Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer (raw, json)
Hash identifier: KZDmyoGLZVXLbh2kfIEGEms9IPEJRMTnY8/I+fgM9Qg=
Subject key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D6BA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jan 2024 14:44:23 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 137239
IP: 103.105.212.0/22
IP: 2403:240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120506 (0x1d6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 4 14:44:23 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:6f:f5:d9:49:0b:61:88:fe:1f:7b:51:1b:
13:ca:d9:fd:0e:9b:7b:ed:40:70:74:56:91:af:ed:
e7:03:62:c3:45:b1:e4:1a:8a:25:57:8d:46:3c:15:
d6:3e:fd:1c:6c:2b:84:06:19:f2:17:a1:3e:27:e3:
59:3a:1d:92:33:39:62:63:2c:07:10:9b:5e:3e:87:
6d:be:2d:46:11:6d:8a:9b:d0:42:77:29:7e:2e:5d:
10:b7:fa:aa:f4:db:25:21:b7:68:a5:13:e5:be:d9:
fd:0b:cf:ed:1c:d5:bd:20:a9:26:be:15:8d:a0:a9:
39:d1:b5:a6:7b:b4:75:0d:f2:e4:a1:cd:a1:07:7e:
10:f0:01:86:90:b9:b0:11:b7:b8:32:da:51:cd:27:
45:48:21:ef:be:a7:d0:f4:5e:0d:56:f8:d0:89:33:
d5:ab:b5:ec:96:ff:51:a1:e7:18:6b:ab:1d:88:e3:
dd:fa:a4:e5:4f:43:42:1f:28:c6:6e:6f:77:da:7d:
82:1d:3a:a1:58:32:a1:35:f5:bd:49:cd:02:c4:12:
34:46:ad:fe:96:f0:a0:dd:c1:4e:4e:7f:56:36:63:
4f:9d:2a:d1:1e:fc:40:c8:c6:fc:de:f0:94:0d:79:
8d:f8:a2:80:18:03:57:cb:82:76:77:76:93:74:6a:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137239
sbgp-ipAddrBlock: critical
IPv4:
103.105.212.0/22
IPv6:
2403:240::/32
Signature Algorithm: sha256WithRSAEncryption
9e:9e:33:54:a0:6b:da:bc:e5:4d:d3:e5:e3:20:5f:ff:b8:e7:
ee:e9:1e:41:0a:80:7d:ab:c6:74:64:38:14:bc:ac:61:ed:71:
a1:eb:35:b2:29:41:3e:fb:c2:b0:dc:a2:f6:77:47:16:2a:d9:
07:f2:96:94:04:6e:fb:0d:98:c9:f9:c7:4c:ca:8d:82:3f:91:
0e:39:76:fb:f7:90:12:85:fa:ac:bf:2b:91:34:0a:30:a8:8a:
ab:26:6f:05:1c:0a:5e:6f:5e:e0:90:8d:10:e1:9b:fd:2c:3e:
da:b7:36:6d:79:71:4e:6d:80:5e:bc:54:ec:7e:bb:75:7a:65:
af:ce:e1:23:ae:9a:6e:02:d2:71:88:b8:82:c5:53:eb:cd:b5:
08:4c:ea:1f:ca:2e:2f:99:0b:48:80:90:48:63:86:b9:8f:fb:
1c:c7:eb:a2:ef:6a:95:17:dc:8a:e1:d2:4e:64:1e:64:ad:65:
98:7f:c0:26:ed:75:b7:4c:b2:64:4b:bf:a5:09:5b:be:f0:61:
de:5d:90:1d:4a:f8:dc:01:38:02:2e:e8:47:2d:19:49:bf:89:
24:1c:b9:24:58:71:04:b4:f2:2e:48:00:8d:8e:62:cb:f6:83:
78:34:52:07:7f:cf:56:76:0f:8a:47:02:24:8a:a7:5b:26:0a:
ea:f3:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:44 2024 by rpki-client on console-fra.rpki-client.org