Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
File: jnhDSe8t33hXX9VMx47YxFyXbL8.cer (raw, json)
Hash identifier: SiLTdM9xlMq6pGdTlJ9qyvdWU8OpKn8ZCShaPECPwIk=
Subject key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C896
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Nov 2023 21:32:59 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 139750
IP: 45.253.248.0/21
IP: 103.144.140.0/23
IP: 2405:6e40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116886 (0x1c896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 21:32:59 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:9e:09:83:61:01:97:db:c3:ba:20:73:55:
43:ea:ec:fb:ab:2a:38:4a:0a:1b:10:77:99:ee:5c:
98:cf:2c:74:b3:75:bf:a1:8f:de:46:7a:bc:92:a5:
1e:df:7a:72:d8:10:3c:84:dd:3d:41:fd:e5:9e:61:
28:14:b3:06:52:0b:15:5f:9f:fa:29:9b:98:2a:68:
b1:9f:cc:4c:29:eb:dd:79:ad:33:fa:cf:2b:40:e5:
3a:c0:87:c0:48:31:65:fe:8b:43:5f:95:8d:3e:8c:
ca:3c:3e:7d:32:1e:aa:7d:6c:91:2c:2b:b0:59:29:
74:9a:b3:41:7c:66:b8:eb:ba:8c:aa:90:dd:48:df:
10:ff:a5:0d:5f:a7:37:53:6d:db:f9:2b:55:a8:c1:
e5:77:0b:f9:af:4a:b5:77:88:c6:1f:59:85:85:1a:
47:64:3d:07:3c:3a:66:a2:d1:10:c3:3e:e8:c2:a8:
31:b7:f0:33:67:9d:6b:cc:14:bc:d2:72:4c:81:b9:
0a:d7:a7:4b:4e:c7:af:b3:08:02:8b:27:85:eb:70:
dc:9d:ef:3d:49:38:0d:64:01:9b:53:4b:a8:2d:83:
fe:40:4b:b0:4d:08:7d:f3:fb:55:4f:1a:e6:2b:e6:
33:d6:d5:ec:56:a6:67:e6:bc:a5:63:ff:16:4d:ad:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139750
sbgp-ipAddrBlock: critical
IPv4:
45.253.248.0/21
103.144.140.0/23
IPv6:
2405:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
cc:bf:f7:be:d8:24:62:fb:f6:31:d4:55:b0:45:5e:49:b7:3e:
a9:0b:68:91:f1:e7:6d:8b:9b:c4:a7:b6:3f:44:b9:48:6e:28:
c9:89:9b:80:fd:84:2b:f1:94:26:37:12:7f:27:24:4c:18:37:
d8:c2:85:0d:16:8b:e2:ba:59:31:de:c9:ac:85:d4:92:50:b7:
6b:dc:e1:3e:12:ae:b9:9f:fd:38:d8:54:60:75:23:c1:8c:22:
a8:d9:a0:19:f7:d8:25:4d:21:c5:fe:ee:b8:ce:e9:2f:cb:07:
de:2d:3e:7f:31:c2:98:8a:87:36:f9:08:37:49:ea:fb:73:62:
0e:e1:df:c5:94:84:c2:20:a8:82:95:38:48:61:87:b3:a9:60:
74:34:07:22:2c:86:0b:53:3f:2e:2d:0a:86:7e:02:86:cd:df:
8f:0a:51:f8:45:d4:ff:d0:87:89:78:02:0b:54:a4:a2:a0:e0:
32:0a:11:65:2f:fe:7b:cf:b4:19:e0:4f:77:2e:31:5f:6d:56:
ea:d4:40:e7:c0:69:29:dc:9e:f4:03:16:c2:9e:c3:ef:bf:1e:
8f:a1:19:7d:93:1d:59:09:c7:fa:50:fe:e1:b1:5f:ac:4f:aa:
ee:e8:33:16:3d:21:2a:f0:27:dc:99:40:36:d9:29:09:3d:6d:
02:4b:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:34 2024 by rpki-client on console-ams.rpki-client.org