Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer (raw, json)
Hash identifier: HH2DK9gkTTtB05m+iz5FMfJQT9YbIubZmmzl/5GiW5Q=
Subject key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020072
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Jul 2024 01:12:40 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 136146
IP: 45.114.124.0/22
IP: 103.81.168.0/22
IP: 2400:7ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131186 (0x20072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 01:12:40 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:37:1d:6a:fd:15:00:99:c5:e1:58:e7:d5:
44:08:ec:df:be:38:27:54:28:45:ff:b0:17:a5:0f:
d2:67:b6:e6:f5:55:98:39:1f:b7:60:d3:8e:34:a6:
90:d7:7b:97:73:66:6c:4e:a6:31:b8:7d:ae:1e:32:
ce:cb:58:d3:16:0d:97:76:a3:ee:a8:31:4d:b8:c4:
26:00:00:14:ea:b2:1d:b8:27:51:48:b6:07:43:fd:
88:61:bb:83:0d:3d:8e:f0:39:12:7d:a2:fa:ac:6a:
8c:79:dc:05:77:fc:0a:07:7c:10:ba:76:a6:b5:d9:
64:51:25:f1:24:60:6f:e8:3b:c7:5d:31:a9:0e:2c:
e2:b3:d0:f3:87:ed:36:6b:54:ac:68:79:18:fd:1f:
2d:7d:77:e3:94:69:e9:fc:0a:33:3f:29:de:13:90:
30:2d:fe:52:6e:33:63:84:be:8e:47:2e:cb:16:c3:
c0:ef:9c:71:f2:e5:6d:6e:ae:2b:14:b2:81:51:93:
39:58:e3:ff:b4:c9:a6:86:da:94:5e:fa:83:50:aa:
ba:8c:58:d7:9c:7c:7d:3d:e6:5b:d4:14:05:49:96:
b4:86:32:ba:2e:a2:99:94:be:6e:fd:63:de:b4:b3:
29:00:7f:fb:66:be:bb:1b:1b:ce:57:ff:4b:82:c3:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136146
sbgp-ipAddrBlock: critical
IPv4:
45.114.124.0/22
103.81.168.0/22
IPv6:
2400:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
29:6c:f6:0a:46:98:a9:16:4e:dc:cf:cc:3b:e9:1b:2e:6e:6c:
4c:42:03:05:eb:05:72:1d:5f:bf:b7:c2:ce:fa:fb:ba:c7:99:
e8:d1:eb:0e:29:02:1d:5c:83:18:4f:c7:1b:f3:ac:4a:c3:97:
de:53:86:00:d4:1e:80:11:d1:b4:cf:d2:54:f6:f3:4b:34:81:
aa:e8:25:0c:b9:17:63:b7:d2:c8:61:bc:c6:8d:7d:63:ec:65:
b6:e9:a4:d9:48:a0:b2:3a:68:9e:91:3e:42:d8:97:e8:05:e6:
6a:46:b5:9c:26:05:4a:65:ad:36:0c:e1:71:8c:a0:a8:56:b1:
40:39:b8:6a:9d:2b:4e:17:2e:44:12:d5:c7:53:b9:a5:e6:61:
d6:8e:c3:d5:04:da:be:1f:52:a1:05:01:8b:a2:cf:21:92:1d:
96:99:b1:bc:80:7a:ca:9f:ff:2f:90:c3:66:b3:bb:b5:1c:62:
cf:65:a1:5a:d5:03:a7:da:b0:09:71:5e:a6:0b:db:71:ed:e4:
85:7b:c4:23:56:da:fd:5b:72:50:c8:15:71:42:7d:89:7d:c9:
67:73:c8:5d:e2:b6:a0:97:2d:3f:02:38:6a:0a:16:fa:26:83:
2e:89:58:fd:89:4d:4b:5d:e4:68:74:11:ff:a0:79:84:31:d4:
21:10:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:42:14 2024 by rpki-client on console-ams.rpki-client.org