Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
File: jTeJSwlB7P1NawXh4UyrhWmHsF0.cer (raw, json)
Hash identifier: 6VzOzm9N7a24B3DHisJWf8F2b7H8woyZQlZNDVJO6Og=
Subject key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EBCB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Apr 2024 15:06:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 103.55.212.0/24
IP: 2001:df3:c400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 03:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125899 (0x1ebcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 16 15:06:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:48:12:05:91:ef:6e:18:bc:f3:52:1e:e9:
02:7a:92:fc:5b:e1:9c:53:73:be:32:1e:24:76:4b:
05:06:2f:4c:ac:2e:27:5d:be:0c:fd:af:9e:ae:e8:
b0:41:89:0a:76:b4:64:d4:66:09:7a:7a:6b:92:88:
22:42:66:a7:ce:cb:2f:fe:33:06:4e:11:dd:89:bf:
81:22:dc:50:f3:ca:aa:0b:99:ff:c9:55:bb:16:64:
69:12:92:e0:b6:e1:22:c3:c7:90:ad:62:6d:83:7a:
31:d4:a7:e9:80:3c:20:6c:26:0c:e6:41:48:88:bb:
d1:5a:fd:40:a2:ae:36:27:19:9a:a1:dc:36:cd:5c:
3b:d2:0f:d5:9d:50:a2:fe:5e:e5:6e:7a:b9:be:05:
94:47:44:3c:c8:04:7c:41:e8:70:40:c8:ad:04:1e:
6f:53:30:6d:6a:ec:4c:16:cd:2f:4a:8c:38:97:fa:
bb:5f:71:a9:d3:90:29:6e:bb:12:19:e2:dc:e5:68:
57:5c:9f:42:4b:9c:a2:74:f0:54:06:7c:3c:f4:ea:
58:e3:38:c3:26:95:45:0b:66:d8:5e:e8:73:11:05:
ef:f8:28:17:ed:27:6b:a5:f7:b2:53:c0:cf:fe:19:
e4:29:8a:2b:27:ae:8e:d0:22:0e:06:f3:d2:9e:8f:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.212.0/24
IPv6:
2001:df3:c400::/48
Signature Algorithm: sha256WithRSAEncryption
8a:ec:bc:18:94:39:8f:cd:0e:41:a8:7f:e0:70:cf:a2:c9:18:
01:b7:c1:d2:9c:bf:da:fb:de:f9:35:03:58:98:28:1f:5b:2e:
6e:a8:51:2e:ab:3b:d8:9d:23:29:46:3f:c3:a1:6a:1b:e2:c2:
26:70:83:e6:54:7d:99:1e:e2:c8:aa:f8:f9:73:42:cf:de:c5:
8a:00:9d:e5:f4:0c:d4:ed:55:69:8c:b2:3a:71:65:b1:e0:0d:
48:7e:b4:ee:b0:39:49:cc:64:ce:76:6a:72:5d:d8:d3:9b:05:
40:98:93:06:b2:40:d4:94:8f:dd:9c:56:35:03:66:34:da:83:
f7:c7:49:77:7d:0e:13:cb:ca:01:24:11:3c:f2:fe:46:c5:2f:
03:fd:b6:32:5d:83:e8:3b:a1:0e:4d:08:15:43:70:13:da:e9:
8a:41:78:40:45:09:bc:b0:d2:b2:53:bc:1e:9a:77:30:bb:6e:
91:73:27:ba:5d:b2:27:f5:06:ca:88:e1:03:20:88:6c:df:b0:
eb:9c:d5:d1:0f:b2:eb:60:bc:81:f8:45:a2:c6:8b:f9:00:17:
da:4b:bb:c8:f1:46:aa:59:54:16:e5:1a:a4:6b:de:ac:08:96:
a3:b9:e3:fa:35:8f:b9:f6:89:7e:0a:a7:9d:6d:13:da:1f:ae:
e1:37:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:07:22 2024 by rpki-client on console-ams.rpki-client.org