Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
File: jVvm9QWF2v57SAa6CeIlsMxvKQs.cer (raw, json)
Hash identifier: i6e5hNXO+KqI9q64pYtbO2+NiJt6PFxM862t6VYl+xc=
Subject key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0214EF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Oct 2024 12:27:52 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 140504
IP: 43.230.6.0/24
IP: 103.20.124.0/24
IP: 103.49.173.0 -- 103.49.175.255
IP: 203.190.216.0/24
IP: 2403:ae80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136431 (0x214ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 21 12:27:52 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:9f:6d:4c:13:97:9c:5b:e1:f1:da:1a:22:
95:99:cc:a1:8a:55:b3:fc:36:64:db:e5:f0:72:1f:
c8:cb:de:41:50:ac:59:21:45:32:7a:4c:9f:80:b1:
21:4d:0b:94:9d:48:93:70:73:84:d3:96:8c:ca:4c:
34:5e:e1:e4:88:85:b2:f1:f5:92:f5:78:e9:86:2a:
2c:25:fb:dd:87:43:9b:bd:af:ed:51:10:9c:bf:7d:
27:1a:93:93:c8:7e:d3:b3:06:69:94:8b:3e:aa:79:
c0:f4:84:b9:2e:db:93:04:b4:62:11:3d:3e:f6:f1:
ca:d9:d6:83:d5:1e:9e:db:7a:aa:87:6b:42:37:f7:
5e:a2:76:f1:71:03:05:6f:07:eb:cc:aa:78:9f:9e:
bb:ed:bc:14:71:cc:47:dd:e9:15:3d:1d:50:94:93:
e6:df:e8:ea:4e:6a:73:41:2b:53:2f:1f:20:fd:2d:
bb:ae:13:b2:bc:b9:69:43:b4:27:b3:e0:32:f4:45:
37:4b:f1:66:3a:8c:9c:82:83:76:ef:ac:a3:3c:c0:
ad:a2:35:ae:0b:a5:6d:32:04:b6:7a:a3:de:32:60:
f8:8a:a3:f8:7e:b9:1c:e0:b8:04:d0:09:c3:e7:cf:
5a:e6:75:41:51:85:eb:4e:15:bb:1b:62:81:6a:45:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140504
sbgp-ipAddrBlock: critical
IPv4:
43.230.6.0/24
103.20.124.0/24
103.49.173.0-103.49.175.255
203.190.216.0/24
IPv6:
2403:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
d0:7a:55:48:9d:8d:f9:dd:56:cb:a6:42:03:f9:f7:04:26:d9:
80:77:f3:52:a3:ed:ac:97:02:c1:57:3f:b6:0f:0b:a6:08:7c:
cf:dd:7d:08:7f:d0:0a:35:18:2d:40:69:cd:52:2a:95:86:28:
ae:3e:c3:5c:ca:07:73:46:18:0b:8b:71:a5:b6:df:2d:3c:f7:
1d:9a:f0:55:f9:b9:53:8f:42:f1:5e:55:17:ce:18:42:22:f9:
29:96:24:bc:72:41:20:bb:f8:00:3e:55:7d:95:38:f1:5b:67:
71:6b:4c:24:ba:fb:1c:b9:a5:b6:eb:70:2e:84:0d:20:b4:40:
9b:90:a9:b8:fa:d3:a6:3b:09:a0:9f:c8:07:10:99:e4:dc:6d:
ea:ae:72:12:73:9b:fa:79:95:7c:d4:52:f0:10:91:9a:35:30:
b9:1a:98:c9:07:47:bf:8d:11:31:2a:07:92:91:f8:d7:e0:1b:
19:e2:c5:eb:80:c5:25:56:5c:0c:44:64:72:f5:e2:55:fc:af:
42:64:05:17:44:2c:17:bc:ee:4d:45:4a:0f:aa:b8:e4:6d:8e:
75:2c:7d:26:e8:17:e5:66:dd:21:17:59:11:4a:f4:cc:21:2e:
da:c3:a6:6a:14:41:d5:da:81:5e:f4:f1:44:17:05:65:7b:7e:
49:82:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:59 2024 by rpki-client on console-ams.rpki-client.org