Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mq8u_A-Jn-4exNmeHELI1EFk2kM.cer
File: mq8u_A-Jn-4exNmeHELI1EFk2kM.cer (raw, json)
Hash identifier: 301usy4O6d3g8+w8gGEpTsgMF42vxmMsoVK6n6vCeoY=
Subject key identifier: 9A:AF:2E:FC:0F:89:9F:EE:1E:C4:D9:9E:1C:42:C8:D4:41:64:DA:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E42F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.cernet.edu.cn/repo/cernet/1/9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.mft
caRepository: rsync://rpki.cernet.edu.cn/repo/cernet/1/
Notify URL: https://rpki.cernet.edu.cn/rrdp/notification.xml
Certificate not before: Wed 13 Mar 2024 01:23:04 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 144699
IP: 103.165.110.0/23
IP: 240a:a801::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123951 (0x1e42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 13 01:23:04 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91E5D610000/serialNumber=9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:65:06:84:a1:a8:31:4a:2e:a2:0f:ad:ea:
79:36:d4:1e:c3:32:2c:34:59:35:62:ce:6c:0c:93:
16:7f:bc:dd:7b:a0:c8:ed:f6:22:54:70:64:1c:56:
f6:9d:ab:ef:08:0b:9c:16:2c:33:e0:ad:c1:91:15:
e0:1d:00:3e:7c:5b:76:a7:fc:65:e0:3c:2f:23:14:
19:33:59:dc:17:2e:ba:19:be:4a:4d:bb:d4:e4:85:
5b:3d:3e:25:ba:fb:28:3e:5c:a5:b5:d3:65:39:70:
27:28:23:9f:b3:f5:06:9b:be:02:2c:53:50:ba:b3:
62:39:55:5a:71:e2:ad:8a:43:88:a2:65:9f:62:cb:
ba:f5:93:e5:4a:0d:40:45:c9:72:ee:e8:13:95:96:
4f:66:78:4d:2b:eb:7c:e6:0f:e9:58:5f:6e:ea:ba:
06:5e:8b:eb:a6:c8:ec:e2:c3:0c:1d:d3:f2:8a:b9:
6b:1a:d0:81:a1:16:70:9d:a2:ad:7d:d1:bf:23:29:
40:dd:52:f6:f6:ff:4a:e0:8b:26:39:34:71:80:33:
6f:59:73:64:e0:86:55:71:8a:38:50:79:35:07:07:
98:a8:4f:08:88:fe:2c:61:7a:0c:ce:67:5a:fa:d3:
99:d0:4d:43:40:cb:4e:e6:d5:2f:fc:d5:65:ed:5f:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:2E:FC:0F:89:9F:EE:1E:C4:D9:9E:1C:42:C8:D4:41:64:DA:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/
RPKI Manifest - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.mft
RPKI Notify - URI:https://rpki.cernet.edu.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
144699
sbgp-ipAddrBlock: critical
IPv4:
103.165.110.0/23
IPv6:
240a:a801::/32
Signature Algorithm: sha256WithRSAEncryption
81:15:b3:d1:38:7d:8d:48:74:c2:db:a2:bb:fc:43:1f:6e:71:
b3:49:5d:55:af:83:9a:57:c9:ce:c7:11:6d:a7:e4:84:8c:99:
9a:ae:54:01:27:52:eb:74:68:11:23:54:1c:ac:be:55:0d:93:
70:d4:f6:8c:b2:c4:31:f6:77:8d:98:ea:1e:b7:7a:c4:6d:4a:
b9:2f:19:56:07:1d:bf:da:fc:a6:38:39:94:1f:e5:26:a0:43:
a8:44:6b:ca:31:cd:57:36:cd:5d:7f:4f:79:e6:fd:bc:c1:1e:
ba:c1:e6:7c:8a:56:d7:82:3e:4a:41:31:c6:c2:ac:a1:9d:ed:
6a:c9:e6:32:b6:04:eb:25:47:13:b2:5a:9d:d1:70:87:0f:19:
45:fc:d6:8a:08:45:de:a6:fb:cc:ee:5d:d6:0e:ee:ea:86:76:
53:ac:88:32:35:a4:b0:73:e9:6c:d2:30:3f:d5:03:4f:5b:ac:
fc:bf:da:c3:39:2f:a9:e5:ca:67:8e:81:54:56:fe:d1:8d:a3:
ed:46:67:ba:65:d8:44:a8:6f:a7:36:50:e4:88:1c:74:7c:e5:
3a:ba:2d:c3:9a:c9:6e:75:34:6f:d2:94:52:97:f0:17:34:34:
fb:b0:1d:25:43:6a:69:c2:6c:8b:6d:17:dc:13:6d:8d:f7:ca:
c6:85:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:07:25 2024 by rpki-client on console-fra.rpki-client.org