Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
File: kSlbu3W_quuVMbObNux1Id3jDWM.cer (raw, json)
Hash identifier: /rIE0VkLWO2zRjcjWNiZyy6mxPWZ/PZ9CONy4vhxLWk=
Subject key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0209B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 Aug 2024 06:01:30 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 139601
IP: 103.96.80.0/22
IP: 103.131.130.0/23
IP: 103.199.98.0/23
IP: 2401:3a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133552 (0x209b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 29 06:01:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:e9:5d:17:4a:06:4e:5f:a2:6f:1c:54:8c:
f7:97:d3:66:ab:5a:c1:b4:61:30:32:e0:e0:46:31:
6d:0a:bf:e7:ce:4d:d2:46:bd:b1:95:9d:4f:4c:4d:
47:29:93:be:4c:8e:93:68:10:24:76:16:21:cd:c9:
d3:b6:d1:4f:70:3c:6b:15:fe:98:7c:62:b5:f6:e3:
64:4e:41:3e:5c:5b:f9:db:33:b1:6e:8f:2d:be:e4:
8a:3d:c6:1d:ce:3d:52:1c:de:7e:b8:c4:9a:cc:d4:
ff:48:34:bf:31:c3:26:9c:73:e6:69:cc:22:48:cf:
fc:77:35:e5:a1:d2:77:31:c2:fa:4d:47:98:5e:f5:
d4:4d:20:51:82:b8:a8:95:ee:2c:2b:87:01:79:4e:
81:7b:ab:81:08:31:ae:ab:1e:6d:59:07:62:42:f0:
5e:d1:f2:91:2f:fd:36:77:c9:c4:03:a7:9a:88:56:
8b:4b:05:1d:08:37:50:aa:24:b6:73:97:d5:54:23:
c5:48:b0:08:ff:51:d4:2d:3b:d2:91:2a:56:21:09:
27:65:38:8b:b5:ed:cd:06:21:50:ba:a0:ab:56:b0:
58:84:77:9f:cf:f3:f6:0e:72:86:76:2b:6c:bb:5e:
6f:64:3e:2b:0f:ad:f6:01:e6:e3:14:ae:63:67:c8:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139601
sbgp-ipAddrBlock: critical
IPv4:
103.96.80.0/22
103.131.130.0/23
103.199.98.0/23
IPv6:
2401:3a60::/32
Signature Algorithm: sha256WithRSAEncryption
ad:4e:4b:89:05:64:77:db:7c:77:19:77:e3:9e:fb:35:5a:b8:
68:d4:52:81:09:fc:25:96:07:7a:be:8c:e5:07:9f:1d:79:1f:
08:2c:0e:7d:fc:76:b8:19:89:a7:d4:8e:28:cb:8c:00:03:ad:
72:1f:54:47:7c:9a:38:24:68:ed:38:39:5f:1e:24:30:a2:cf:
cd:32:bc:72:f8:c8:09:62:00:72:e4:52:2d:a6:18:30:b7:96:
ca:c0:8a:07:1a:d4:6b:11:46:f4:7b:c9:de:b1:1c:ed:d3:2a:
63:b0:21:8d:8c:15:07:d2:63:0e:5c:3c:15:11:3c:21:04:50:
e2:5d:92:6b:e3:66:35:db:41:98:4a:76:fd:01:53:9a:68:9e:
c2:71:64:f0:85:06:8c:03:45:b8:23:d8:68:3d:77:fd:1e:ff:
da:c0:dd:7e:95:8a:9a:85:bf:1c:22:dc:4e:8a:59:53:29:96:
76:27:9c:1f:a1:50:0a:b4:bf:21:b3:87:98:c7:f7:cc:30:05:
3d:5e:cd:cf:1c:93:5d:5f:ed:2e:e9:81:b9:cf:1c:5f:82:51:
db:b5:ef:40:e8:ee:c2:e4:e9:25:08:c9:58:0b:89:56:52:68:
94:6b:37:bb:f8:c3:01:0f:30:84:02:6a:ad:90:08:46:77:8c:
67:14:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:57:04 2024 by rpki-client on console-ams.rpki-client.org