Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
File: x8kdlvp-jS2SIZUipkBEI3UR4FE.cer (raw, json)
Hash identifier: zl7FLnlGPv1n7w8TMKqGQ0OVdDCglO3yq6HsOF0pjGQ=
Subject key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E737
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 28 Mar 2024 23:00:25 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 149514
IP: 103.181.162.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124727 (0x1e737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 28 23:00:25 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:f2:41:bd:a0:5e:26:92:f8:71:c4:46:fe:
97:70:c5:b4:82:28:fb:b9:bd:95:a3:56:10:c4:43:
f7:60:30:c8:25:87:a4:6f:e8:92:cc:03:da:b4:3f:
32:cc:bd:1a:22:e0:1b:d9:c1:42:b9:fb:50:c9:e6:
cb:60:72:a4:ea:e0:08:fa:c2:81:6e:6c:a2:90:87:
c3:f6:0c:4d:85:cd:d9:0a:cd:e8:c0:a3:e9:29:0d:
5d:ef:0d:6d:41:1b:5f:25:dc:ef:e8:da:37:4e:5a:
13:35:5f:9e:e9:bc:e2:54:cf:26:d7:21:3a:2e:02:
90:c6:25:9d:6b:bd:ef:e1:15:81:19:2a:be:10:a8:
13:21:b7:5b:d9:38:0b:a8:14:ff:f9:ce:92:ed:e0:
81:45:7f:43:38:cf:59:81:25:c4:b6:40:7b:18:5a:
d7:24:19:dd:1a:75:f6:5f:4a:a6:f6:ea:db:f4:a5:
41:f7:b4:94:91:91:d4:fb:39:0e:d9:76:a2:ea:a2:
e5:aa:23:bf:fe:af:19:1e:dc:0c:ee:e8:0a:1b:e5:
12:8d:38:10:ff:68:17:00:eb:f1:a9:8e:8d:37:1a:
d0:7a:b5:c0:a2:47:17:fa:6e:7e:16:30:76:4a:3f:
17:31:75:c4:6a:d9:17:05:4d:19:ff:51:52:30:a7:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149514
sbgp-ipAddrBlock: critical
IPv4:
103.181.162.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:a2:05:e6:ed:24:76:6a:6b:a6:2a:59:0f:0a:14:bf:41:dc:
07:54:6d:56:66:09:79:56:63:c5:51:b6:99:c4:a4:b7:c7:80:
78:5c:41:4e:95:7f:91:27:10:1d:aa:81:a0:b9:eb:88:8d:39:
5d:9f:68:38:37:e3:42:6a:4a:b4:7d:f0:90:d7:69:57:91:4f:
ee:6b:eb:f4:fc:21:48:6f:94:76:96:60:73:22:de:5e:59:aa:
6d:97:9e:f0:1e:1e:d6:a3:70:4a:91:6c:4e:83:99:4d:f4:0e:
f7:14:f6:12:e7:12:a2:34:7d:e2:ef:12:41:0d:04:c7:df:39:
5c:a6:96:c6:e3:75:bf:19:67:f1:90:10:66:49:60:cf:a5:d3:
06:7c:fb:c3:45:cc:0b:54:2b:d6:91:a5:86:a6:cb:da:01:72:
36:9b:74:69:56:0d:68:d7:67:9f:61:67:23:2e:f0:d0:a9:70:
53:5e:c4:78:e1:14:26:22:e8:53:23:92:bc:ff:1b:3a:cc:ed:
77:84:b0:ae:3b:8b:ab:66:bc:9b:e2:2c:b2:db:a9:1c:f7:6a:
41:b3:83:48:5d:e3:ee:f6:02:53:d6:90:13:42:14:98:7f:80:
43:9a:54:90:04:79:53:29:fe:59:d5:bb:98:5a:c8:e2:ed:21:
9d:35:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:39 2024 by rpki-client on console-fra.rpki-client.org