Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
File: iiZW272QAzaEH_UDU2_5kY_rJcY.cer (raw, json)
Hash identifier: vVJcBPnQuWL/SL9WmgzYk/WSozrxZQSGekoTdZhK1Hc=
Subject key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A787
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Jun 2023 00:59:33 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 9554
AS: 135436
IP: 103.219.172.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108423 (0x1a787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 00:59:33 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:93:04:a7:09:65:cb:0e:c6:89:20:52:e0:
50:2f:54:88:c0:49:83:3c:cc:05:47:ee:23:ab:39:
e8:65:f1:23:64:54:bb:53:bc:e7:9f:3a:81:56:b6:
2c:c3:66:73:88:78:c9:28:5f:70:d9:68:8b:fc:e3:
64:38:33:c9:70:99:ba:ce:e9:16:68:3e:a9:32:1d:
1a:e8:c3:ee:23:a6:52:06:49:dc:24:aa:3a:00:67:
67:5d:18:87:4b:c8:b0:bb:99:63:c0:5e:a0:44:18:
d0:6f:e1:0f:1f:c6:da:71:70:21:0e:49:6e:28:36:
76:e6:78:d3:3f:af:a3:b5:f4:5e:0f:4a:4b:b8:07:
e3:86:a6:f7:e5:c1:3b:e3:bc:e0:30:10:0d:81:97:
65:83:af:26:6d:79:49:f9:8c:fe:ba:4f:21:ef:54:
2e:20:22:77:12:57:46:3c:b0:d9:71:a1:0e:b3:27:
dc:8b:12:91:4e:96:06:e7:4f:8f:ed:4e:95:9a:d3:
e9:a2:88:32:97:2b:96:b3:bc:68:44:27:1f:6b:72:
ab:21:ef:cd:d2:e6:91:84:46:78:91:94:12:6d:37:
d9:86:a8:a1:e3:87:b9:b6:3e:67:56:33:54:89:22:
1d:e1:da:d7:57:b9:e8:1b:7b:32:3f:b8:ca:44:e5:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9554
135436
sbgp-ipAddrBlock: critical
IPv4:
103.219.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:04:8a:93:33:06:0d:89:37:ee:8a:6d:b7:e5:ce:3d:20:40:
72:8c:4c:c3:f5:09:ea:43:b3:7c:e9:3d:b8:0c:53:0b:2e:f6:
05:38:9a:32:8b:8e:91:0d:2d:58:a0:60:c4:30:b0:8b:da:64:
7d:20:b8:2b:77:a8:06:4a:0a:85:87:2b:9f:26:dd:e4:46:56:
00:34:e7:33:1f:01:aa:cf:8f:1e:1a:83:5c:98:e3:9d:a3:5b:
61:42:c0:a6:07:bd:84:d2:1c:73:bd:72:db:96:f6:37:35:91:
5a:6f:11:6e:9d:43:ee:d3:66:d0:6a:fb:be:0b:90:3a:f0:2a:
61:eb:51:ad:bd:cc:c5:22:05:4e:24:2f:f8:85:50:f5:a6:cc:
1e:02:cd:4a:ea:2f:d2:db:d5:8f:d5:9c:47:33:01:57:40:84:
6a:d4:b8:e4:75:dc:0c:95:9c:b3:cd:3d:52:38:49:04:8a:a4:
87:a9:35:f4:4f:28:28:e5:c3:54:49:5e:bc:fa:d2:20:59:cd:
8a:78:2f:95:38:e3:39:b3:bc:64:ec:1b:95:84:f7:79:43:45:
ab:cc:9c:85:fe:14:e4:65:0e:47:3b:fb:7f:78:2b:06:33:b6:
c5:b5:77:d1:85:8e:fa:c7:56:40:4d:48:64:2f:34:0c:c8:08:
10:c1:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:06 2024 by rpki-client on console-ams.rpki-client.org