Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer
File: u-KUkERtaHB2W05h1-ubIsYARjg.cer (raw, json)
Hash identifier: enwfINLE0Qz9kcTs3ohIAm7twRTZKvIp0nBEEgrpX3M=
Subject key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AD96
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Jul 2023 16:11:49 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: AS: 136908
IP: 45.121.32.0/22
IP: 103.96.244.0/22
IP: 2401:7f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 20:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109974 (0x1ad96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 16:11:49 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:69:75:a9:74:0d:ff:03:96:7c:87:65:50:
7c:d8:7a:7d:f3:15:53:0b:2e:ba:d5:c6:09:dc:90:
e3:01:5c:69:4f:52:aa:27:8b:93:ea:ab:14:71:4e:
cf:03:93:dc:0d:6c:cf:ff:20:9f:41:74:5d:ec:0a:
60:f8:54:d6:80:6f:45:b7:2e:15:be:bb:70:e7:22:
5c:8e:4f:b1:5f:b0:c9:5b:45:9e:aa:c9:ef:6e:09:
66:dc:c9:9f:dc:4b:32:cb:79:ec:48:88:3b:4f:68:
ef:32:3c:0b:86:8d:62:c1:8b:fe:2e:09:8b:4c:b7:
8e:85:a6:0e:1c:34:ca:04:57:99:67:3c:3f:ea:50:
4e:00:46:37:4e:3c:58:9b:f3:eb:65:9a:35:4a:a3:
90:f5:b8:17:76:1e:fd:97:89:e9:e2:98:95:ef:b4:
86:ce:a0:28:f3:02:d7:76:e3:d0:c9:c4:95:9b:e8:
66:d8:e4:8c:4f:af:e9:06:76:25:ef:99:9b:ea:c9:
ba:36:d3:51:e1:13:1b:d6:3a:2c:a2:76:dc:db:01:
b3:9a:db:73:99:e4:11:4b:1c:83:51:b7:67:8c:13:
c1:d4:ec:4b:d5:d4:db:5f:01:8e:63:8d:f4:41:fe:
12:05:2f:bd:14:66:ff:05:b6:fa:fa:81:55:95:4c:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136908
sbgp-ipAddrBlock: critical
IPv4:
45.121.32.0/22
103.96.244.0/22
IPv6:
2401:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
98:8d:ff:b9:d4:e2:12:cf:2b:78:97:3a:c9:a2:54:2e:2d:a1:
f9:15:b9:a6:7b:e4:b0:37:85:c2:fa:36:84:69:88:8b:87:5d:
7b:e6:57:97:0d:1b:a3:64:a9:ad:b9:64:f5:70:4c:8d:e0:75:
96:81:2a:2d:04:be:e2:72:cd:b9:a6:c9:72:16:ac:5b:5e:c7:
ff:62:a7:c9:ae:66:cf:9d:8e:fa:3b:54:af:9d:df:f2:92:d2:
ea:84:c2:59:c5:da:2f:2c:d5:8f:0f:00:76:99:78:9d:3c:87:
bc:69:fe:3b:e5:7d:a1:5e:ef:4f:90:11:24:f1:e4:07:15:6e:
ac:0e:f9:78:04:d2:22:48:a4:73:77:b8:52:d5:ca:c6:52:86:
c5:06:66:ad:56:eb:0f:c9:53:7c:7e:99:88:61:8d:e4:ae:f5:
df:2f:a6:4a:35:d8:20:07:56:ce:e7:c4:05:bb:2e:47:4a:47:
1f:d4:bd:b5:15:bf:d5:96:22:86:b0:c7:28:1f:a9:99:ce:a4:
f8:11:cc:b3:b8:ec:cb:9e:e7:c3:63:fc:9a:aa:1a:18:1a:db:
b3:5b:71:36:78:06:2e:45:f9:21:85:bc:18:0b:2a:99:9d:48:
a2:74:24:8a:4c:9e:f3:b4:c8:ea:f1:bf:12:09:6f:c7:8c:72:
c8:32:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 22:13:48 2024 by rpki-client on console-fra.rpki-client.org