Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
File: nFh2OitDfLKSxGQXuNSO32tXAc8.cer (raw, json)
Hash identifier: GLG71Tbx7xQKrcPwG+TmE2wBPjuPFuKS+r9eZUv5l1Q=
Subject key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E4BB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Mar 2024 13:32:03 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 139811
IP: 103.145.144.0/23
IP: 2405:88c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124091 (0x1e4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 15 13:32:03 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:24:07:f9:05:3a:63:bd:b4:1c:5f:af:5f:
15:d5:6f:32:87:35:ed:7a:13:5c:e1:ad:cd:00:ff:
1e:3f:56:d2:af:20:d1:5e:17:95:49:1c:9c:17:a4:
20:98:db:3f:06:52:bb:e2:8f:e2:32:9c:fe:c2:ce:
02:24:c2:72:60:62:26:60:97:2e:c6:7d:b6:57:2f:
53:b8:56:1e:aa:59:b3:1e:30:cb:ab:82:11:9a:7a:
54:1d:ba:d6:f9:87:d1:91:33:14:64:b3:31:74:4e:
7f:10:ac:ba:a8:11:f3:af:93:d2:76:e9:76:3a:a2:
ba:37:d0:16:c7:8c:da:3c:0a:d3:b2:6f:67:2d:e8:
e8:91:5e:bb:07:9f:d2:c6:30:84:7c:55:cb:11:ca:
f2:b0:00:f4:ae:99:3a:e0:72:dd:81:29:85:eb:5e:
f8:12:f1:0e:1c:2d:f5:f0:91:52:07:36:64:36:e1:
51:d0:95:56:d0:80:71:df:7b:5d:8b:0a:7e:a4:ca:
34:35:ab:ab:5d:db:bb:6f:76:44:86:38:75:63:d1:
9d:e7:26:91:70:f0:5e:c9:cf:0a:4d:8c:eb:f2:f3:
ce:b2:3b:56:16:cd:95:ca:74:e3:d8:db:72:2f:5a:
36:54:e7:82:b9:b9:49:10:f5:15:4e:d8:a7:ff:77:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139811
sbgp-ipAddrBlock: critical
IPv4:
103.145.144.0/23
IPv6:
2405:88c0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:24:35:c4:83:dd:93:a7:54:03:e7:3b:fe:12:e6:26:df:63:
70:76:28:7c:c9:73:e8:75:f0:2f:a6:57:64:4b:e6:8f:b2:f6:
35:a0:d0:49:80:bd:59:9e:be:48:86:95:3e:e3:b3:3a:68:71:
be:64:ca:1b:d2:03:51:6e:24:82:27:22:2f:f5:c3:cd:14:3e:
14:93:51:30:99:44:fa:0b:60:ce:64:76:c5:e5:3b:d8:47:0d:
47:47:79:a1:45:ac:99:6f:82:dd:ac:2d:29:55:7f:6d:e3:64:
3f:6a:cf:be:ac:83:e4:2c:10:d7:a4:58:6f:e9:59:ca:0c:8b:
69:3a:8f:fb:ed:e2:af:f8:ec:f4:c0:6d:29:c0:38:59:a0:62:
6b:bc:2f:73:59:ee:da:7b:62:9d:2b:21:1c:64:b6:05:6f:af:
01:3c:8d:de:1f:fb:5a:26:00:66:0b:97:a5:d0:c6:e3:44:1f:
59:09:db:c1:2a:09:71:56:86:f1:56:7d:20:cd:4e:1f:31:e1:
30:57:17:5b:2a:99:d5:b9:a3:c1:e0:6d:db:24:03:2f:7b:16:
0b:a1:da:f9:f1:4b:a3:f3:76:e5:68:27:36:06:ad:be:4a:e6:
4e:d4:34:6a:31:cc:72:6c:98:85:ea:5b:b4:4a:85:06:07:88:
f8:ac:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:05 2024 by rpki-client on console-fra.rpki-client.org