Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
File: len3la_fIgULvTA6j619nI1G_Eg.cer (raw, json)
Hash identifier: YK1NQkk1TRBsMiDvqWcRI2coQF6Hmc0DUm1aUjOWzWM=
Subject key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EA89
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Apr 2024 00:50:25 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 134136
IP: 103.166.94.0/24
IP: 2001:df6:8680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125577 (0x1ea89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 00:50:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:cc:d2:c1:04:da:72:e6:ef:ba:0d:72:72:
fa:2b:4d:b8:63:4b:36:c6:05:5a:db:68:16:de:86:
62:21:9b:a1:3d:98:78:fd:53:29:58:ad:f1:5e:6c:
21:79:2d:ad:36:d4:d2:cd:3d:78:38:7b:2d:c3:ba:
7d:e7:dd:d9:f6:2c:a9:4f:d2:a2:d5:66:bd:52:a4:
51:db:29:ce:e6:fb:4e:ea:0c:bb:23:62:7b:0b:9e:
1b:2c:8b:3c:0b:ee:38:05:4e:90:01:9f:2a:c7:32:
4c:49:2b:04:f7:b0:ef:4f:ba:84:1e:4e:c5:f1:e4:
94:be:f9:20:4f:2d:64:9f:ce:c4:3f:c3:88:a9:58:
a6:72:b8:87:6b:85:d5:79:35:fe:d0:1f:3d:1e:34:
c1:48:61:82:11:dd:ba:f4:74:2d:db:d2:3d:f4:8f:
3c:28:26:c4:92:cf:e0:3f:b8:7d:14:03:dd:69:db:
ed:27:bd:e2:75:b8:52:2d:0e:23:67:eb:20:30:7f:
46:12:1b:89:ce:dd:14:c7:bf:f9:33:59:6e:2a:c7:
f2:2f:b0:78:ac:5a:b4:b7:94:5f:3e:3a:29:7a:b2:
35:65:2f:84:27:91:82:c3:92:62:cd:ff:94:04:8c:
ea:dd:79:00:1c:4d:aa:03:90:5f:54:8d:c8:96:3b:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134136
sbgp-ipAddrBlock: critical
IPv4:
103.166.94.0/24
IPv6:
2001:df6:8680::/48
Signature Algorithm: sha256WithRSAEncryption
67:83:8e:5d:36:bd:69:32:85:4b:35:3c:53:49:8b:74:fb:c4:
63:47:cc:07:12:7b:b4:e1:df:d7:e6:47:bd:3f:f1:d3:9a:88:
f8:16:37:3e:b5:a4:a0:7e:dc:2f:d6:a4:9e:eb:7b:a1:67:5c:
43:97:40:47:9e:75:1a:84:30:77:86:8b:ce:a9:a1:9d:3e:e2:
7e:51:a1:f4:c7:2c:81:47:7f:30:92:1a:70:98:e3:0a:9b:96:
88:b9:e8:82:ac:6f:95:42:bc:f9:36:ba:85:72:80:12:6a:d1:
a5:16:4a:0f:46:19:d9:93:37:03:f6:98:d7:be:d9:b8:3c:bb:
0f:d5:54:fb:3c:24:4e:7e:76:08:8b:9b:f3:49:90:86:73:4e:
8b:f0:9b:f0:cb:c0:d8:af:37:11:ec:b0:d1:94:c5:41:79:63:
d2:dc:09:ae:e0:90:16:a7:6b:ad:f4:9e:bb:ed:11:80:1f:69:
aa:94:06:3c:49:eb:7c:0d:78:7f:b1:29:b3:d5:7b:f9:a3:d8:
20:28:87:79:52:6a:31:ea:82:ae:27:5a:9f:6a:a1:c6:85:52:
24:5d:25:10:f7:9a:1b:7a:cb:bd:fb:9f:aa:34:16:e6:69:63:
88:18:ae:bb:24:63:94:c6:5a:31:93:f3:fe:18:4a:61:16:58:
f5:9f:37:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:08 2024 by rpki-client on console-ams.rpki-client.org