Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
File: r7pNwfpFiSSQIyMcb-7j96cdpA4.cer (raw, json)
Hash identifier: GS8y5WDtz3zn0BiGlDgFlNdSQhFL+bW5kJT/wQGJJSw=
Subject key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01B2A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Jul 2023 01:30:24 +0000
Certificate not after: Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources: AS: 151625
IP: 103.243.102.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111269 (0x1b2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 01:30:24 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:90:02:32:ab:b3:06:a1:ad:e8:c7:08:f4:
83:c9:52:ee:54:9f:52:95:c6:01:63:b9:51:a8:c0:
8c:ec:83:33:69:cb:ab:8c:d6:98:8e:26:df:cc:16:
4e:06:44:e8:68:d0:a4:37:02:ec:6e:b9:27:a6:bb:
ec:ff:a1:b7:3d:e0:4b:fc:06:06:89:d6:1a:58:4e:
cc:cc:44:38:e1:54:6f:64:10:6c:0d:54:d2:41:f2:
73:38:9f:fc:5d:fc:ce:41:fc:0b:fa:78:a3:23:c6:
c2:47:1d:c0:ce:46:c5:44:bd:a8:e7:c8:62:07:bd:
46:1e:87:c6:95:c6:e5:7f:2c:d0:b6:9c:52:1a:62:
35:77:3a:00:a1:bb:cc:5b:a0:57:16:a3:3f:3c:1a:
df:25:fd:02:c9:50:ea:f7:65:ad:98:65:f3:7b:14:
5b:85:59:bc:43:45:da:3d:a3:11:9e:54:13:65:cf:
de:e5:db:88:80:12:a2:41:c3:32:c9:ea:b0:b9:b9:
e2:64:80:c3:6d:53:4d:c9:8f:5a:30:03:94:94:29:
7d:65:63:9a:f7:50:c4:f4:f0:d9:81:54:70:92:7b:
9b:31:64:1d:6c:79:9d:0a:91:83:65:e3:21:ee:d4:
ba:bf:4b:20:67:44:58:77:e1:e5:c1:49:0c:2f:af:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151625
sbgp-ipAddrBlock: critical
IPv4:
103.243.102.0/23
Signature Algorithm: sha256WithRSAEncryption
54:cc:58:68:4d:10:e4:9a:20:07:45:71:60:56:51:a4:8a:b4:
0e:fc:bb:38:04:4f:e6:dd:3b:84:ad:06:3c:2d:2f:a3:e9:6e:
e6:8a:25:96:c5:f9:f0:e8:6f:93:25:bf:d1:b9:38:c7:27:a6:
f7:fe:f4:e6:93:3e:b6:82:97:75:fb:93:06:5d:31:9f:d9:1d:
9f:ae:d8:3d:0c:92:52:e0:76:ff:9d:09:c4:78:f7:91:18:e6:
29:3b:f0:00:01:49:98:a9:f5:ce:2e:db:47:39:95:78:be:15:
b8:2e:e5:e6:5c:24:2c:9f:54:1f:05:cf:fe:94:6c:01:a3:bc:
f1:fc:94:65:4c:5d:22:95:a0:93:33:f6:b3:1a:c0:3c:04:8d:
61:3f:53:eb:a1:af:6e:ee:bb:dd:e1:71:34:b7:82:d0:30:46:
eb:97:b5:70:03:44:6e:99:59:7b:19:f8:eb:f1:fa:be:47:a2:
d4:42:f4:25:c0:ab:70:45:24:01:c7:d9:bd:79:fc:13:b1:ed:
90:03:b5:c0:b1:6b:a5:cd:b2:f2:cd:b7:fd:a4:8e:1a:98:70:
e8:43:91:92:3c:70:cd:18:32:d4:b0:63:84:5a:52:a1:ff:fb:
33:86:c1:dd:b5:1b:93:c9:98:3f:69:93:48:ea:cb:82:6f:74:
32:13:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:07:29 2024 by rpki-client on console-fra.rpki-client.org