Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer (raw, json)
Hash identifier: 1S84PqHvhAfDEf3CDU4p0/zpKJW4qFCzwYR2kOLxAus=
Subject key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 018FFD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Mar 2023 00:47:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 142006
IP: 103.164.86.0/23
IP: 2001:df6:4280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Apr 2024 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102397 (0x18ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 8 00:47:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:a5:83:f8:c0:f1:36:93:19:61:e9:0f:7e:
b2:4c:ce:e9:43:47:c7:53:36:b0:8d:7d:c8:64:df:
9d:f7:b4:fe:95:17:54:7f:54:1d:3d:9a:26:f1:c7:
27:63:c5:f5:ef:c0:ee:66:23:44:a5:9f:93:f0:5e:
62:b9:47:12:b7:72:3d:39:ef:1a:a1:d4:c2:ba:3a:
71:90:f1:7f:34:b3:bb:b8:39:13:1c:41:a2:ae:d7:
e8:b6:dd:d5:24:af:77:f7:1c:58:82:e8:86:d5:a6:
ab:2f:1f:b7:14:d2:52:2e:ce:d7:3f:f0:18:1f:bf:
a6:3d:e0:7b:6e:b8:f1:44:c6:b6:d8:1f:c4:b8:44:
2a:15:e8:a6:73:d0:f2:4a:df:47:d1:58:9c:4f:67:
73:97:23:e3:9d:bc:bf:e9:3d:d8:6d:bf:c5:31:e1:
1a:b7:02:2b:b9:a6:ed:b5:87:b0:ab:dd:61:0a:7f:
83:79:73:73:9f:fc:f9:e9:a8:14:d7:83:70:3c:d8:
ab:d7:f6:52:12:d8:8b:a2:33:c8:44:a2:be:dd:c5:
fa:f1:a6:32:76:e6:75:04:ac:38:f9:61:35:b9:ca:
fa:3d:75:1e:8c:07:52:d2:e1:27:6a:75:d8:5b:2b:
3c:a4:0e:d3:5b:da:6c:09:46:76:33:60:c3:f9:e2:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142006
sbgp-ipAddrBlock: critical
IPv4:
103.164.86.0/23
IPv6:
2001:df6:4280::/48
Signature Algorithm: sha256WithRSAEncryption
35:0e:d0:2f:2b:af:de:0f:3c:15:2c:0f:c7:6a:8c:7f:43:37:
4d:a6:ae:9b:55:4d:8f:56:4d:ad:b9:88:3d:97:c7:6b:22:56:
e4:68:6a:5a:ad:f1:22:d9:fc:e3:d7:dc:78:fd:aa:eb:cc:f5:
de:ef:8a:46:f0:e6:e4:f6:12:c8:3e:8d:54:dc:68:fe:c8:dc:
8b:ad:28:b5:29:2e:9e:4b:7d:55:e3:2d:77:49:44:ea:94:c9:
f2:fa:fc:bd:84:c9:8c:46:6d:15:d7:0d:a0:88:10:22:7e:8f:
46:2c:a1:b1:19:80:89:aa:54:af:db:07:6c:5b:32:93:18:d7:
cd:fc:be:f7:07:99:7e:39:f5:20:49:8a:9f:10:a2:33:26:56:
94:f4:98:4d:27:fb:5a:f8:0b:2b:48:f8:39:c5:86:fd:c4:62:
1f:31:bc:61:0e:70:53:2b:c6:3e:a7:74:9b:e9:7b:ff:dd:93:
98:85:bc:00:52:dc:c4:68:97:2b:1d:68:6d:94:ba:a7:5a:bc:
f4:b4:f2:87:54:e7:1a:c5:77:6c:64:33:5a:77:dd:00:79:ce:
f8:3c:28:bf:e0:5e:10:ce:69:cb:20:86:09:ce:32:8c:68:98:
49:6c:36:2f:de:92:8c:19:fb:da:3c:f6:20:73:d0:72:53:6d:
8b:1d:1e:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 28 11:22:48 2024 by rpki-client on console-fra.rpki-client.org