Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
File: uttpn6AqlXLm70n0-Rof4Kc8LI0.cer (raw, json)
Hash identifier: ZaZBUDihYBpD59JBNVFoYH4L//D75pBq0qrDxAgU1NQ=
Subject key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D633
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jan 2024 22:23:02 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 24321
IP: 202.73.8.0/22
IP: 202.87.216.0/22
IP: 2407:6000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 07:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120371 (0x1d633)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 2 22:23:02 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:fe:e8:14:bd:5f:92:f1:c0:2d:2d:2f:33:
9c:e1:cb:c1:0a:d0:dd:32:d9:95:ca:6a:c9:08:f1:
67:aa:b6:be:0b:5e:7d:7a:8c:fa:28:74:7c:a3:f8:
e2:49:ab:fa:31:1f:88:70:7f:76:ba:b8:5f:c8:59:
66:2e:6a:2b:0c:d8:27:a5:c5:33:c4:15:9a:a1:26:
99:02:cd:c3:62:b5:1f:46:49:fd:5f:bb:56:6c:db:
64:69:9c:23:19:6e:e4:e7:03:46:56:43:c0:08:3b:
ac:84:f0:1e:00:3f:70:55:47:7b:80:8c:8a:db:6f:
0e:f3:9e:a3:68:42:89:5b:ac:09:d2:c8:f7:bf:33:
9e:74:e1:ce:26:14:97:37:ae:42:a0:1e:01:3a:15:
35:1f:c8:52:bc:db:cc:c1:76:cb:6e:d3:bd:0a:c1:
77:20:a8:bb:19:21:34:b0:c4:f9:16:15:14:78:25:
24:ca:f9:98:fd:d9:f1:37:e1:91:c9:ec:ec:9a:ff:
67:3c:d5:89:02:54:1e:70:98:ed:1a:fd:73:a7:bf:
0f:7b:4f:79:a1:93:5d:fb:e7:75:ab:5a:a3:6b:a4:
0b:30:d7:7c:64:39:c1:45:c5:96:2a:49:56:2e:e0:
e1:9a:06:78:ab:14:92:99:db:da:42:38:f0:dd:5c:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24321
sbgp-ipAddrBlock: critical
IPv4:
202.73.8.0/22
202.87.216.0/22
IPv6:
2407:6000::/32
Signature Algorithm: sha256WithRSAEncryption
da:36:29:c7:2c:d7:9f:c2:fb:40:8a:8e:39:80:bf:54:38:d3:
33:59:a9:14:d2:24:39:be:66:61:73:a6:2f:99:e7:12:00:d6:
77:44:11:5b:5a:1a:a9:5b:5f:54:00:fa:8b:da:ea:42:2b:a8:
86:dc:20:3e:58:f6:c8:5f:07:a1:0d:b5:88:d3:1e:6f:d2:88:
c3:b1:14:f4:d2:74:0e:8e:0b:64:78:a6:bb:e0:7f:8f:99:d7:
0a:dd:da:d0:c7:c0:17:0b:9d:f1:55:fd:52:a2:5b:c3:b4:23:
0a:28:80:31:75:5c:c3:a7:7c:dd:ff:84:10:9f:80:01:c8:1a:
68:51:2a:e3:ec:e0:1e:90:b6:f9:2c:2b:ed:db:f9:01:8f:f9:
3f:1b:74:79:01:1d:13:ae:bf:3e:a1:39:d5:e7:6f:40:58:93:
08:5f:5a:37:7b:ab:4e:81:7b:b1:c8:7d:a8:e6:c2:48:48:33:
61:d0:0e:b8:f1:c3:ee:39:4f:fb:6d:6c:d4:4f:39:26:e4:a5:
64:dc:e3:c4:19:11:64:ad:84:5b:44:e0:56:46:3a:df:e2:19:
88:17:d6:43:45:46:92:00:e1:06:15:d2:e0:3f:54:b9:e8:9b:
aa:2e:af:b7:78:e3:4c:d3:6e:ac:65:38:23:b1:1b:c3:cf:75:
8e:ba:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:15 2024 by rpki-client on console-ams.rpki-client.org