Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
File: je6uhW6V886s4RLAoeqXukWlekQ.cer (raw, json)
Hash identifier: 5+y/WVEO+Lru1VwXOeqC6cRK4M6sRA3TCL1Vq/CQTsY=
Subject key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01DF17
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 Feb 2024 20:00:36 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 45648
IP: 27.34.240.0/20
IP: 43.254.160.0/22
IP: 103.228.220.0/22
IP: 111.125.192.0/23
IP: 111.125.200.0/21
IP: 111.125.212.0/24
IP: 183.87.212.0/23
IP: 183.87.250.0/24
IP: 203.201.60.0/22
IP: 2400:d280::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 08:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122647 (0x1df17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 15 20:00:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:86:91:5c:72:1a:cb:9b:ac:4c:f1:cc:d9:
99:fe:39:01:f5:37:f0:04:bf:85:7c:b3:ea:a0:9a:
48:3a:6b:05:d2:f6:73:ea:c3:d4:6f:30:5e:dc:a0:
81:25:6b:94:08:93:18:64:10:b9:a6:02:b3:7d:d3:
35:e9:bd:bd:be:a6:e9:75:85:7c:d5:d2:69:e3:71:
54:5d:ef:6b:3c:05:08:17:d0:d1:fa:8b:31:0f:e2:
91:ee:87:e6:a5:70:6f:7a:4b:f6:d0:6c:6e:dc:0e:
f9:12:7f:79:63:f0:80:6e:aa:6e:0b:a0:f8:a5:5d:
5d:6f:27:63:9b:97:a3:b7:b4:95:41:d1:fb:bb:f7:
dd:bd:e0:4f:19:82:f2:2b:f3:6f:32:d3:1f:d4:99:
d5:c4:85:8e:fa:15:0f:46:8b:08:d9:94:03:84:bf:
98:22:08:9f:fb:b7:26:52:b4:74:c5:a2:69:92:83:
2c:af:08:50:59:11:45:67:c6:d8:75:c7:b4:09:95:
0c:22:6b:3c:4d:4a:26:16:b9:d4:a7:20:e6:0b:d5:
f9:e0:d6:70:df:9e:89:e6:14:9a:3e:3d:1b:2d:b1:
11:3f:83:65:cc:e6:28:1d:64:ed:8e:bd:15:fb:03:
47:82:f2:95:64:4a:4d:a6:f6:24:2c:9d:a6:82:6f:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45648
sbgp-ipAddrBlock: critical
IPv4:
27.34.240.0/20
43.254.160.0/22
103.228.220.0/22
111.125.192.0/23
111.125.200.0/21
111.125.212.0/24
183.87.212.0/23
183.87.250.0/24
203.201.60.0/22
IPv6:
2400:d280::/32
Signature Algorithm: sha256WithRSAEncryption
c3:34:53:cd:e4:d9:74:af:b9:91:dc:65:c8:a7:92:07:25:1f:
02:7d:20:a1:44:19:2b:46:01:cf:0b:9b:3b:f5:43:07:58:88:
15:c9:43:5a:69:20:2c:65:14:a3:86:da:1d:92:43:1a:89:a7:
9e:58:54:18:09:ad:7e:05:c8:49:02:9e:61:41:a3:f1:4f:97:
45:37:d5:bf:1d:3c:bb:c6:3f:a0:e3:d4:aa:98:76:64:15:4e:
96:ea:68:56:f7:0e:ac:44:ec:af:56:35:2c:7a:73:52:ec:c6:
6b:6d:f5:73:96:31:e3:78:88:8c:aa:ed:d5:2c:b8:df:cd:9a:
ac:43:a6:c2:ee:83:28:cb:5c:9a:ab:30:0f:a6:c8:e0:56:b2:
4d:ce:ea:d7:03:a7:1e:c3:01:4c:18:8a:a9:66:ea:36:66:5b:
6b:8e:e6:fe:c8:1c:b1:86:10:b7:78:50:ae:89:b1:0f:74:fc:
de:1c:f8:ef:06:03:c9:6a:26:c5:08:a7:44:65:a4:65:61:4e:
78:38:e0:08:d8:32:bf:f8:85:aa:13:15:d9:32:40:e5:65:f6:
8f:b0:d9:fb:66:cc:0e:f6:d4:ff:b9:a9:3b:44:0c:b0:2d:37:
b7:92:d4:17:33:e6:c9:71:52:81:2f:21:13:83:85:92:5c:62:
8d:89:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:35:53 2024 by rpki-client on console-fra.rpki-client.org