Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
File: vt7dCrwa8pN-0x02Azt8qwSLibs.cer (raw, json)
Hash identifier: M8MHkkRAyJmVb4kA9bc1wFj0xgXwgtc7x0uFSFytAOs=
Subject key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CEE3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 20:35:56 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 148973
IP: 103.175.26.0/23
IP: 2001:df0:5a40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Apr 2024 03:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118499 (0x1cee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 20:35:56 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:da:96:14:36:9b:79:7f:c5:d8:ba:f6:68:
e1:b9:97:1c:d6:df:90:29:d9:56:2f:60:94:1a:ed:
3f:b3:41:bb:c6:36:cf:24:b0:ff:3d:e5:ff:53:b2:
5a:87:3c:8b:26:b1:e1:a0:e3:06:77:4d:6b:b9:cb:
b5:09:f0:d1:ad:f7:0f:c7:56:22:67:6a:34:88:9f:
d4:98:66:18:ec:72:3d:63:b9:08:d9:95:40:6b:7e:
c5:26:3e:c1:01:f4:a0:c0:e4:32:bc:b7:59:4b:9d:
d8:94:3f:4c:a7:66:3e:a4:c6:d6:93:01:1d:17:5d:
de:bc:81:96:7f:3f:cb:af:5b:7e:f7:d1:5f:d8:8a:
cc:fc:ee:4f:e0:7d:2b:72:ed:06:8d:c5:2b:95:84:
0a:30:29:ef:53:b1:df:8c:a4:45:28:40:22:25:aa:
fa:65:d4:57:a4:6d:95:ec:67:ab:5f:14:71:a1:78:
11:02:38:a1:53:97:14:ad:e4:1c:b0:a9:e2:7f:4b:
31:a8:9d:4d:29:98:3f:df:1e:51:1d:63:83:3b:43:
52:54:fd:81:51:ae:d1:59:2a:ec:81:39:04:2f:61:
03:f8:2f:ff:9a:8a:30:2e:eb:a6:df:82:68:86:c8:
5a:f4:75:57:66:8e:21:31:ed:94:59:75:42:bc:35:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
148973
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/23
IPv6:
2001:df0:5a40::/48
Signature Algorithm: sha256WithRSAEncryption
24:c5:6f:dd:5f:05:8f:4b:f5:17:78:22:ed:ff:85:14:b6:81:
81:46:29:1c:82:1d:82:1f:c2:e1:12:4d:0b:67:7d:0b:eb:4a:
39:78:48:62:64:21:db:06:e2:16:3f:ec:0f:55:72:39:84:d6:
80:20:28:a6:33:a5:81:d3:78:5b:9d:d1:12:79:de:cb:74:9d:
d7:d2:00:2f:0f:f9:82:68:2d:50:28:1b:89:c4:33:c9:53:02:
8c:97:05:4a:6b:ac:24:83:28:e6:22:69:6b:21:54:ff:f9:a2:
d6:c4:f3:38:17:0d:8f:8a:91:83:c5:bf:ca:9b:5f:b6:ba:d1:
96:1f:c0:8d:51:b0:58:8f:54:3f:1b:a4:92:09:d8:e0:f1:fc:
f2:5a:bd:4d:6d:05:ed:63:ef:52:d1:8c:a4:00:0a:f1:98:fd:
d6:65:71:4b:a4:64:5f:5d:9b:28:67:bf:79:94:c3:ff:a0:67:
80:b3:97:0b:d9:2e:c7:8f:90:93:7b:26:fe:a6:2a:22:90:e0:
8d:8c:cb:89:f3:49:a8:f6:5b:6b:71:89:76:23:10:d7:83:32:
64:d9:be:9a:31:41:af:cd:54:28:52:ae:51:d1:ef:96:8c:30:
d6:f2:59:d5:7c:fd:10:e0:6d:c9:e5:57:ba:67:a7:1f:69:e6:
36:92:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:35:57 2024 by rpki-client on console-ams.rpki-client.org