Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
File: vBN8J3flHee9Gs6A2Gj9k6HsekM.cer (raw, json)
Hash identifier: IHNBbNxqOkFOySpxQ/iNLJ1B+xYpEpZnzkNfmXyIStw=
Subject key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020F20
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Sep 2024 05:08:00 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58925
IP: 103.25.124.0/22
IP: 2406:db00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134944 (0x20f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 24 05:08:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:11:f0:67:c5:8a:5b:ab:83:ec:de:32:19:
63:e9:29:b9:13:18:a4:2b:a7:bb:f6:c4:3c:b5:c4:
7a:9a:1b:5e:ec:5c:e0:ee:6d:02:20:f9:50:46:7e:
02:dc:e4:10:6c:7d:f5:f3:3d:46:3e:55:98:06:45:
26:4c:c1:3d:37:46:bb:77:0c:78:2d:56:13:64:6d:
0d:22:d9:7b:ef:a0:75:c5:f1:aa:ba:e3:00:3a:35:
df:9b:7d:ec:1b:3d:3b:51:c2:c9:78:97:46:a7:79:
cc:97:95:e7:3c:e5:23:1c:64:97:6e:e0:af:75:19:
e3:8c:2f:3f:73:e3:89:ed:33:fa:70:df:c0:95:ed:
d7:81:e3:a7:b0:11:82:22:41:e0:5c:cb:d0:02:43:
c2:eb:66:5a:68:35:1f:20:40:23:80:32:c5:51:b4:
bc:e6:83:a3:e4:ac:75:48:ee:bd:54:7c:bd:7d:8d:
2a:3e:02:75:90:39:3e:8e:4d:22:2e:47:1f:2d:02:
3a:2a:78:c3:68:2b:0a:76:0b:1d:25:7a:38:8a:de:
c3:4c:43:e8:8b:97:dd:fe:9e:81:be:a4:8e:03:f8:
a9:f2:ba:15:be:81:35:a7:76:84:52:9d:44:d6:10:
8f:ba:22:d2:72:ed:38:4a:9a:b7:8f:c3:40:69:92:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58925
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/22
IPv6:
2406:db00::/32
Signature Algorithm: sha256WithRSAEncryption
1d:cf:95:99:24:39:e2:dd:2c:c5:12:af:68:7f:15:fe:62:d4:
a4:9f:fb:ad:80:cc:ba:67:a5:48:bd:03:bf:f4:08:36:28:7d:
d1:d2:de:bb:4a:06:aa:6b:7e:d1:6e:41:e7:df:93:6b:13:fa:
11:e9:95:a1:76:33:59:d5:b9:c3:d4:c7:fb:32:5f:92:72:5d:
d2:07:f5:f1:68:64:50:29:b3:f9:ed:07:e8:12:d5:ab:d4:80:
d0:90:54:db:f3:6f:7c:d7:31:79:6a:85:c2:cf:a3:67:d8:41:
73:33:97:f7:40:14:8c:3a:67:d8:96:07:40:dd:31:ac:6c:db:
6a:21:55:de:f8:e5:e7:07:c3:22:9d:86:89:a3:00:f2:8f:e5:
7f:d2:b3:3b:ca:f8:5c:fe:02:77:2c:2f:31:ff:85:d4:18:83:
4c:34:7f:99:68:79:75:7a:b5:f7:f1:bd:00:70:87:e7:28:ab:
37:04:72:51:59:1e:6b:ee:82:eb:8b:dd:e5:a0:f1:d9:58:d3:
59:58:52:6f:70:6c:42:2a:98:18:ca:70:40:1c:39:97:21:a2:
d3:02:2d:50:62:d3:74:b2:7f:34:93:fe:4d:a0:1d:ab:6e:cf:
bd:09:cf:c7:ff:54:a1:c6:66:49:c1:80:f4:d7:57:6f:42:fb:
fd:ce:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:19 2024 by rpki-client on console-ams.rpki-client.org