Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer (raw, json)
Hash identifier: +hLMsLHzD9rF9TXk+Eda1ZRqk+jPoBl1yQ/HZGmiXBk=
Subject key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AD9F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Jul 2023 21:56:40 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 140698
IP: 103.151.250.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109983 (0x1ad9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 21:56:40 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:12:97:9f:a9:c3:e9:b6:3d:19:4f:29:14:
dc:18:ff:2f:9e:a8:f1:58:58:6c:e9:5c:ca:f7:99:
99:80:d4:d8:de:c1:c6:60:1d:6a:93:83:40:cc:ad:
4b:f4:52:8a:8a:d8:4b:42:3b:bb:c9:43:90:4a:56:
c5:bf:b2:12:3c:f3:f0:75:ac:f9:3f:45:6e:51:94:
5c:45:da:8a:1c:61:e8:d3:5e:c6:aa:3e:1d:82:31:
25:5e:b1:90:a9:8e:47:f3:35:bd:34:b2:90:ba:e7:
af:6f:48:d2:bc:f5:be:d1:5d:49:cb:0c:dc:90:35:
a5:35:ec:fc:c9:2a:0c:bd:a9:5a:b6:aa:b3:3d:11:
8d:c8:e8:7b:f8:b7:18:18:7a:2e:b1:06:e1:fb:d1:
25:c9:a5:0c:b8:7d:0b:f0:f2:d9:ae:93:36:37:58:
76:76:f0:95:76:97:a9:ee:67:ee:9a:ca:7d:22:38:
19:34:87:f3:19:d5:00:71:b6:b4:2d:51:04:f9:0d:
62:29:dd:8e:e1:ae:b6:ad:ef:19:dd:ce:6e:28:2a:
79:67:bc:99:e2:f1:4e:72:23:73:a6:99:20:38:15:
84:70:1c:e1:d5:77:4c:dd:e7:33:de:08:ef:8e:6e:
28:d0:c4:8e:31:b3:ff:8a:53:17:4c:77:d3:b3:ad:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140698
sbgp-ipAddrBlock: critical
IPv4:
103.151.250.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ea:43:65:10:1d:f4:43:88:2e:1d:0a:65:98:e8:2a:2c:a7:
b7:1a:6a:71:3a:e7:9c:a0:30:4d:fc:2b:07:78:33:ef:93:6a:
e5:54:a6:cb:2b:3e:35:77:82:db:e8:79:5c:84:22:f9:87:00:
0d:80:da:38:60:94:ec:68:31:81:83:e0:7a:89:bd:99:65:7d:
10:a6:08:39:98:75:2f:11:f8:b5:5d:b0:a7:bb:a5:f1:cc:c1:
3a:08:35:b5:ed:b3:3c:d5:1b:e3:c3:c2:7b:26:86:09:b5:ea:
74:00:22:8e:1c:85:ad:e7:2e:0a:6e:f4:be:b4:0c:2a:00:2a:
7d:41:6e:c3:0e:f7:4a:3b:9a:26:83:a9:be:1f:0a:af:94:2c:
ed:30:19:01:e3:c4:db:72:e3:77:5d:8f:b3:ac:40:e2:69:a4:
a2:5a:d2:c9:c6:71:0e:0c:57:0b:aa:7d:a9:18:0f:b9:a9:a9:
71:67:05:db:9c:b9:c1:b1:fd:fc:50:84:44:4d:f7:24:b1:a6:
c5:f9:4b:17:7d:f4:26:bc:95:70:6f:9c:dd:32:ef:ba:7e:e9:
7c:28:46:1a:49:9e:80:e0:03:63:5f:ba:9c:95:a1:e1:5c:5c:
fb:4e:cc:8c:d9:c7:d2:f2:5e:03:d4:ef:70:85:ef:1e:93:72:
67:97:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:09 2024 by rpki-client on console-ams.rpki-client.org