Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer (raw, json)
Hash identifier: ipf+5AM+xI6toz9zYyEd3DCE3TUVjY4lu0nyyi+PEug=
Subject key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FD60
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jul 2024 22:18:22 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 140698
IP: 103.151.250.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130400 (0x1fd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jul 2 22:18:22 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91538E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:12:97:9f:a9:c3:e9:b6:3d:19:4f:29:14:
dc:18:ff:2f:9e:a8:f1:58:58:6c:e9:5c:ca:f7:99:
99:80:d4:d8:de:c1:c6:60:1d:6a:93:83:40:cc:ad:
4b:f4:52:8a:8a:d8:4b:42:3b:bb:c9:43:90:4a:56:
c5:bf:b2:12:3c:f3:f0:75:ac:f9:3f:45:6e:51:94:
5c:45:da:8a:1c:61:e8:d3:5e:c6:aa:3e:1d:82:31:
25:5e:b1:90:a9:8e:47:f3:35:bd:34:b2:90:ba:e7:
af:6f:48:d2:bc:f5:be:d1:5d:49:cb:0c:dc:90:35:
a5:35:ec:fc:c9:2a:0c:bd:a9:5a:b6:aa:b3:3d:11:
8d:c8:e8:7b:f8:b7:18:18:7a:2e:b1:06:e1:fb:d1:
25:c9:a5:0c:b8:7d:0b:f0:f2:d9:ae:93:36:37:58:
76:76:f0:95:76:97:a9:ee:67:ee:9a:ca:7d:22:38:
19:34:87:f3:19:d5:00:71:b6:b4:2d:51:04:f9:0d:
62:29:dd:8e:e1:ae:b6:ad:ef:19:dd:ce:6e:28:2a:
79:67:bc:99:e2:f1:4e:72:23:73:a6:99:20:38:15:
84:70:1c:e1:d5:77:4c:dd:e7:33:de:08:ef:8e:6e:
28:d0:c4:8e:31:b3:ff:8a:53:17:4c:77:d3:b3:ad:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140698
sbgp-ipAddrBlock: critical
IPv4:
103.151.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:c5:08:76:f0:82:4b:c7:8c:0a:31:82:bc:15:7c:72:3b:27:
5d:0c:dd:7e:fc:0c:47:d2:f1:3b:79:0c:b5:3c:df:f5:ee:d0:
76:5b:5c:58:b0:92:09:8a:0c:a3:12:e1:1f:e6:f1:be:3d:5f:
33:e2:40:48:42:59:27:77:96:07:21:6f:d9:14:08:b2:d9:8e:
a4:84:14:54:a4:e9:3b:c7:22:ab:41:13:52:ee:b7:e4:7a:6a:
2f:9d:0e:46:a1:1b:7e:1e:2c:ef:84:8b:87:ec:6f:bb:35:79:
c3:99:f1:6b:58:99:b4:45:64:c3:6e:12:42:84:b5:4d:67:c1:
bd:9d:84:47:13:02:37:f3:d6:18:98:f9:31:c2:18:16:22:76:
ae:e1:11:3b:65:43:8a:86:17:29:c0:2a:1f:39:8d:ad:bd:fc:
01:33:96:f9:bc:64:07:45:9c:ab:39:06:a4:49:52:81:7a:54:
32:c1:89:e5:23:46:ef:2a:68:03:6e:8f:a6:f3:82:2f:09:35:
80:b9:d0:49:98:9c:2f:96:75:1c:82:b2:69:28:0c:7a:c0:1a:
df:5e:bb:58:a3:e3:80:e9:be:2c:36:76:15:6d:fe:9d:d5:48:
35:96:8a:61:b6:7f:cd:43:30:d8:b2:9b:9b:ef:ff:65:1d:45:
12:c1:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:46 2025 by rpki-client