Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
File: lRaRgJV2AETnT6qlSX0GcwraXzI.cer (raw, json)
Hash identifier: qj4kj8gxBBdlmLQsKS6jp/IhcAIOpPyEM9FRhvkwcik=
Subject key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FDE4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jul 2024 21:39:23 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 55555
AS: 55859
IP: 43.245.28.0/22
IP: 103.246.96.0/22
IP: 180.200.244.0/22
IP: 2400:b100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130532 (0x1fde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 21:39:23 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:4d:ef:83:01:ea:6f:fe:a3:37:5b:23:e5:
7b:e0:93:2b:46:e0:5c:67:c3:50:cc:f1:db:da:b7:
02:d1:d6:37:c6:ba:21:0b:fb:72:1b:d0:a4:5a:50:
49:05:4b:88:35:4f:f4:3a:f8:51:23:5c:09:3b:86:
81:d4:f6:33:ce:cf:9d:5c:d6:30:ac:83:9a:8d:07:
fe:c4:ae:4e:f3:6f:8d:75:dd:a2:d5:19:58:01:e1:
e1:53:80:89:08:0c:5a:ee:d2:5e:00:bb:bc:dd:d0:
ab:2e:34:71:c6:7a:71:62:2d:cd:85:c9:77:6c:25:
d3:31:a2:d8:09:29:74:80:a2:db:7a:f8:df:fe:b0:
4f:54:60:dc:b3:d2:59:51:73:5f:3e:ed:b7:9c:25:
32:ac:ea:0f:81:28:a6:b0:66:83:ce:af:62:c9:77:
70:e4:6a:8a:41:09:03:fc:a8:a2:6f:bc:b0:5a:b0:
ce:50:36:a6:bf:a7:74:82:9b:90:78:95:3d:85:65:
20:a0:ff:39:d3:70:f1:a3:74:56:b0:e9:e4:a3:1b:
26:db:f3:f3:71:d2:50:eb:03:f4:70:2e:e5:c9:40:
2d:ee:39:48:68:f9:bb:55:ec:50:f2:88:8a:da:5b:
f3:f8:33:7b:bc:67:1c:df:d4:e6:49:31:3e:00:43:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55555
55859
sbgp-ipAddrBlock: critical
IPv4:
43.245.28.0/22
103.246.96.0/22
180.200.244.0/22
IPv6:
2400:b100::/32
Signature Algorithm: sha256WithRSAEncryption
60:6c:af:f0:7c:6f:78:06:7c:52:62:ee:4f:d5:c9:41:cf:e4:
cf:77:65:9c:e2:74:1b:b2:da:05:2a:6d:92:32:1f:96:a2:eb:
91:79:e9:f8:2d:f4:ef:70:49:0d:3f:e5:ed:37:1a:7b:52:0b:
eb:5a:47:1d:f6:8b:e0:b2:6d:b3:76:fc:9c:ea:06:bc:9a:1e:
b8:2e:11:3f:be:07:2f:67:b4:c6:aa:4b:f7:2f:a2:03:67:bd:
9c:cb:54:ee:35:e8:86:7c:f8:8d:fc:b4:32:df:9c:d0:97:87:
67:60:29:5a:49:3f:fa:f3:7f:03:60:23:37:d0:73:42:72:5f:
fd:4a:bd:61:db:9b:d3:44:61:9f:e2:e6:10:ce:95:ca:f3:70:
d8:90:5b:84:0c:f1:9c:84:3b:9a:2c:af:86:1e:a9:d3:0c:ae:
64:30:89:17:54:6a:b3:4c:7e:26:f6:47:91:84:3f:c7:81:bb:
fe:c1:8a:32:ed:3d:24:00:db:c8:55:b6:71:ce:f2:85:5d:8a:
66:ec:65:a3:4c:f2:e6:ef:a5:98:0c:bb:39:91:9c:51:78:3f:
0f:1b:6a:fa:97:95:8f:40:47:5b:fb:4d:97:e6:70:9b:7c:aa:
9e:62:9e:2b:b0:77:31:3e:04:8b:c3:7e:6c:9f:e5:6a:22:24:
4a:65:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:45 2024 by rpki-client on console-ams.rpki-client.org