Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer
File: vi_5e5tTTVONpBoJtsCNAjMuhlU.cer (raw, json)
Hash identifier: 2ODdNDd6AHOyD4Nprub1V7fmNekJBdXOw0eAv7v6ISw=
Subject key identifier: BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02194D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 19:36:58 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 141353
IP: 103.157.108.0/23
IP: 2001:df5:1d80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 11:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137549 (0x2194d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 19:36:58 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9173D07/serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:89:a4:88:f0:c5:75:63:73:f1:2f:44:62:
61:af:7b:60:f2:dd:aa:19:ad:45:e4:0c:9a:e0:46:
03:14:a9:17:39:e3:62:4d:c9:20:e2:58:2c:74:98:
75:1c:74:b8:3d:17:65:ee:0c:ee:d1:30:22:b3:82:
47:78:7d:b8:fc:34:cb:91:db:e3:79:bd:2c:ea:43:
8d:91:fc:87:52:8c:c7:8d:de:d5:51:0e:c8:66:ea:
62:44:ae:bb:05:a0:ef:ac:c0:f3:71:61:90:ec:92:
27:24:f3:bc:e3:99:24:ed:8d:c7:b8:60:d7:bc:20:
26:ca:a3:9d:6a:9c:ed:75:32:09:b0:c8:15:88:9b:
f1:a2:44:95:08:74:02:89:ab:6b:2e:53:5e:24:5f:
17:b1:3e:a2:13:31:f5:e4:d4:ba:78:c3:a8:f1:28:
ef:0f:17:40:3e:19:4d:86:c6:d8:96:07:f8:86:9d:
c8:be:18:3f:3a:5e:03:72:86:cb:ee:48:83:00:3e:
97:ca:36:3f:4e:a3:92:d5:68:5b:3a:66:fb:8a:09:
3e:c4:8c:75:96:02:85:18:c8:3d:13:80:9f:49:b9:
bf:75:52:19:a2:8e:50:f9:49:d5:eb:d0:4f:e7:0a:
a7:84:ee:96:49:ff:af:b1:f3:5d:64:bf:37:ad:e7:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141353
sbgp-ipAddrBlock: critical
IPv4:
103.157.108.0/23
IPv6:
2001:df5:1d80::/48
Signature Algorithm: sha256WithRSAEncryption
99:d3:59:72:a0:04:dc:e4:4f:ba:14:f4:60:72:f6:e2:49:a2:
a9:c9:7a:b5:2c:fc:d2:d6:78:7a:9f:64:05:77:02:5e:2e:42:
71:92:83:58:40:4c:3a:01:06:bb:4e:1b:b3:39:12:c6:72:43:
2e:36:03:a6:63:81:41:66:b9:40:b5:49:2b:d7:f2:e4:7f:94:
08:e7:d8:a4:e3:a9:28:43:fb:f2:83:a1:99:b9:c3:d9:f2:ae:
99:66:30:5f:e8:05:2d:8f:7f:eb:c9:78:8a:31:34:60:91:86:
5c:c1:c3:ba:72:9c:f1:93:d2:4c:06:1b:4d:31:5d:f9:04:ba:
11:42:64:af:47:5a:e3:72:36:b3:12:3d:e4:b3:78:d1:3b:23:
6b:26:61:2c:aa:31:8c:97:fe:12:f8:dd:55:9c:2c:d8:77:6b:
cd:92:a7:3d:e5:43:0a:08:eb:f7:b6:7f:90:a4:ed:af:bc:a1:
11:08:d5:61:4e:77:6a:55:b8:6b:d1:ce:ee:40:b0:6a:91:ed:
c6:b4:46:ee:46:08:67:74:7d:2c:a6:4d:d1:ed:04:82:f9:eb:
bb:cf:de:8f:67:02:6f:cf:e3:99:de:08:85:07:2a:2b:38:50:
63:91:68:99:40:a8:88:87:83:46:61:a8:b0:16:ae:b4:cf:3d:
0c:fe:23:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:37:55 2024 by rpki-client on console-ams.rpki-client.org