Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
File: kN_cE0DUTo_iVh19jeSe71QGEII.cer (raw, json)
Hash identifier: 0U7AjnuOSdm/n+UHdkIjDv3lVYhhjLprDE7FvqECTGI=
Subject key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020288
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Jul 2024 15:34:34 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 132329
IP: 103.12.168.0/22
IP: 203.217.136.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131720 (0x20288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 26 15:34:34 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:d7:52:8a:26:07:72:32:f1:66:b0:b5:f4:
9a:8b:54:97:7f:ee:19:e1:33:ec:71:aa:fc:66:ff:
b3:83:f1:dd:47:41:dd:6d:83:23:17:c7:ac:e4:b3:
0e:76:ce:69:67:85:14:45:3d:40:20:5d:77:85:7a:
f4:78:27:7e:f5:2e:3a:70:ca:91:ff:05:47:1d:3e:
a2:01:d8:64:08:6c:c5:14:76:1f:a3:65:04:61:ab:
bc:74:bd:65:7a:59:88:55:c8:a1:ac:ac:7b:ed:64:
c7:48:ac:19:98:e1:c0:2b:f5:38:b1:b9:ef:41:b5:
ea:2a:83:a7:62:da:f9:14:3d:fb:3f:0d:38:2b:24:
87:78:f8:3e:64:46:ae:44:82:5a:b5:7e:6e:26:ce:
56:50:98:dc:1d:95:a6:be:1a:b1:34:60:61:81:0f:
66:da:a2:e0:cc:ea:9e:ed:59:b9:cc:3b:c2:de:30:
86:71:98:02:80:7d:53:da:3c:13:af:0f:98:96:fc:
e4:e8:a5:0a:fc:23:8c:a7:59:8e:00:a8:58:42:46:
dc:81:07:a3:99:bb:dc:6f:60:0b:0b:fb:8d:25:98:
d1:d4:31:e4:4a:34:7a:71:a2:c3:0b:76:c0:aa:f3:
70:cb:4b:ca:87:57:a7:58:63:df:2e:d3:ac:1d:8f:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132329
sbgp-ipAddrBlock: critical
IPv4:
103.12.168.0/22
203.217.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:89:9c:4f:4d:3d:13:b8:f6:5a:50:81:96:fb:0b:6d:dc:b5:
40:9a:dc:88:a9:b5:59:c5:12:c0:79:4d:6f:0d:c1:35:21:95:
37:eb:2b:55:ce:04:08:e3:9c:c2:59:29:be:1b:36:43:8c:e2:
98:18:a4:22:60:e5:9a:5f:e8:5c:61:90:a9:3e:7d:b7:37:f4:
58:a2:5d:43:4f:0e:39:73:f1:d9:d8:a1:f7:e1:1c:6f:0f:f8:
72:67:fb:69:57:49:27:3a:73:06:48:01:d6:25:13:b4:49:64:
2f:3b:32:90:7c:ff:ad:18:25:1a:24:e2:b6:87:b9:66:f5:ef:
46:a8:a7:b3:2a:a1:e0:44:6f:0c:b6:55:0d:28:11:2d:08:65:
4e:fc:c3:76:39:4b:70:05:ef:9b:76:d3:dc:c4:f1:fe:6a:86:
e6:1e:ab:ed:72:b2:73:b9:5a:85:ee:14:fd:8c:e0:1a:19:cf:
f6:75:3f:08:79:96:02:0c:33:b4:7e:0a:59:ec:f8:84:5c:74:
5a:d8:36:44:eb:03:34:10:d5:bd:ce:da:18:d6:c5:3c:fb:a6:
64:d4:9c:fb:13:db:10:e8:bc:f5:a7:bd:cb:fe:23:56:ca:e9:
84:0d:e6:39:41:5d:42:b5:93:75:dd:ad:36:65:b5:b6:99:d6:
8a:f8:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:08:10 2024 by rpki-client on console-ams.rpki-client.org