Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
File: r9CVWn3X-bDsKkShHZNyB8J1SmM.cer (raw, json)
Hash identifier: k/54WAeSopZ+UTLjXnWw0r76P7qZs2SzQDQbD9sYQ6w=
Subject key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EC49
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 18 Apr 2024 20:02:19 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 151951
IP: 103.181.164.0/23
IP: 2400:5a60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 11:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126025 (0x1ec49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 18 20:02:19 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:39:66:f2:8a:86:1b:a1:84:9a:60:ec:2c:
0e:5c:28:4f:18:c2:55:93:30:f9:d7:51:ae:65:11:
40:89:a9:a4:ba:bb:30:df:27:69:11:3f:a1:45:29:
fb:53:98:88:cd:37:4f:92:b9:6b:6b:ca:6e:20:ca:
9f:fd:16:b5:0f:99:b2:e7:d6:19:5d:00:f3:59:53:
d1:2c:92:f4:fa:2d:ca:6c:bb:64:84:13:0f:a5:c3:
72:cb:a8:75:0d:de:d9:30:32:74:db:cd:76:2c:c9:
59:28:e2:44:e3:5a:1b:bc:3f:dd:f5:94:7a:4a:e3:
51:e4:75:70:c5:5a:cf:89:d8:70:4a:c2:a8:2d:7a:
7a:c0:52:80:d2:9f:8e:e0:e4:44:e8:22:18:94:33:
16:4f:1a:af:0a:72:40:b1:b2:84:68:65:9e:e1:5e:
15:77:85:be:93:e1:34:59:6b:b3:8a:c4:40:43:17:
c4:b2:d5:3b:f1:4d:46:d7:2b:43:e3:ac:f3:af:46:
06:d2:c8:b5:21:2c:f6:9a:98:c5:9d:96:42:68:39:
39:b4:78:37:6c:67:a5:2d:7a:6d:06:d5:c3:69:3d:
33:fc:48:5a:de:09:38:05:60:94:96:6a:4d:c1:5e:
5e:a8:94:4e:8f:f2:3b:25:13:33:9a:51:b0:c0:ac:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151951
sbgp-ipAddrBlock: critical
IPv4:
103.181.164.0/23
IPv6:
2400:5a60::/32
Signature Algorithm: sha256WithRSAEncryption
c8:5a:f8:7d:5a:4e:e3:14:c0:c0:ec:91:af:20:6f:9d:3e:8a:
ba:08:d4:03:1b:83:0b:00:34:d4:f6:d8:71:ea:44:c2:f7:2f:
51:65:ca:fe:52:d4:2f:fd:37:16:05:ba:d5:c4:3c:6a:bc:eb:
a4:a7:67:61:53:23:40:56:bd:c6:e8:44:1e:b5:30:5c:5b:8d:
4d:b1:82:3c:1f:30:a3:0a:2c:97:c0:7f:c8:8c:9b:93:22:f5:
59:02:b3:3f:bd:1c:ef:d6:ab:83:55:d1:a3:ad:6d:f1:00:74:
50:74:2a:0c:ed:2a:07:3f:c8:df:f4:39:80:f6:4e:1b:eb:8c:
32:72:f1:06:5b:2a:bf:b8:57:71:56:37:36:46:04:6e:0e:c2:
d3:32:38:fd:ab:01:82:1f:6c:2a:44:98:63:ee:80:f8:f2:b5:
16:6c:5b:8b:86:c1:ac:bd:e7:c6:8b:0f:02:91:9f:3d:50:b1:
6a:ff:fe:31:0c:26:60:5e:73:89:25:4a:81:43:62:d0:fb:f4:
e7:96:64:ef:82:da:73:7b:8a:8b:b6:43:7d:d7:96:59:68:df:
ef:97:73:f5:a9:ff:8f:38:e6:9f:60:19:c8:47:18:fc:d9:59:
56:04:a4:c8:66:a3:2e:ca:a7:5d:ce:a9:58:f9:ff:1a:ae:e8:
68:60:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:31:41 2024 by rpki-client on console-fra.rpki-client.org