Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer (raw, json)
Hash identifier: ansSZosCyr8z49ordcZXjsCYRFn2NIqnNUvhdteOKAY=
Subject key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A4FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 May 2023 19:01:22 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 137575
IP: 103.113.244.0/23
IP: 103.115.22.0/24
IP: 2405:2440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107773 (0x1a4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 24 19:01:22 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:30:eb:74:e9:35:48:6a:7f:56:40:38:dd:
1a:75:c4:9c:bc:dd:fd:e8:c7:e0:93:5d:fd:62:c5:
40:fe:aa:cf:34:71:54:4e:c3:d3:6a:b1:f1:30:a8:
73:c3:4c:39:68:3d:43:9b:5d:0c:81:75:64:04:f0:
98:dd:03:1c:3a:f0:bd:3d:4f:90:e9:44:c7:a1:79:
7b:d3:30:7e:5d:36:72:0f:45:b6:7f:e3:f0:4b:09:
1b:4c:aa:21:1f:c2:4d:ba:7d:84:a1:00:60:50:f6:
13:24:ef:37:7e:39:fc:7e:bd:40:b9:b4:00:1b:a9:
5d:60:1f:ff:0b:58:c8:dd:63:8c:fe:e8:f7:6a:e8:
17:f6:77:f5:6a:35:7e:a1:9c:3f:33:58:1d:55:2d:
53:f4:08:38:61:d3:e2:b6:a3:dd:04:68:68:2b:be:
ee:1d:09:41:90:74:71:23:b0:fa:00:a2:c3:7f:a3:
12:68:be:fc:29:3d:af:ba:5b:d6:49:e1:4f:03:a2:
8a:a0:44:13:0d:18:52:a5:4e:a2:ab:ef:a6:8d:d9:
22:df:70:f9:1d:98:76:1b:e8:bc:fa:1c:8f:ad:1d:
50:84:38:c0:92:dc:3e:63:c4:e0:da:7a:64:62:1b:
b5:b7:be:0f:db:76:d9:e7:e6:51:ca:89:92:f5:d9:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137575
sbgp-ipAddrBlock: critical
IPv4:
103.113.244.0/23
103.115.22.0/24
IPv6:
2405:2440::/32
Signature Algorithm: sha256WithRSAEncryption
d6:9d:cd:0e:c6:e8:3c:81:ab:bf:70:8a:21:ef:b7:3d:8f:63:
f6:33:ac:2e:37:76:81:74:b3:cb:69:b3:f7:dd:8d:52:c9:47:
1c:4a:1a:04:7f:28:f8:f5:9e:c5:ac:41:14:ea:a7:28:54:33:
b7:c7:66:c8:45:39:61:89:51:f3:58:00:dd:d9:4c:62:48:83:
a6:9d:27:97:94:64:56:67:6e:75:aa:f4:5a:b4:8c:8e:86:c2:
d8:8b:c2:5f:26:d4:c4:8b:a5:fe:bc:95:df:48:7d:e9:80:97:
a6:44:98:4b:a0:5e:dc:91:ea:a8:af:d6:30:12:fe:81:c2:4c:
b0:92:73:69:c1:52:d3:30:9b:a9:6e:62:46:15:17:82:be:29:
53:a1:01:a2:58:0b:6b:f3:11:6d:ff:29:42:00:0c:46:a0:19:
d1:ce:87:0f:79:9b:5d:a1:b7:cf:93:b2:4e:f1:38:36:7f:54:
23:0a:3d:46:84:87:3a:f4:de:6d:cb:5a:70:cc:fd:cb:c7:d3:
3a:98:40:dc:3b:b0:65:27:dd:eb:b3:40:f1:f1:e3:53:9f:4a:
88:18:ca:5c:62:23:ac:18:1a:dc:8f:34:16:a3:ca:41:8e:45:
a3:36:45:65:b5:55:80:93:ef:2c:f2:4e:a4:aa:c8:13:6d:64:
d3:d1:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:34 2024 by rpki-client on console-fra.rpki-client.org