Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer
File: x6CGcqgQDaMwwSIxURVYe-YRDfE.cer (raw, json)
Hash identifier: Ft5gU4CcMZ1vNAYU59veFu8kCs0e1kHzNipi9AmxOIQ=
Subject key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021C49
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 Nov 2024 14:25:22 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 38797
IP: 125.62.224.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Dec 2024 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138313 (0x21c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 19 14:25:22 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:fc:80:a5:a8:44:0a:b5:26:12:a4:04:ce:
09:8e:ee:94:b0:58:c8:85:af:81:ff:3d:72:4a:14:
8a:23:54:5b:40:aa:60:48:74:97:27:56:65:93:24:
28:0f:86:f3:26:56:a0:19:38:8f:7a:7f:16:40:df:
af:b5:ea:79:bc:cb:e4:3b:9b:b8:09:28:bc:f4:80:
a9:8d:6b:ab:ed:1a:6a:c5:05:da:29:0c:a0:65:e1:
49:1f:db:10:d1:1e:3e:98:14:0f:54:29:62:dc:24:
b5:93:13:6f:d3:5f:8b:ad:6f:2c:a1:79:d8:6a:86:
59:7e:f6:bf:91:bd:a6:b2:44:82:09:31:09:30:a7:
b6:d0:d6:a9:d1:f6:ae:44:a6:1a:4f:83:9f:35:ce:
a2:1e:31:69:78:2b:a5:a9:5f:b1:e2:f2:35:e6:8b:
ca:c3:be:d1:3b:0e:bb:b0:32:01:be:ab:5c:00:17:
f1:02:b2:86:13:b5:aa:fc:88:75:30:c7:54:26:9b:
d2:6d:fd:c5:45:a7:a6:ee:84:15:cf:b1:8a:08:65:
cd:e6:76:ac:e3:fb:16:d7:20:4e:76:35:2e:02:72:
0e:b2:8f:fd:b6:d6:a5:d7:a6:23:ff:36:3e:2f:02:
bd:ff:14:c8:a3:dc:bb:85:81:df:f9:ab:aa:a3:39:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38797
sbgp-ipAddrBlock: critical
IPv4:
125.62.224.0/20
Signature Algorithm: sha256WithRSAEncryption
61:af:f0:01:24:f8:b0:2e:fa:f2:d2:6f:74:2b:cf:0a:f4:50:
b9:3f:d1:51:76:4d:6a:31:c2:5a:21:17:e1:b2:24:c5:51:97:
cc:42:96:12:90:17:64:c8:35:83:43:70:c4:47:d2:ac:8e:6c:
0b:14:31:2c:97:f8:a8:70:ba:d6:05:09:90:17:15:23:a8:74:
e2:04:9b:25:f7:15:0e:21:b8:1b:69:10:95:c6:e6:39:98:1f:
71:d1:7f:89:db:19:ec:75:18:a2:70:63:9c:09:df:58:ac:6f:
f8:69:ae:02:cc:29:2a:5d:f9:0f:74:c9:3e:4a:42:a8:ea:ca:
9e:d3:9b:15:d4:6c:4f:2e:77:c6:c3:b2:dc:51:1e:ae:6d:53:
83:02:69:25:0e:5a:30:23:36:ed:6a:28:64:34:19:36:bb:d5:
ed:8f:72:82:37:89:c2:95:13:5f:f4:3b:62:ae:ba:17:b1:4b:
63:b3:1b:ea:99:dc:b3:d5:8e:e7:5e:55:b7:de:69:54:2d:16:
65:fe:8e:53:7a:dc:26:d1:58:61:7b:71:d7:09:ac:76:80:54:
0c:e3:55:cb:fa:f3:8a:fb:bc:0d:30:95:ce:b8:31:37:fd:6e:
b8:5b:ad:7f:92:8c:c0:f1:da:a3:1e:72:94:e2:6e:1f:53:d4:
dd:dc:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:22:14 2024 by rpki-client on console-fra.rpki-client.org