Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khdBhFmoypIuDWajy6pAZyDLSJA.cer
File: khdBhFmoypIuDWajy6pAZyDLSJA.cer (raw, json)
Hash identifier: jLKgbsfS+6hNBd27RuimnmvJMRHrqod4kfqjxjFu6rU=
Subject key identifier: 92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021B5D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 14 Nov 2024 13:29:54 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 149173
IP: 103.177.206.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138077 (0x21b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 14 13:29:54 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9137B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:e1:23:82:9d:82:cb:f9:9d:66:59:a9:fb:
5f:28:99:ab:e4:d1:d8:16:ac:51:d9:70:a2:61:8a:
c5:9b:34:de:fb:e1:a4:a3:ec:2a:2b:3c:70:3e:b1:
56:d7:ff:35:d0:d2:d0:73:0a:4f:b4:19:26:33:3c:
a8:63:b0:d0:02:61:61:4d:b3:37:b0:eb:7d:49:43:
51:ea:15:31:e9:ca:04:41:5e:5f:61:4b:f0:6b:a1:
ce:39:29:d0:a9:af:39:9d:e8:85:d8:f4:35:e6:ca:
83:65:4c:64:3d:0b:82:d3:86:31:d8:34:b1:e0:4a:
93:7e:43:27:3b:b2:26:c5:8b:b3:44:b0:77:23:2e:
12:ed:a1:c9:32:2f:b5:af:27:15:a3:14:bf:ed:c0:
eb:42:fb:9d:4c:79:a0:89:a2:92:5f:93:58:ff:7e:
39:37:76:7a:86:b2:e5:ab:91:f7:38:e4:b8:5c:42:
fe:78:36:32:38:93:cf:03:47:c9:b6:15:73:42:f6:
51:2a:c1:49:a4:fc:32:46:88:38:8b:bd:ff:2c:66:
cf:17:4e:11:c6:9f:58:01:64:aa:08:16:8c:e9:10:
8f:b4:b7:45:df:ed:42:e3:4b:1c:04:e2:bf:96:59:
75:51:42:21:40:b3:6f:75:89:6c:49:27:ec:a3:5a:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:41:84:59:A8:CA:92:2E:0D:66:A3:CB:AA:40:67:20:CB:48:90
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137B39/A7599D7AA03511EC82255D3AC4F9AE02/khdBhFmoypIuDWajy6pAZyDLSJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149173
sbgp-ipAddrBlock: critical
IPv4:
103.177.206.0/23
Signature Algorithm: sha256WithRSAEncryption
44:17:a8:b6:5c:cc:65:a3:3d:83:0e:d4:a4:44:30:52:97:06:
d6:8a:c9:11:2d:1d:10:07:fc:39:7e:24:47:e9:0f:eb:e8:e3:
56:27:cb:7b:32:a2:5f:46:9c:38:d9:c6:26:65:30:ec:fc:6c:
3f:96:37:47:d1:62:4a:4d:89:2e:46:d0:dd:87:ec:3e:a8:dc:
4c:41:a8:1a:21:9d:61:43:d9:ea:ab:23:53:b1:05:9c:2d:13:
01:66:e8:e1:45:2f:24:0c:c8:aa:97:64:ba:db:13:93:cf:71:
1d:2a:17:82:51:5b:c1:7e:e3:1d:4a:3f:94:a6:d8:f6:59:61:
12:38:fa:51:d6:40:60:cb:53:04:dc:58:3b:02:bd:e1:2f:bf:
09:11:eb:23:66:de:68:a2:10:cd:96:6e:8a:0a:40:fe:07:82:
4e:a2:8d:d5:46:10:e7:10:9b:3c:82:a6:3a:4e:7a:99:9d:38:
a4:90:0b:bb:83:8a:f8:aa:1a:a1:39:69:44:3b:8d:40:eb:a2:
58:40:63:06:4b:71:5c:9a:56:2f:cb:65:35:1f:2b:9d:b7:d3:
e4:6f:a3:36:fe:15:6f:f1:29:66:c8:08:84:e3:08:01:be:62:
37:66:db:cf:27:cb:94:2c:4e:5f:f5:9b:bc:f9:f2:cc:0a:9e:
a4:d7:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:01 2025 by rpki-client