Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
File: sGG8SKFEEACr64xEignxlfkTnho.cer (raw, json)
Hash identifier: 3IWsDG1oaaw5dmcZ9F0EPNuLjqM2Dci7a3erNNYVs28=
Subject key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EBDA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Apr 2024 18:55:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 132528
IP: 103.73.108.0/22
IP: 2406:f780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125914 (0x1ebda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 16 18:55:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:bb:cc:a0:65:a2:c9:2a:86:c8:43:53:9d:
60:bd:8e:84:4e:be:e0:05:d4:4c:85:b8:a9:e0:c3:
c6:f2:67:2f:9f:a2:2d:2b:a4:2e:7b:2d:8c:40:25:
94:71:62:b0:64:02:1a:87:c8:33:1e:30:3d:b4:31:
a7:a7:5f:60:81:d2:40:cc:df:41:c1:bf:c9:28:00:
03:05:93:c5:fb:2d:e4:d2:01:d3:eb:54:ca:bd:29:
fa:3f:f2:70:bb:d8:b4:e4:99:c1:25:da:c7:b5:f1:
b6:e0:ce:57:6e:21:b4:64:3a:70:02:6a:eb:9a:5c:
03:de:7c:d4:5c:bc:27:b2:15:e5:47:f6:10:14:b4:
86:30:4f:33:bf:46:68:d0:d2:b2:80:27:66:78:01:
0a:bc:9a:26:13:1b:6c:87:ae:c0:c8:b8:b5:7e:82:
2e:3b:72:0e:bb:d7:0c:fe:76:c5:8f:0e:6e:e4:52:
94:84:f0:c3:55:46:d1:f2:5c:fa:1a:5c:d7:ee:2e:
19:0d:33:d7:f6:9b:3e:59:fd:ad:d5:8b:9f:76:8d:
a7:e8:4f:0d:0f:68:7e:48:7e:9f:9f:b1:a7:0f:10:
a7:e1:b2:77:10:dd:a3:98:c3:88:74:33:12:4f:64:
b3:a0:c1:fc:35:51:c1:3a:68:3b:7f:ac:b6:b7:15:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132528
sbgp-ipAddrBlock: critical
IPv4:
103.73.108.0/22
IPv6:
2406:f780::/32
Signature Algorithm: sha256WithRSAEncryption
85:e1:0b:ff:ff:79:01:86:58:ee:97:24:06:20:ce:2a:96:96:
36:3e:35:2b:36:c0:c6:3a:4d:b4:e7:bc:26:f4:2e:eb:14:87:
d5:9e:d6:ff:02:dd:4e:aa:41:29:78:f3:49:8b:3c:6c:70:80:
36:eb:d7:bf:a2:28:6b:d4:14:c6:2d:42:50:b6:e2:fc:41:39:
ac:fc:dd:98:2d:0f:eb:f0:58:05:87:2a:98:32:a5:01:72:8b:
4c:a8:da:3e:da:2b:10:d7:db:2b:07:66:25:c9:f4:14:cd:35:
e2:06:de:60:a7:e8:ae:fb:04:a5:f9:1f:18:da:fe:2f:be:81:
35:3b:5c:29:78:1a:47:87:9c:74:81:b3:29:ec:77:05:76:53:
c1:d0:90:f3:13:9f:fa:15:a8:86:7f:9d:b6:2f:aa:ad:47:29:
f1:6f:9e:9e:41:f2:16:b9:83:25:a2:53:07:a6:f3:7b:82:bf:
9d:81:ff:e7:dd:96:ed:61:ba:ec:a3:d7:71:76:54:81:7f:3d:
de:4e:bf:8e:44:1c:7a:9e:fa:38:c7:74:d4:5d:8d:d7:85:92:
7c:ec:9a:e1:71:02:c8:99:be:bb:e3:de:fe:81:de:53:48:e8:
a0:78:e8:29:a3:fa:69:5a:98:d2:f1:11:b5:29:67:10:ca:36:
12:31:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:18:45 2024 by rpki-client on console-ams.rpki-client.org