Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
File: twc6HQnyOiR_zleFKqS4poDG2nA.cer (raw, json)
Hash identifier: S0Id2uf1FY2hXE1uyikH06vNpwGan1lAbJXeL+Mhyys=
Subject key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021953
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 20:26:30 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 132457
IP: 103.21.194.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137555 (0x21953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 20:26:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:41:e0:90:cd:79:c4:63:d1:09:21:08:8d:
1a:81:f8:d7:35:67:a4:b6:8a:82:23:96:06:6e:12:
44:64:3b:73:8b:3a:ad:a3:60:33:d4:3e:ca:3f:04:
d9:28:17:27:9f:ce:f9:ab:eb:0d:e1:53:37:8c:12:
ab:fb:7c:c7:ae:74:f7:5e:eb:92:d6:38:c3:e9:41:
ae:16:b2:fc:75:d6:fa:ed:80:76:96:2b:de:72:62:
39:49:a2:84:65:28:1f:95:f5:0e:b0:6e:2c:f1:30:
46:aa:e9:f1:a1:2c:31:71:7d:a0:44:88:b1:75:30:
a4:79:bf:c0:ae:1b:44:50:95:e1:99:5d:aa:77:75:
9b:ac:f4:2c:36:8d:68:1e:57:fc:3f:04:b9:66:ed:
1b:ec:e1:e1:ae:ed:17:2d:96:d4:0d:6f:4f:ec:11:
15:1e:4c:2e:51:79:dd:82:9e:ae:b4:85:ad:8c:f1:
e3:8f:97:19:5a:87:c8:1d:89:70:05:86:64:3e:8f:
57:4b:f9:63:dd:f1:7d:64:24:07:0e:2a:ea:81:76:
cf:76:f0:ab:f3:c7:9d:68:9a:23:8e:92:38:f8:f7:
64:9e:13:33:d1:a3:24:1f:08:b4:31:e1:32:24:35:
24:ab:f5:e0:cb:c8:2e:5d:c0:cf:45:12:da:ee:42:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132457
sbgp-ipAddrBlock: critical
IPv4:
103.21.194.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c9:47:7f:20:d8:6e:f3:30:1f:97:74:7a:3d:94:32:d3:df:
d8:26:40:f2:e8:84:86:c5:37:e3:1e:9d:51:80:b6:27:9c:be:
a2:46:56:28:6e:61:1f:e6:d0:bc:5f:5d:9c:67:d6:c8:c5:c7:
e9:2b:6d:48:94:a2:2c:dd:e4:1d:e8:59:98:1c:97:bc:95:c6:
d2:92:2d:d4:e2:16:92:19:9d:a7:bc:d5:9b:02:09:c7:84:30:
a5:82:b8:28:e8:d4:ff:26:78:ba:05:48:6c:b1:c2:3a:c7:35:
7b:b5:b7:1b:75:39:93:23:ce:18:07:c9:b3:8d:01:0d:40:01:
b6:47:f6:fd:e2:4e:09:f6:e6:e9:89:36:14:79:27:4b:fd:37:
1a:2a:25:cd:e8:bc:01:56:ec:a0:72:b8:88:f1:bf:fb:45:a7:
69:3e:a2:5b:39:62:3a:0e:56:8a:46:8d:15:e7:12:56:7e:1f:
a4:b0:cf:d1:d7:24:ad:9e:7e:a8:1b:55:40:0d:e5:d7:9c:da:
7e:d8:0b:4a:32:c7:56:6b:d4:d6:71:fb:07:32:5e:75:e5:c8:
7b:b2:1a:a7:0c:5e:f4:2e:8d:33:5a:be:d1:c4:4b:41:64:15:
fd:62:07:7d:cc:d4:6c:a4:b9:4a:5d:39:f1:15:ad:ba:c7:1f:
8e:25:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:08:17 2024 by rpki-client on console-ams.rpki-client.org