Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer (raw, json)
Hash identifier: jPYSaJvSdtEtuMOqYIlNB85WhQ41Ld44ncjio6dfTDY=
Subject key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01D43E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Dec 2023 19:15:48 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 38017
AS: 139674
IP: 103.147.56.0/23
IP: 202.59.128.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 00:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119870 (0x1d43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 26 19:15:48 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:a0:84:cc:56:17:63:4c:f6:34:4f:e6:31:
99:10:ea:1d:d0:76:48:2b:b0:54:49:82:db:bc:a1:
49:a4:48:63:3a:cc:ee:3d:b9:d9:37:66:78:66:a1:
96:98:9c:d2:b7:2c:f5:83:74:fd:45:7c:02:e0:61:
52:b1:7e:81:c8:06:9f:f2:fc:97:4b:03:05:ba:72:
b2:21:81:e6:3b:ea:ca:bb:4c:b5:8b:9d:98:26:a0:
df:ab:39:ae:ea:d6:ec:4e:8c:66:2e:c2:78:ab:57:
84:e7:f6:c0:50:46:72:b6:f9:f0:68:79:e9:0d:71:
f0:82:a0:32:55:9e:e1:02:be:39:c6:7d:f6:d2:00:
6d:04:34:b1:e6:9a:12:41:41:9a:cc:f8:46:e2:ff:
4f:55:e1:6b:8a:9d:43:89:1a:a4:dd:08:8e:74:57:
98:d1:8a:84:65:7e:ff:d8:fc:cd:86:52:de:8e:61:
bb:12:07:4b:25:ba:5b:fa:8c:38:c8:6d:94:45:bb:
9a:f3:97:26:25:35:18:df:1c:fe:3f:86:c5:d0:97:
b9:56:9b:b7:7d:f4:da:db:89:d7:01:e4:8f:f5:19:
a2:ad:52:fe:e9:4b:86:b5:21:a5:87:a3:47:9e:a3:
c2:68:27:09:b1:2c:09:cf:22:da:f9:3c:83:56:99:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38017
139674
sbgp-ipAddrBlock: critical
IPv4:
103.147.56.0/23
202.59.128.0/20
Signature Algorithm: sha256WithRSAEncryption
26:82:0e:41:f2:39:d3:72:11:cb:c4:b5:6f:72:2b:98:e1:1d:
76:ef:9c:7d:55:34:39:1b:9d:5c:4e:ab:4c:78:b3:d6:8b:34:
dc:10:1f:79:40:43:ff:35:b2:8e:7e:3e:b3:be:5f:98:32:d1:
2e:06:4b:98:2c:6b:74:68:53:6e:41:66:60:5e:40:f3:35:1b:
9d:b3:47:46:61:f0:17:41:88:55:e1:48:05:62:69:cc:bb:a9:
4d:f5:f1:ca:e2:f8:73:ec:eb:8f:d6:c2:33:05:92:08:31:b4:
2e:f2:2c:1a:f2:fc:cb:f9:29:50:53:23:af:f4:4c:cb:8c:b0:
b6:38:15:d2:15:af:bb:b2:d1:9d:90:ef:4c:5a:28:22:82:71:
3b:45:9d:89:fb:31:d3:e5:95:6b:87:f7:ec:e3:a3:04:5b:39:
f4:6b:c2:ea:1e:04:18:0d:59:91:1c:10:1f:00:05:25:9e:4e:
91:6c:03:dc:35:4e:49:cd:25:e1:66:c7:79:1a:c8:31:11:5b:
e9:d7:50:d9:8a:5d:92:cb:91:de:b3:6c:3d:3d:78:ca:a8:e5:
51:d7:10:f4:8f:81:af:2d:83:93:f3:cd:2e:5a:ff:51:9b:7f:
dc:77:29:bf:f0:01:3c:cd:7a:17:49:a5:7d:9d:bb:ed:03:d3:
4f:4d:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:17:16 2024 by rpki-client on console-fra.rpki-client.org