Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
File: kFj-3Oxfh289_hYZQxnBRcnAzLU.cer (raw, json)
Hash identifier: cejDWya+K5bYanTWR/BhTQrDYkj/kMBxCpx7h+Qmc1o=
Subject key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D137
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Dec 2023 18:23:11 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 55941
IP: 202.94.78.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119095 (0x1d137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 11 18:23:11 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:0c:e8:5b:23:27:81:d5:0f:b6:3c:71:63:
bd:21:7f:34:62:c3:da:88:8f:8f:34:54:16:92:5a:
a2:81:95:ac:ef:73:69:de:cf:e8:43:38:4e:ce:3e:
f5:01:6e:6f:28:27:ba:ff:e6:ea:93:b8:d3:48:b4:
f2:2b:59:92:49:5b:26:20:d1:cb:39:24:f3:06:88:
22:cb:c0:f3:98:52:78:4e:20:ce:45:e1:86:bd:0e:
87:87:94:54:65:98:ef:5b:20:54:9b:6e:6d:e0:18:
2f:89:bd:76:d4:32:26:de:31:74:f1:5e:06:61:3d:
e7:bb:ea:66:38:e2:f3:a6:45:e0:69:a8:9c:34:4e:
cd:20:7e:40:08:4f:1f:1b:96:6a:bd:a9:a4:f7:7e:
ee:16:f1:65:83:09:fd:0f:31:73:60:69:3b:0e:ad:
98:d4:44:75:7b:27:61:83:2e:12:47:49:0d:2b:c5:
e8:af:df:75:1e:93:99:14:78:cf:09:72:0a:0b:c7:
87:6c:9a:fa:6c:c4:46:ea:d8:2f:69:9c:15:54:74:
ed:d4:bd:75:d6:37:53:86:44:11:a5:3d:a8:92:48:
81:ae:bc:c5:48:86:70:c0:b9:d9:89:0d:5d:bd:57:
4b:6c:51:c9:3e:e2:5f:0b:59:07:1f:7f:e2:d0:ed:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55941
sbgp-ipAddrBlock: critical
IPv4:
202.94.78.0/23
Signature Algorithm: sha256WithRSAEncryption
14:42:fe:ce:00:20:b3:f5:4c:23:2d:80:c5:7a:59:31:a5:37:
d7:74:0c:a0:50:58:b0:f7:cd:d9:f4:70:18:6b:f2:50:e6:f8:
e8:6c:86:4f:1e:4b:2b:af:1c:d1:20:17:4f:86:c8:09:ea:0f:
45:6f:3a:d9:d5:18:9b:42:ec:a1:56:f3:8d:8e:f6:ea:4f:5f:
d2:b2:f6:08:7a:99:50:6a:de:b9:e9:1f:19:5b:d4:8e:b9:b5:
e4:8d:85:03:1a:10:e9:bf:e0:14:1a:42:e2:18:34:58:ea:81:
0d:0e:8d:8b:b7:9f:21:87:06:99:f9:5e:3a:f9:b7:e5:49:4a:
0c:cb:f6:01:f5:f6:31:bb:ac:a2:0a:91:75:93:0e:47:b8:62:
e1:d5:8e:9e:3c:f1:a4:28:94:59:91:14:42:56:c5:67:24:81:
e4:e6:57:2b:d1:28:d6:2b:3b:75:7c:e0:35:92:ca:51:6f:48:
9d:63:b4:2c:7f:22:f0:c1:fc:01:77:cd:ed:ce:3b:86:36:68:
3c:ed:d9:38:97:98:e1:2d:fc:b1:4d:d4:70:fa:be:91:22:b6:
dc:92:47:bd:95:de:20:65:09:02:03:4f:30:9d:2f:8a:43:41:
9d:bd:c2:66:12:a1:64:0b:f3:9e:88:a3:95:1b:b8:74:e3:33:
87:c0:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:19:03 2024 by rpki-client on console-fra.rpki-client.org