Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
File: taHQH3ui3UVMy-zTGGzhR6_-G64.cer (raw, json)
Hash identifier: /TzwL8GHcMgntYYqbce64p2ENGKFi16u+N0NcWDrOgs=
Subject key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02194F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 19:53:50 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 7467
IP: 103.150.39.0/24
IP: 202.134.50.0/24
IP: 2001:df0:be::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137551 (0x2194f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 19:53:50 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:d4:05:c2:c6:8d:43:23:03:c2:32:d5:93:
f3:49:2f:12:51:19:d5:83:ce:96:7b:4e:bb:42:2c:
d5:72:1c:3b:62:48:14:ff:2f:62:c5:45:57:3a:4d:
24:7e:72:47:d5:02:07:45:99:0a:7a:2d:3a:f7:9b:
99:11:06:7f:1e:df:5d:3c:ee:d5:47:2f:22:3a:08:
1e:19:cb:d7:94:aa:51:f4:37:a5:31:d0:37:ca:fb:
fe:05:ed:da:8d:84:43:65:a0:da:cb:0e:b3:bc:b6:
a8:04:10:0f:28:79:b4:75:c3:12:d2:9e:a9:d4:2d:
1d:a3:26:10:23:67:f1:18:aa:b7:a0:00:41:a4:63:
db:0f:de:ea:95:ee:64:31:7c:ec:e4:cf:2f:1c:b6:
e4:69:fc:6b:21:22:78:f6:5a:f3:82:68:7f:98:61:
e5:ac:b0:fa:86:cc:10:15:ae:94:9b:b5:f9:13:0a:
2f:e1:2d:22:15:ff:5f:fe:e5:6c:c3:b3:d6:1d:a5:
c3:c6:6c:5e:3d:69:99:5b:fa:44:d7:d4:a1:c0:2c:
78:51:1f:62:7c:05:f2:da:91:60:69:74:7c:dc:7c:
17:9f:ad:d0:fd:27:10:e3:00:5b:2f:42:4f:34:87:
4d:3b:e9:0f:f8:c3:1e:fd:16:e5:69:12:36:7d:54:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7467
sbgp-ipAddrBlock: critical
IPv4:
103.150.39.0/24
202.134.50.0/24
IPv6:
2001:df0:be::/48
Signature Algorithm: sha256WithRSAEncryption
39:10:a1:2d:a2:31:88:e5:5b:29:c0:25:5b:fb:ba:e9:e7:48:
4e:e4:16:70:b0:44:3a:a6:2b:99:85:c5:f9:7c:ae:dc:97:48:
81:dd:79:8a:73:27:84:5e:8f:7a:58:06:eb:da:e4:25:9b:ef:
40:92:ed:31:d3:5b:31:77:c8:0d:bb:e2:14:df:95:5c:4e:b2:
4b:cf:80:75:43:94:1b:18:1f:e1:e4:09:d8:9b:a5:b8:88:72:
0f:d5:10:2e:93:1e:3d:80:70:8e:c7:18:86:3b:76:55:0a:0d:
f9:53:e1:89:32:a6:4c:0d:55:7d:ce:c0:7b:9a:8e:67:7b:0c:
8a:9c:46:2d:48:c7:2b:88:52:74:66:3e:20:0e:42:86:37:57:
9c:b1:b8:ca:7e:83:39:b7:4f:e3:98:ed:90:99:85:74:bb:95:
4a:cf:8e:46:b4:9a:06:ba:de:33:ad:f3:3c:2e:b6:62:d2:88:
06:80:e1:3a:e0:9e:e0:31:ed:99:62:db:9b:86:1d:3f:a8:d0:
d8:d8:e0:16:fb:d6:54:eb:72:54:be:1e:75:aa:3a:ad:55:5f:
6c:fa:f3:0d:72:25:96:87:40:6d:7d:40:c3:e5:83:58:f5:49:
5f:a2:64:0d:2f:59:06:9f:29:6a:95:42:36:54:f8:1d:b7:8e:
61:9d:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:04:06 2024 by rpki-client on console-fra.rpki-client.org