Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qBmAo25inKAR7UPCjOWw-9Jl3mM.cer
File: qBmAo25inKAR7UPCjOWw-9Jl3mM.cer (raw, json)
Hash identifier: 7o56HVVmuxsRn3Kpj43u8f9oRUWEzzN0N/b+XR7rJa4=
Subject key identifier: A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D2F0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Dec 2023 16:38:23 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 137209
IP: 103.104.232.0/22
IP: 2402:1dc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119536 (0x1d2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 19 16:38:23 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91728B4/serialNumber=A81980A36E629CA011ED43C28CE5B0FBD265DE63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:f7:7b:09:dc:d4:16:36:cd:65:05:67:c0:
8a:92:b4:57:c9:09:6e:be:ce:ba:f7:cf:7c:5b:41:
08:bc:54:d6:c5:82:61:56:77:2f:06:dc:0c:53:d9:
f5:53:83:47:dc:8c:54:24:9e:ae:38:7c:fa:a8:7f:
5e:29:84:ef:dc:96:64:9a:5e:6b:25:57:e7:a5:c4:
43:35:a6:9b:39:3f:ca:d5:c6:63:22:05:2c:81:2d:
8b:84:02:37:aa:1c:20:d4:27:c7:02:23:6b:de:18:
b0:dc:56:0d:ee:e1:3a:a7:20:bb:f2:f6:39:3b:bc:
55:42:06:f4:84:7f:63:99:cc:9d:6c:7e:f4:62:20:
9a:3e:93:3e:55:27:8b:3c:e1:1b:77:d5:70:67:03:
ec:65:43:27:be:6a:64:94:3f:87:f4:a1:12:22:b2:
63:52:21:59:eb:0b:bb:86:9a:dd:b0:74:0d:05:36:
71:07:47:94:0f:1a:52:e9:7b:b7:20:67:ad:d7:ee:
f1:90:f3:47:c7:ce:1b:92:76:c7:6d:ad:a4:c5:5e:
f7:3b:a3:28:50:c5:2d:ae:88:e0:67:d8:88:08:03:
7f:fd:43:bc:09:f1:20:0c:1f:4d:4e:5c:01:bf:f6:
bd:a0:b6:9c:ad:c8:92:1c:e7:2b:27:9c:55:ec:79:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:19:80:A3:6E:62:9C:A0:11:ED:43:C2:8C:E5:B0:FB:D2:65:DE:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91728B4/7C8AF838EF5511EA9C6FDB7EC4F9AE02/qBmAo25inKAR7UPCjOWw-9Jl3mM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137209
sbgp-ipAddrBlock: critical
IPv4:
103.104.232.0/22
IPv6:
2402:1dc0::/32
Signature Algorithm: sha256WithRSAEncryption
23:f2:4b:53:1a:3c:90:d4:2d:2f:01:a1:9d:0d:cb:90:cc:45:
25:b6:4c:b7:ea:8a:e4:28:35:27:62:19:6c:2f:f9:cb:08:62:
c5:af:2a:24:c1:d1:2c:fd:4d:af:e0:d9:ed:0c:b3:c0:21:f2:
cc:b3:0e:8c:6a:99:4e:0b:2f:69:80:19:91:0e:5f:59:29:ca:
05:da:cb:d7:9d:77:df:9d:30:c4:04:4a:a4:b4:1b:db:2b:da:
87:34:cf:b9:9c:48:95:a2:32:eb:fe:a4:44:93:65:37:23:0a:
8f:ac:c3:11:24:68:ba:61:d8:82:ad:7f:6f:9c:36:f2:9b:e3:
c2:ea:f8:96:fd:2f:2d:84:7d:95:3a:38:8a:6a:9b:3a:53:86:
47:24:0c:c4:15:33:36:c6:b2:08:ee:ce:29:a8:e3:c2:1b:0c:
8e:2c:2a:73:15:c5:d7:b5:07:e8:fc:41:12:2c:a3:f4:d7:f4:
72:f4:57:95:09:e4:2b:0f:4c:53:28:2c:3d:31:c4:d4:57:51:
fe:63:8d:46:bf:ca:6c:c0:04:e8:27:ae:5c:47:36:8c:59:76:
08:c7:bf:bd:99:0a:86:16:32:99:02:d8:fa:a5:68:d3:5f:d7:
1e:da:a9:15:f1:63:bd:b3:9f:a1:83:8a:5c:c7:13:3e:b3:81:
eb:6a:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:36 2024 by rpki-client on console-fra.rpki-client.org