Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
File: vBN8J3flHee9Gs6A2Gj9k6HsekM.cer (raw, json)
Hash identifier: 09vbDioalBiZzalztT/xuZc15hCKMrX6pCPUVgwHdQU=
Subject key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A5DC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 May 2023 13:41:30 +0000
Certificate not after: Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 58925
IP: 103.25.124.0/22
IP: 2406:db00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 03:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107996 (0x1a5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 13:41:30 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:11:f0:67:c5:8a:5b:ab:83:ec:de:32:19:
63:e9:29:b9:13:18:a4:2b:a7:bb:f6:c4:3c:b5:c4:
7a:9a:1b:5e:ec:5c:e0:ee:6d:02:20:f9:50:46:7e:
02:dc:e4:10:6c:7d:f5:f3:3d:46:3e:55:98:06:45:
26:4c:c1:3d:37:46:bb:77:0c:78:2d:56:13:64:6d:
0d:22:d9:7b:ef:a0:75:c5:f1:aa:ba:e3:00:3a:35:
df:9b:7d:ec:1b:3d:3b:51:c2:c9:78:97:46:a7:79:
cc:97:95:e7:3c:e5:23:1c:64:97:6e:e0:af:75:19:
e3:8c:2f:3f:73:e3:89:ed:33:fa:70:df:c0:95:ed:
d7:81:e3:a7:b0:11:82:22:41:e0:5c:cb:d0:02:43:
c2:eb:66:5a:68:35:1f:20:40:23:80:32:c5:51:b4:
bc:e6:83:a3:e4:ac:75:48:ee:bd:54:7c:bd:7d:8d:
2a:3e:02:75:90:39:3e:8e:4d:22:2e:47:1f:2d:02:
3a:2a:78:c3:68:2b:0a:76:0b:1d:25:7a:38:8a:de:
c3:4c:43:e8:8b:97:dd:fe:9e:81:be:a4:8e:03:f8:
a9:f2:ba:15:be:81:35:a7:76:84:52:9d:44:d6:10:
8f:ba:22:d2:72:ed:38:4a:9a:b7:8f:c3:40:69:92:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58925
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/22
IPv6:
2406:db00::/32
Signature Algorithm: sha256WithRSAEncryption
6a:2b:9f:b8:a4:aa:f3:51:88:03:0e:e4:da:25:a4:6f:04:bb:
90:f8:af:4b:08:f2:10:1d:b1:37:a2:ed:a1:a2:3b:1b:ab:8c:
f0:66:c2:d6:da:28:60:a5:21:0a:0b:cd:6c:35:3e:da:1c:17:
bd:0e:97:69:17:e0:d4:f7:7d:98:e1:f1:86:83:dd:1c:77:31:
35:38:4a:d5:40:6d:d3:d6:fe:87:63:e4:36:6a:2c:45:57:db:
3b:ad:c8:c4:44:1e:f1:71:e7:1e:82:29:51:7d:ff:dc:3c:6b:
70:17:6e:42:7c:ee:d2:8f:63:df:34:3b:46:cd:cf:e6:08:25:
85:01:a4:05:8a:05:ef:6b:1b:8a:71:17:cf:10:a6:f5:53:f4:
19:2a:23:27:88:e4:49:61:40:46:65:e7:9b:2e:01:2e:01:31:
5a:70:6e:c5:fa:ac:a8:db:d6:65:b3:d2:69:69:23:24:b8:bb:
63:64:c0:d6:9f:d3:e9:91:e4:dc:be:b3:b2:68:5d:25:81:c0:
48:9a:93:4c:f8:9c:61:ef:d4:b6:94:67:ad:25:29:d8:fd:f7:
7f:26:12:f9:ab:7b:f0:7f:be:0d:da:77:fa:ea:76:32:d7:2f:
44:46:1f:bd:c3:19:32:b6:13:8a:72:5d:eb:00:f3:18:1b:3c:
17:fc:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:09:47 2024 by rpki-client on console-ams.rpki-client.org