Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer
File: oUvaoxV2pjZ6C1w6yrkcTp8xGO8.cer (raw, json)
Hash identifier: SCics01pv+iiivPdsSn1Q0JKJLhofS8r4aUiEJ1Gt2k=
Subject key identifier: A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C4CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Oct 2023 12:02:55 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 36.50.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 03:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115917 (0x1c4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 18 12:02:55 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A917604B/serialNumber=A14BDAA31576A6367A0B5C3ACAB91C4E9F3118EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:ed:15:0b:ec:cf:5a:b6:3c:79:38:8f:70:
f7:25:82:13:9f:83:a5:8b:4b:32:94:56:20:b0:a4:
4a:ca:28:2c:7e:68:f2:dc:96:6c:3c:83:ef:23:dd:
5a:c1:4b:75:95:f1:fc:04:39:bd:1d:3e:b8:4b:09:
37:b2:13:6e:be:ac:c2:3d:c8:76:49:e0:e3:10:74:
e1:96:e6:b1:13:16:9f:56:e6:5f:59:35:b3:d6:a9:
33:51:ff:e8:1d:ba:af:0e:2b:2d:18:ab:db:ad:2d:
cf:fe:7e:f9:e1:49:51:47:0d:fd:c6:08:1d:fb:f2:
d0:06:19:16:32:92:59:df:1b:80:b2:db:c1:1a:74:
e2:df:db:cf:9f:60:49:44:54:c2:95:54:8e:ec:9d:
cc:b6:48:74:22:4b:25:a2:7d:db:13:72:1d:33:05:
cb:dd:35:61:f2:a9:03:45:7f:d5:f8:4f:bf:b3:14:
0e:0b:36:ee:22:6e:09:cd:0c:ea:d6:ae:b4:9b:16:
e5:ef:6a:64:6e:93:36:86:48:f8:cf:68:e2:2b:c8:
a4:36:e6:d0:fb:99:ca:74:42:cb:be:0b:15:0b:7b:
76:ce:01:ea:a7:1a:63:b0:4d:2b:06:c2:08:ad:28:
2b:34:27:85:d0:88:44:4d:a6:14:cc:af:1e:0f:06:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4B:DA:A3:15:76:A6:36:7A:0B:5C:3A:CA:B9:1C:4E:9F:31:18:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917604B/41C0135C6DAE11EEA80D0574C4F9AE02/oUvaoxV2pjZ6C1w6yrkcTp8xGO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.32.0/23
Signature Algorithm: sha256WithRSAEncryption
68:70:54:54:c5:8b:10:0e:95:49:6d:10:88:07:6c:2e:ef:f5:
f4:f8:40:2f:d0:d5:c8:98:c5:39:5a:b7:91:5d:48:66:69:33:
60:32:d4:fc:8f:96:58:4d:8a:4e:8d:b5:f5:11:3f:fa:0c:f2:
85:1d:22:f7:57:2e:30:ac:16:2e:b2:1e:85:25:e3:cc:e2:22:
30:38:a4:da:43:c2:5a:5a:3d:c3:35:6a:d8:ff:ef:1e:bf:f2:
c9:7b:e0:33:15:91:08:fb:39:22:24:a2:9e:2d:16:36:50:b0:
ed:27:4d:ad:48:1c:8f:1e:df:0b:8e:d4:89:3f:a9:ce:bc:29:
d9:82:14:1b:88:dc:ed:66:20:e5:ab:d8:fd:67:97:94:e6:c3:
cb:0f:35:a3:6e:9d:77:5d:5b:99:c9:cc:b1:79:e1:0a:a4:ea:
a6:e9:d1:37:1a:6c:74:a4:67:99:0c:bc:41:83:70:fd:34:2e:
04:30:9b:00:80:b1:13:89:86:f2:9d:df:5d:c7:90:d6:a7:22:
f2:cf:71:a1:dc:2b:8e:be:fc:37:2f:28:03:49:e5:8a:6a:8c:
f3:30:95:3f:8a:4f:98:16:19:97:ca:da:33:d1:7a:55:bd:8c:
87:78:69:af:d4:74:e4:2b:e8:d8:09:1f:21:f6:cd:9b:68:51:
ce:30:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:21:01 2024 by rpki-client on console-ams.rpki-client.org