Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
File: kBqfnorkBi5SGbdlLY6f7n7FrjM.cer (raw, json)
Hash identifier: IOaV5bmoMa7fBAdL8mD9yTUC87CmKtf4zKWJpcPnZJk=
Subject key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0206D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 Aug 2024 08:07:49 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 134717
IP: 103.197.192.0/22
IP: 220.158.244.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132824 (0x206d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 15 08:07:49 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:ab:31:11:59:15:df:57:c2:29:01:ba:e6:
cd:0f:ef:7d:cc:14:a6:13:a2:aa:b1:87:5a:2d:e6:
d0:f0:57:97:61:d4:c6:9f:b3:d4:c6:66:97:40:4c:
26:c1:74:ae:0a:90:ea:33:2e:71:b1:79:f5:f7:41:
8d:02:d9:30:c9:39:9f:0c:3b:41:6a:f0:ae:ba:86:
16:ab:db:e9:c3:98:8c:05:a6:29:98:4c:3f:11:da:
b3:9d:0c:1f:1f:96:1f:ee:e4:23:5d:4b:71:ab:e7:
ea:e1:eb:bf:7f:d3:35:63:a0:9e:29:fa:b3:31:20:
0e:3e:15:9c:de:e0:6a:5a:f0:50:39:f4:71:5b:ef:
43:b5:e6:52:26:0c:b5:06:5b:f3:55:ff:5d:cb:a1:
59:26:0c:ff:3f:14:56:66:1e:a0:68:7d:3c:5a:62:
10:d9:b9:fa:d6:97:e6:af:de:41:cd:c2:a8:6e:19:
f9:30:8a:e0:0c:12:87:9a:15:db:20:76:46:be:54:
c2:e1:9d:ad:ba:50:45:01:5d:57:6e:fa:c7:49:62:
f1:2a:96:ad:64:de:33:5f:96:8e:2b:14:f7:d1:f9:
05:48:2b:f2:3d:fc:f5:2d:b9:44:7e:06:2a:4b:00:
51:3e:74:37:ac:f9:b7:5f:be:a2:02:2a:16:ef:98:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134717
sbgp-ipAddrBlock: critical
IPv4:
103.197.192.0/22
220.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:2d:c2:a7:b5:7e:81:94:d4:99:cb:0f:79:97:f4:35:95:bc:
2d:88:9e:2e:6c:ae:ae:05:f6:bf:51:81:69:53:5f:1d:83:10:
f8:92:ad:b5:24:6f:d8:80:da:c7:ae:34:04:bd:9f:c1:50:e0:
d5:1f:f7:38:73:78:78:b1:e8:57:9c:52:02:2f:fe:e8:da:0a:
5a:1b:e7:d3:04:02:27:d2:49:1f:6d:7f:26:ed:52:02:ac:10:
03:13:34:ce:79:00:9b:3d:11:fb:d4:62:7a:bd:da:4a:f5:be:
55:a1:eb:65:f8:95:d7:93:18:ea:bb:c2:fb:e6:0a:f0:8c:70:
48:d9:8c:18:ab:b8:39:b6:3e:a9:65:1b:87:ef:f1:24:2d:42:
6f:1e:f0:b5:af:90:be:e5:5c:60:36:97:0d:39:56:67:9b:af:
47:ea:c0:f7:9e:51:f8:6a:6b:5c:7e:28:91:29:9d:df:84:41:
2c:96:ea:a0:4b:c9:ca:0d:0a:48:8f:c0:fa:bc:8a:1c:8c:c1:
04:08:a3:6a:7f:7b:b8:cd:cb:29:15:2d:6e:e1:4b:78:c6:7c:
19:62:14:49:ca:89:de:50:4a:c9:c4:c6:9b:5b:96:cb:2a:75:
ec:da:ea:ee:ba:f3:3d:90:23:c7:bd:30:3b:58:7a:21:df:a0:
bd:2d:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:41:57 2024 by rpki-client on console-fra.rpki-client.org