Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
File: n9LoZrHrgid6tvVi_jLgg1mzAWU.cer (raw, json)
Hash identifier: ebWTtBdERdXcZbM0pJP6+giVyfJMejq+5mWcugOQ2cI=
Subject key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AA32
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Jun 2023 19:08:59 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 133365
AS: 141373
IP: 103.151.40.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109106 (0x1aa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 14 19:08:59 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:6f:07:2a:14:7c:40:b3:fc:25:a1:b7:5e:
1a:1b:90:ca:9c:ee:80:3f:b2:7c:e1:30:d9:04:13:
94:5d:19:e1:4f:14:48:e6:98:c5:a1:0f:43:5e:68:
80:54:04:ff:c3:6c:49:88:7f:f7:23:a9:ff:c4:1c:
1d:66:00:60:0d:35:a8:d9:ea:ef:69:38:d3:3a:05:
4b:78:28:63:8c:96:36:99:d6:3e:68:e5:d7:b2:26:
d1:f1:bc:83:2b:a1:89:61:57:75:ee:67:50:aa:a2:
62:d6:9e:6b:88:bb:64:a4:38:4d:c8:21:7f:6d:b2:
8c:1a:59:df:32:d1:59:b7:21:ec:f1:90:16:e0:60:
df:99:c9:08:79:ff:d3:b7:d9:5f:28:88:23:5e:d2:
0f:7d:ee:37:65:6b:ce:36:5c:a4:bd:33:dd:7f:7a:
e1:e3:51:41:5e:6f:af:74:cd:bb:47:20:42:4f:18:
aa:17:b6:1c:e4:3a:f0:a5:f9:2c:9b:9e:8a:79:ef:
77:ab:ca:84:9b:96:33:46:e8:3a:a9:ce:c2:8d:d9:
5c:90:45:94:1c:e3:a7:c1:f9:98:18:32:de:ac:11:
e7:85:e6:3f:9b:05:bf:68:f0:ef:92:6d:56:04:29:
73:47:68:05:ce:c1:c9:b1:58:2f:7e:77:09:90:f8:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133365
141373
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:e2:87:d8:80:89:dc:0e:17:81:76:b8:16:56:fd:a1:f0:4e:
91:c1:b4:d8:72:73:01:6f:0e:06:4f:06:49:ba:9b:cd:be:70:
ab:7f:7d:f2:d1:ea:a7:61:37:86:9e:1c:2b:97:60:b6:3c:80:
04:4d:a7:e4:7b:6a:ec:c4:6b:98:32:87:99:53:d6:a9:98:34:
9a:02:0d:5a:ce:48:18:41:09:c8:e1:1c:fa:0c:ba:55:7f:33:
64:da:ce:62:69:9e:cf:60:d0:dd:46:19:22:82:19:9c:56:08:
e5:c4:10:76:b3:8a:de:e6:70:19:6c:61:4d:68:81:6a:11:da:
b6:89:a4:b7:cd:f2:16:f5:76:9c:02:c9:07:6d:1d:8a:12:f0:
e5:cf:0f:20:cf:7f:c3:b8:aa:26:7c:9e:2a:bb:d7:fa:56:bb:
03:3e:1b:bd:2a:87:e6:d8:14:0a:d9:2f:cc:0b:67:46:65:d3:
b6:14:24:a4:8d:cd:3e:eb:19:97:ce:5b:29:14:db:1b:1e:a0:
91:35:1b:96:e1:3e:28:5f:18:a3:3f:c3:53:ef:8e:8a:b5:35:
b7:f7:f4:c8:c1:72:4a:6f:58:46:07:11:e6:ad:44:a6:dd:c1:
d7:58:af:24:5b:39:30:c6:8d:87:ba:b7:2e:ae:58:02:b3:4c:
7a:0d:7c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:19 2024 by rpki-client on console-ams.rpki-client.org