:90:f7:e7:e0:2d:07:31:a5:f0:f6:d1:dc:
dd:46:58:38:ce:44:69:6a:39:ab:01:9f:9e:91:aa:
0d:bb:01:8e:10:77:7d:0a:97:0a:09:b0:48:c8:e3:
89:d3:5c:1a:01:dc:79:74:f5:9d:a2:ef:f5:cd:74:
85:91:c0:76:62:c6:92:53:81:ef:d1:f1:7d:27:cc:
82:c1:76:8a:0b:36:10:dd:8c:e4:81:f6:e3:68:da:
cf:65:82:79:d6:30:35:53:5d:e7:97:30:eb:17:22:
1c:4a:cb:f1:8b:0d:2b:30:37:81:d4:67:cd:78:4a:
fb:f2:08:ec:5d:fb:e4:30:a6:ae:aa:b1:59:4b:ec:
ea:6c:85:c3:62:13:c7:6c:0e:28:69:9d:a9:98:99:
aa:2a:73:e3:c9:83:92:6d:da:d7:d3:ef:14:f4:38:
b2:eb:8a:ba:70:a6:6a:2b:65:ed:a6:ed:92:a7:23:
46:ce:05:7a:fd:70:16:f4:ae:09:1e:97:17:44:04:
cd:ca:2c:98:22:9d:44:a2:54:c0:33:68:e7:0a:85:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138575
sbgp-ipAddrBlock: critical
IPv4:
103.133.140.0/22
IPv6:
2404:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
c6:10:51:0a:0e:0e:c8:e6:50:22:5b:a8:26:9b:58:a1:82:c9:
8d:da:f0:8e:9a:9a:ca:79:fa:16:bf:d9:85:11:78:c9:09:80:
22:cb:9b:12:ef:3b:a0:9e:b0:e5:89:ac:c6:fa:57:01:a4:7a:
96:26:01:bc:56:ab:22:0c:e6:68:1c:92:8f:ac:07:6e:64:f3:
e1:3b:15:34:cc:49:9e:f0:34:11:76:a0:8c:cd:34:71:25:2c:
4b:8b:c8:ea:68:70:1c:6a:16:93:a0:67:d3:42:13:53:18:bb:
95:44:5c:f3:c4:20:2b:da:19:e7:a8:b0:ca:d9:7c:b4:17:95:
05:11:9e:35:dc:f0:47:65:79:63:77:e1:29:39:6b:2c:e3:5b:
d6:a1:f3:71:6a:18:fc:95:9c:47:37:27:60:fa:1a:c9:04:94:
32:01:b9:09:3e:d5:b1:06:ae:f3:0f:40:8c:d2:6c:c5:21:f7:
e6:1f:53:ef:fc:d9:72:90:e2:9f:1f:6a:9e:50:37:6d:ef:1a:
9d:e4:d2:ec:ed:55:47:10:3c:85:b4:2a:92:95:93:17:69:ba:
7b:27:d4:f4:96:7f:ae:be:03:19:dd:bc:5d:17:e1:22:29:10:
65:23:2a:6a:47:88:d3:52:52:b8:47:6c:08:26:84:00:25:24:
bb:46:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:22:03 2024 by rpki-client on console-fra.rpki-client.org