Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
File: tgQSzpgJwQxn3eq7oOM1462k_hA.cer (raw, json)
Hash identifier: 7tH5cOLYnzbnkArVNt8g5YhNZ+o/+Tb52G8QmeBI+wY=
Subject key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C590
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Oct 2023 06:12:12 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 149849
IP: 103.188.88.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 06:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116112 (0x1c590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 23 06:12:12 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:0e:58:bf:7b:37:dd:69:94:b0:f1:73:eb:
61:63:79:f6:a6:38:ba:58:27:b8:30:1a:76:6e:bb:
12:7c:33:ba:91:c7:6f:cb:f8:4e:f4:64:93:48:08:
1b:08:03:48:4e:5e:31:26:6c:c5:a0:ab:a8:14:5b:
1f:38:9d:ee:50:22:d0:1b:6c:94:48:72:58:22:e7:
be:a2:b1:d4:c3:81:27:3f:bd:23:7e:5e:1c:50:11:
b9:a7:07:46:2a:40:38:52:a1:c1:b5:87:d1:ac:31:
f5:c3:23:09:78:76:ac:fd:61:62:81:73:7f:99:1f:
e0:c6:a9:d8:b2:af:75:d3:13:27:9b:00:02:2a:25:
36:4d:47:d8:ab:d2:b4:77:ca:c4:3f:77:ea:e3:8e:
8c:1a:3e:31:71:3c:88:a9:df:68:42:10:7d:5a:ca:
e1:61:54:85:1f:c2:ef:6b:55:0b:79:9c:02:a2:5e:
3f:cc:5b:d0:d2:ec:0e:c3:6d:cc:67:1c:7e:75:5c:
ad:35:99:e3:b6:ab:7d:52:eb:c2:f7:3c:dc:71:cc:
8b:44:ea:d1:b6:81:f6:3c:fc:bc:dd:05:3e:32:ab:
6a:be:97:5d:a0:2d:1d:c4:11:0a:6f:87:9b:f0:73:
a2:71:09:e4:46:88:e4:e3:5c:0b:4d:9d:23:4f:5a:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149849
sbgp-ipAddrBlock: critical
IPv4:
103.188.88.0/24
Signature Algorithm: sha256WithRSAEncryption
85:68:8f:6d:bd:0c:2c:1c:a8:3e:21:a9:95:a7:b7:61:24:90:
b5:31:f6:e4:e8:b2:9d:62:41:c8:93:fe:24:a3:f4:fb:80:2c:
3e:50:23:0f:25:b4:03:36:3f:9a:3f:12:59:d0:99:b7:15:cb:
4d:5e:01:b3:a4:1c:a4:a7:b1:fa:6f:83:04:63:bb:5e:de:78:
bb:fd:ac:dd:07:c5:9d:5a:46:01:16:dd:05:c3:4b:23:fd:f4:
d2:ed:59:27:ed:d9:25:11:14:ba:da:34:34:eb:a5:5d:70:86:
38:4c:ec:78:0a:e6:26:1d:45:d4:49:a7:1e:8e:41:6f:08:f4:
eb:39:50:fd:dc:82:a8:26:db:f0:45:59:d0:ba:9b:cd:19:7f:
e8:35:fa:e0:72:89:bf:9f:a8:57:6a:ba:eb:19:e5:e1:db:9a:
39:3b:37:6d:9b:70:ed:85:84:c1:bb:f4:8b:26:f5:26:a0:85:
cd:5e:15:56:fb:e3:f4:34:f0:88:7d:6e:48:9c:94:fd:e4:df:
95:a9:21:4e:59:a2:81:e9:45:05:28:e2:a3:86:04:c3:b0:ea:
e6:42:c4:7f:6f:dd:db:93:90:09:90:1a:43:d6:cf:59:3c:cc:
c9:54:dd:54:81:f2:6a:5f:6c:3e:39:cb:a0:29:c9:77:1c:29:
42:d5:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:03:52 2024 by rpki-client on console-ams.rpki-client.org