Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4I4DlgkXscVMN6F0qxrnyCUdvM.cer
File: j4I4DlgkXscVMN6F0qxrnyCUdvM.cer (raw, json)
Hash identifier: xJKudqZDGLyDTpBx8UItm/85I4NW4eiaV2smnbzofLM=
Subject key identifier: 8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021947
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 18:48:17 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 133047
IP: 103.251.12.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137543 (0x21947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 18:48:17 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A916A1E1/serialNumber=8F82380E58245EC71530DE85D2AC6B9F209476F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:9a:30:48:53:80:8f:70:4b:d0:26:be:01:
8d:6c:69:00:9b:73:66:de:ab:44:ab:98:1a:4b:e6:
4f:04:d5:4c:50:e1:8f:a2:4e:b2:51:b4:96:c8:62:
a7:89:1f:56:31:01:f1:4f:40:9c:70:2b:13:15:ff:
c4:b7:f9:4b:3b:3c:cf:bc:22:b9:a2:6c:8f:f2:5b:
fe:5a:dd:4e:04:81:23:84:fc:f8:c1:e7:4b:c1:de:
fd:0f:1b:28:95:e3:2c:c3:6e:1e:46:6a:00:02:05:
ce:bc:7b:f0:da:18:35:64:31:e2:6e:b2:0d:86:07:
eb:1e:f5:76:f9:7c:9a:30:d4:22:d2:ce:11:0c:06:
32:8d:5c:df:a8:a2:73:db:2e:6e:94:ec:85:0e:e9:
b0:ec:76:0c:8f:c6:40:e9:fd:8b:7a:52:b3:f8:4f:
1b:01:9e:75:94:70:56:65:44:e3:0c:66:89:9f:11:
9c:52:65:e7:9b:de:05:62:1c:e4:4a:34:69:13:da:
4e:a4:1a:6b:8d:ef:46:1d:61:26:c9:3e:60:8a:cb:
68:3a:75:99:6e:bf:59:27:8b:40:c2:74:35:17:9c:
51:40:09:bf:2c:db:2d:c3:6e:24:37:6b:76:c6:ce:
e6:70:74:c1:e5:72:4a:9e:94:f5:13:a4:06:d0:71:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133047
sbgp-ipAddrBlock: critical
IPv4:
103.251.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:08:4e:50:ba:e1:e9:41:36:94:b7:44:59:1d:8b:a8:45:09:
a8:6a:fd:b4:2a:4b:cd:16:87:ba:2e:60:8d:ed:53:d2:25:c9:
d3:2b:59:91:70:28:87:42:28:2d:a2:6e:13:44:17:df:fd:ab:
2d:9c:b9:4c:66:ff:d6:df:2e:d8:1d:57:33:e7:c8:69:73:3d:
3f:6b:de:22:01:8d:0f:51:34:53:20:fe:20:bc:15:51:b4:e0:
d0:e3:92:0c:06:53:be:e7:fd:ec:dc:99:ab:1f:67:9d:95:4c:
4a:31:1c:ae:72:c6:ac:ec:b8:7b:4d:f3:cf:74:6a:c1:d3:84:
d2:1a:f9:df:3c:c2:43:29:fa:cf:74:33:68:8b:19:9a:eb:51:
71:a9:44:6a:55:2d:4c:5d:e1:5d:c7:22:fa:65:e5:eb:3b:53:
f2:69:dd:55:09:78:12:c4:88:f4:f7:01:66:d6:5b:4a:e4:dd:
d4:8d:f8:c3:d2:9f:92:73:bc:db:f8:c7:b5:7c:c4:85:86:f5:
b7:00:5a:4d:06:91:3f:fa:a7:79:14:6e:c9:82:9d:ee:90:44:
9b:04:6d:7f:bc:84:32:92:a1:7a:a3:ac:0d:8c:ee:d1:89:e8:
77:be:59:ba:80:62:8e:9d:6b:3b:e6:c1:b0:15:d6:bf:f7:ef:
6c:32:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:58 2024 by rpki-client on console-ams.rpki-client.org