Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer (raw, json)
Hash identifier: XHLZgPGS6jqTL7g0UhJeKcCTgur8GsxU4Ead/hclCG0=
Subject key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FA47
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 20 Jun 2024 18:04:26 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 138538
AS: 138966
IP: 103.113.92.0/22
IP: 2402:b940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129607 (0x1fa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 20 18:04:26 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:dc:df:e5:62:0d:c0:d1:84:9e:5c:ce:0b:
79:b2:11:f0:91:c4:e1:a3:18:ef:a7:47:e9:d3:49:
b6:17:bb:3f:dd:db:10:e3:25:78:41:c9:6f:d5:d7:
ca:53:08:59:95:d2:e8:d2:00:48:82:82:54:0e:57:
33:67:a1:66:0a:b2:4f:8d:f1:b0:b2:80:ad:ec:c8:
66:9f:e5:9b:f2:33:b0:a3:dc:7e:cc:9f:eb:d0:a7:
16:b6:7d:01:86:a1:c0:d5:a4:24:03:ea:e6:e7:85:
3d:1f:9a:bf:bd:23:6c:70:0f:e6:bb:33:0c:bd:c5:
d4:eb:5d:fa:a1:52:b4:67:e1:53:ea:4e:2c:a3:48:
a6:34:8b:25:ae:a9:5e:70:48:e1:b9:94:84:0c:44:
65:62:d5:5d:03:64:06:17:bb:9e:a8:af:4d:8d:d5:
14:84:e3:55:c3:a1:c4:3f:2f:84:b3:46:b3:ab:33:
a4:b0:48:63:9a:e8:1b:77:46:d3:c5:19:ea:9b:6d:
f5:7c:b7:6a:a1:0d:80:f9:9a:06:03:83:cd:89:98:
35:07:f1:63:0d:1b:cc:c0:d6:c8:b5:90:57:e9:6e:
aa:37:b5:40:6a:ec:f5:8d:d9:3c:c2:a3:5f:b0:10:
71:49:e1:4f:bb:c8:ea:98:15:93:88:f6:ca:23:c5:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138538
138966
sbgp-ipAddrBlock: critical
IPv4:
103.113.92.0/22
IPv6:
2402:b940::/32
Signature Algorithm: sha256WithRSAEncryption
16:5e:b9:d5:5e:a0:ca:dd:20:51:8b:8a:f0:39:99:8d:2b:c5:
d0:b7:57:ed:93:dc:49:a7:1d:67:3f:b2:55:5e:b2:72:43:36:
b1:90:d1:e9:86:89:9e:f1:47:60:27:5a:d4:80:6a:7f:b6:97:
da:47:ef:53:74:b4:f7:07:40:5d:07:94:b0:5d:b2:d7:02:6d:
9b:23:c7:27:ac:20:d5:0a:f9:95:16:27:c8:cc:bf:ea:ff:50:
f8:51:b3:e7:fd:b7:98:5b:ec:7a:65:11:72:0c:39:4d:7b:5d:
27:15:bd:15:42:92:93:a5:2e:c2:4e:c2:cf:d1:65:28:34:32:
c2:09:ab:83:9e:58:2c:c3:1f:2a:a6:29:69:d1:0c:f2:1a:3d:
ab:b5:a6:a2:3c:42:7f:38:fe:a9:a5:e1:f5:c9:5b:44:39:bc:
0d:57:90:51:89:cd:37:f6:a6:1f:98:d7:c5:0c:87:19:5f:69:
8c:fa:d5:43:6c:23:98:07:07:83:48:b6:84:a1:e1:41:85:fb:
de:f6:40:b8:13:5c:dc:7d:f9:a3:45:45:7c:2d:40:5d:06:53:
04:49:a9:c4:3d:7d:fe:fc:d0:7f:f1:e5:59:4d:b8:55:dd:30:
ad:3b:01:64:c5:9f:1d:66:94:66:ac:c0:d2:c6:c0:1d:ef:7f:
b0:41:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:16 2024 by rpki-client on console-ams.rpki-client.org