Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
File: oRR-hHvP7urdnompeo2fM2ecp-I.cer (raw, json)
Hash identifier: c7helZQh4dQqmd6kl4FBIShF4KJXEUFBLuDrLv6gpHU=
Subject key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021683
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Oct 2024 01:13:26 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 103.187.26.0/23
IP: 2001:df0:b6c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136835 (0x21683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 28 01:13:26 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:b3:b1:db:41:dd:87:fd:c5:0c:d3:5f:89:
25:13:ce:2e:30:e0:69:ec:47:7c:93:1e:bc:50:e6:
55:e3:14:d2:63:41:93:c6:c1:3d:05:11:b6:3e:f0:
d8:46:e5:e6:f2:ca:94:1e:8d:1b:4c:b3:1f:fc:03:
96:59:8e:70:bd:86:01:96:56:0b:76:55:2f:4e:09:
33:e6:bd:59:2d:ea:e9:85:5e:d7:6f:5a:df:f2:bc:
63:a9:1f:51:c0:b7:6e:69:fd:90:91:de:96:3f:67:
e9:64:f9:1c:be:93:6a:2f:d3:10:59:ed:5d:1c:15:
ef:2e:98:65:5c:8b:08:cb:00:dc:a5:bd:f0:46:e5:
48:ab:a7:f0:e6:4b:1e:56:8c:da:06:fb:a5:24:04:
37:c9:cc:1e:30:28:d5:e7:5f:cb:53:fa:a7:f5:b8:
42:4c:46:b7:ac:f2:84:62:80:6b:9b:ac:07:25:7e:
5b:f4:7b:8c:a8:55:61:23:cf:1e:e0:5d:f6:93:79:
1a:71:f9:75:00:bb:fe:e1:6a:8d:84:c3:20:44:26:
c1:79:a3:da:55:06:d9:c6:11:bb:be:44:40:09:6e:
ea:21:47:a4:ff:a3:fa:db:8f:07:3f:4c:c4:18:88:
05:e4:8b:c8:c3:f4:14:ba:4c:30:45:fd:6a:41:5a:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.26.0/23
IPv6:
2001:df0:b6c0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:b8:b1:c5:30:03:df:ef:46:80:c0:a9:8f:68:ac:e2:a5:97:
6b:b6:f8:ee:3f:64:4c:03:ce:e3:74:e8:fd:52:7a:58:40:f0:
35:bb:31:5a:a6:5b:d0:35:99:62:7f:b1:48:df:91:7a:a3:0a:
48:85:c2:3d:4b:8a:78:a5:21:1e:96:00:53:93:c0:79:09:06:
86:f1:22:44:58:01:51:4e:b9:2f:3b:71:38:2e:63:3e:8f:a4:
a8:e5:ec:5c:89:94:30:08:a8:0e:fe:fc:a8:c5:91:28:ba:6c:
c0:7a:b6:f5:72:c9:a6:8f:38:2d:5d:58:e7:ab:a4:d4:32:38:
86:6a:d1:12:58:fa:85:f7:c6:78:6b:e0:15:32:15:fd:40:c0:
5a:79:c3:de:fd:3a:b8:d1:75:5d:4b:eb:cb:50:c6:b5:62:f9:
c8:f8:0c:b3:88:2e:31:86:dc:dc:ec:68:86:49:a9:73:f4:c7:
32:90:21:66:20:7b:04:26:f0:2b:1c:b6:e7:f3:09:c2:b9:08:
5d:48:3b:6c:42:d9:26:da:19:9c:0a:db:6d:4a:4c:bf:d8:62:
46:61:a3:68:2e:04:ec:69:b0:5c:c8:ca:79:2d:34:18:e8:db:
d2:f5:8e:16:98:de:a2:7c:2e:0c:7f:3a:32:a1:f5:32:30:ca:
ac:b7:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:47 2024 by rpki-client on console-ams.rpki-client.org