Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
File: j4RQ6hjtZj3XYxNayPnBormb2W0.cer (raw, json)
Hash identifier: w01/ceOltUPWgtoHuoZDYJC9Su9UAPO4xrr5qxaOVYg=
Subject key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E48B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Mar 2024 14:45:07 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 103.207.28.0/22
IP: 2404:2780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 11:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124043 (0x1e48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 14 14:45:07 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:f4:21:e9:00:a1:93:ed:87:8e:92:9c:67:
7c:ab:51:b2:58:43:76:6b:df:81:de:24:82:07:cd:
06:9d:ff:06:01:e1:c5:cf:33:92:6a:c1:c2:6c:39:
be:18:27:92:62:57:fc:05:65:3a:9b:42:05:1b:6e:
25:53:49:2c:9f:53:3f:3b:8b:79:94:b9:1b:63:8b:
4d:a0:a1:8b:26:81:3e:35:49:bd:ce:11:b6:a7:03:
17:c2:17:46:cc:fc:7c:d7:39:0d:7e:5d:b2:03:c2:
8e:07:43:6b:98:66:4c:c6:10:4a:19:be:96:16:cc:
25:14:6f:7a:9b:17:16:0c:7f:78:e1:68:cd:3f:94:
a0:4d:17:d5:c6:7e:6c:7b:76:44:34:c8:c1:92:2f:
fb:1d:72:5e:76:4c:67:ac:8d:08:4f:bc:b3:14:8d:
c2:50:1c:7d:6b:18:9c:49:ff:04:31:66:bd:d0:97:
0a:dd:7a:b0:ea:9e:2c:0b:d6:4a:bc:76:70:37:5f:
e4:94:3b:34:ec:9e:63:e0:ed:7d:5d:d5:73:44:68:
24:c7:fb:b2:f9:7d:31:ac:98:d4:63:bb:43:ed:06:
9e:8a:d8:67:37:db:1e:bf:f1:0a:45:b4:2b:eb:6c:
f7:77:56:d8:de:18:02:b9:6f:93:93:83:30:ac:1b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.28.0/22
IPv6:
2404:2780::/32
Signature Algorithm: sha256WithRSAEncryption
07:35:09:77:b4:b5:af:df:84:ee:80:8e:c9:71:09:4c:92:e3:
31:f4:cc:67:ea:b1:ea:e1:20:f4:6f:c8:fc:f8:b2:b6:ab:6e:
3a:4e:d4:77:a9:4c:96:af:e0:8b:a4:92:81:9b:41:7e:4f:51:
36:f2:d6:cd:40:7d:bc:4d:6d:dc:59:be:f6:de:b8:fa:3c:88:
e1:80:6d:af:18:56:60:91:70:2d:dc:15:59:f5:9c:da:fc:fd:
2e:6d:e5:60:60:f7:a3:6d:62:61:86:ef:e3:e3:41:ce:7b:b9:
e1:1f:2d:4f:10:7c:75:2b:9e:14:dc:36:41:f4:f7:86:c3:6b:
ea:66:70:5d:bb:73:cf:91:50:06:dd:97:6f:2c:98:a7:e0:71:
71:cb:90:44:73:7f:3a:75:dc:ac:64:f6:d5:30:3e:80:2e:2d:
8e:4a:6e:e5:81:49:35:43:0f:21:f8:63:c9:bd:a3:b9:78:ef:
19:ef:4a:e6:6d:90:be:27:b0:bf:3a:d9:02:75:56:98:cf:64:
3d:af:1a:1d:72:1f:fd:1b:14:51:af:ba:96:27:87:2d:d4:41:
39:dc:7b:d8:e2:a0:d5:1a:9c:3b:f6:dc:9f:60:05:56:ba:16:
ec:47:e3:2b:83:2f:b2:5d:8e:3f:1e:09:59:9c:89:95:61:10:
82:02:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:21:02 2024 by rpki-client on console-fra.rpki-client.org