Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNJvE0_OB2TMZ_yfJlx4U0HBtdQ.cer
File: rNJvE0_OB2TMZ_yfJlx4U0HBtdQ.cer (raw, json)
Hash identifier: OPKLeA1jTZJKF3T11G9h1zllnkbpLy6lbnlDhOdBkR8=
Subject key identifier: AC:D2:6F:13:4F:CE:07:64:CC:67:FC:9F:26:5C:78:53:41:C1:B5:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A32E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/rNJvE0_OB2TMZ_yfJlx4U0HBtdQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 14 May 2023 14:48:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 138932
IP: 103.137.96.0/23
IP: 2404:ae40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 21:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107310 (0x1a32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 14 14:48:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A9162661/serialNumber=ACD26F134FCE0764CC67FC9F265C785341C1B5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:27:d7:4d:51:42:6d:cc:d1:b2:fe:84:2a:
a8:d7:23:1a:96:05:4d:fc:f5:6e:48:b5:d1:b2:a8:
33:c0:99:59:d2:40:b4:b5:09:35:83:6d:cd:8d:be:
23:9f:ad:6c:7f:a9:6d:ea:15:4a:10:1f:5d:6d:fc:
0b:6c:1f:82:5b:64:0a:ca:bc:ec:76:70:cf:65:8e:
8c:c2:1a:51:19:4d:75:dc:ba:91:7f:50:3b:30:f4:
db:44:d9:1d:5b:bf:f6:48:04:f4:a3:38:4d:e7:ae:
0f:c6:0b:fe:0f:78:ac:6b:d6:7b:8f:7c:b6:5b:a8:
d3:a7:f9:58:7b:b4:b9:fb:d4:41:38:3a:5a:8e:75:
1d:d2:16:a2:62:9d:4f:3a:77:df:f5:07:cc:80:3d:
2f:05:3e:14:88:6a:1d:b6:ec:8c:e9:e0:86:36:29:
50:63:80:88:eb:19:c5:ab:23:80:03:fd:6c:e6:62:
e0:53:0d:4a:b5:fc:0d:b5:05:9f:de:88:96:99:d3:
77:4d:a9:f4:16:06:5b:0c:38:ed:af:0d:39:53:7a:
35:c9:95:88:3a:6d:62:9d:19:4c:8b:26:48:eb:d0:
30:7d:19:e0:46:63:11:35:a9:10:36:71:52:ba:49:
38:e2:81:9d:46:5f:da:3e:f7:e0:13:50:17:de:31:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:6F:13:4F:CE:07:64:CC:67:FC:9F:26:5C:78:53:41:C1:B5:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/rNJvE0_OB2TMZ_yfJlx4U0HBtdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138932
sbgp-ipAddrBlock: critical
IPv4:
103.137.96.0/23
IPv6:
2404:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
51:d5:cd:06:05:ea:84:00:a5:5d:17:09:f9:6d:1c:31:a9:6f:
d4:7e:ba:bc:4b:26:b2:12:46:8e:6a:83:fa:84:b8:2d:d3:09:
44:64:e1:98:d8:ea:af:01:76:d1:6c:74:9b:2e:c1:9a:69:11:
2d:dc:51:b8:1d:4f:59:70:e6:d1:23:06:0a:7c:70:ca:8a:67:
17:be:06:ee:50:f9:06:cc:47:ad:dc:e9:aa:c1:a6:3c:3b:0f:
4e:24:0f:29:92:02:01:59:ea:50:20:00:8e:c9:3f:86:c4:3b:
cb:d8:cc:bb:fd:34:0f:86:af:c8:26:26:eb:7d:7e:af:b1:c4:
8b:c7:81:c7:6d:0d:ed:52:ee:a9:b6:5c:e1:cd:ee:cc:4c:8f:
6b:8f:36:ed:75:db:14:86:ef:92:91:21:45:8e:9d:04:34:2b:
f5:a2:cc:3b:c6:e6:9d:7c:15:c3:1e:8e:bb:ec:2b:e5:48:3f:
d2:c7:af:95:3e:5f:18:47:7d:b5:69:aa:1c:a6:02:32:35:dd:
90:0c:69:01:bf:3d:36:34:f8:e7:c4:6f:bf:eb:ac:42:66:4c:
e2:4d:4a:92:eb:5d:d1:f7:6f:1d:a7:68:08:3d:44:ef:a9:08:
af:e6:bb:59:b8:9f:65:93:47:06:65:86:96:9b:79:ff:ae:25:
c1:13:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:45:01 2024 by rpki-client on console-fra.rpki-client.org