Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
File: qvquPFcDs5M3_T16lmbFjLjDtQk.cer (raw, json)
Hash identifier: 1gSpzuHbt7AghN4mhQ53i3ZQqMQIZkmc3eG8POT4t0g=
Subject key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D11B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Dec 2023 12:32:55 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 9728
AS: 37997
AS: 45182
AS: 45512
AS: 45960
IP: 14.1.128.0/17
IP: 103.1.68.0/22
IP: 103.224.196.0/22
IP: 103.229.56.0/22
IP: 124.195.128.0/20
IP: 163.47.192.0/22
IP: 183.78.0.0/17
IP: 202.56.80.0/20
IP: 203.158.24.0/21
IP: 2402:b400::/32
IP: 2406:6000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 23:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119067 (0x1d11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 11 12:32:55 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:7f:53:1a:9c:0d:fb:76:2e:73:68:70:bd:
3e:8f:45:28:c0:a2:3e:96:79:48:a1:5a:73:4e:b4:
51:2b:0e:13:76:85:98:27:29:6d:49:38:ec:00:a1:
b9:1c:76:a8:c4:1d:ab:17:33:de:f4:ec:72:3e:18:
4f:a2:5c:b8:39:27:44:04:37:c2:ae:ae:b5:7d:cd:
4f:cc:94:78:45:ed:4f:c8:17:e2:36:a0:8c:55:42:
dc:c5:47:f2:c9:76:7a:4e:c7:bc:96:dc:7d:89:c8:
26:03:c0:6b:12:e6:78:fd:08:ca:9b:db:cd:b6:94:
a9:0f:4e:d3:00:b3:59:56:e0:62:d5:96:fd:5a:a6:
8c:9f:9e:12:2f:d2:1e:59:c7:64:ba:05:c6:4a:be:
03:1b:04:64:df:ab:27:d5:15:b5:19:a5:ef:23:40:
8d:8c:52:80:00:48:91:a2:3b:39:f0:71:75:f6:f4:
3c:aa:01:b4:7b:2b:35:c6:76:a3:e1:0e:08:22:ca:
93:a7:fe:13:e0:90:71:2e:5f:81:73:76:6f:ec:1a:
c8:de:e7:70:0d:7b:44:91:50:30:6e:83:d3:b1:a2:
67:73:78:a5:23:3a:53:0b:39:ef:bc:b0:4f:88:11:
a6:3a:7d:2d:5d:78:3f:11:40:84:2a:dd:a7:6a:cf:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9728
37997
45182
45512
45960
sbgp-ipAddrBlock: critical
IPv4:
14.1.128.0/17
103.1.68.0/22
103.224.196.0/22
103.229.56.0/22
124.195.128.0/20
163.47.192.0/22
183.78.0.0/17
202.56.80.0/20
203.158.24.0/21
IPv6:
2402:b400::/32
2406:6000::/32
Signature Algorithm: sha256WithRSAEncryption
04:7c:cd:ba:d4:71:12:10:9c:be:df:f3:55:b3:ca:11:6c:3f:
77:e2:d4:5e:2f:b7:df:f0:52:d5:d8:af:21:c4:4d:fe:94:57:
eb:f7:05:49:b6:ac:7e:a5:c0:3f:62:70:b9:bd:b8:a0:af:0b:
2f:5b:2b:a1:ac:56:20:d9:ac:e3:fb:60:d6:f9:47:44:06:9d:
5a:36:48:b5:99:16:85:8e:a3:13:58:2a:12:7d:6f:3c:d5:1c:
9b:01:b1:70:a5:79:6c:4a:0f:61:ac:2a:fc:61:42:a0:a4:b1:
be:f3:9b:25:34:36:50:19:4f:54:bb:ff:35:41:49:73:a8:06:
23:c0:58:ba:8d:f0:24:97:b0:0f:da:59:ce:fc:1a:61:9e:ab:
1a:ad:30:c4:75:33:05:d6:c4:80:32:7f:a9:2c:3d:24:1d:df:
b9:e8:8e:44:fb:03:b2:1d:28:7a:4a:d7:44:f0:cb:1d:d5:a6:
c5:fd:17:17:6c:cc:59:f7:d2:8b:98:9d:28:ca:88:4c:20:95:
be:8c:24:79:a8:b9:4c:d1:fe:11:5e:39:cd:47:f8:e6:48:5f:
4f:94:1a:fd:f1:00:d7:0b:bb:02:54:56:6f:f0:d1:02:77:e5:
a5:f9:ff:c9:96:ad:96:c4:ee:69:ae:c4:aa:0e:59:7e:74:d6:
81:ee:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:10:37 2024 by rpki-client on console-ams.rpki-client.org