Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
File: xA63gWRRh1SG2mQ_j5Nht337IaM.cer (raw, json)
Hash identifier: XX+m+4wAXu79+SpQduOfdpeM4mlY+tezCl4fkWof+Bc=
Subject key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021313
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Oct 2024 12:46:41 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 55789
IP: 103.9.116.0/22
IP: 202.59.250.0/23
IP: 2001:df4:8a00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135955 (0x21313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 9 12:46:41 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:91:40:ad:cd:03:34:5d:9a:3f:ac:47:03:
be:95:1c:86:4c:5c:d1:86:e8:41:a5:93:45:4e:97:
51:9e:75:ac:b4:81:47:7e:d4:97:cd:a4:5e:9d:27:
c4:77:f7:ac:0a:ec:a2:1c:e4:a3:12:4a:08:6b:5b:
8f:1f:88:0a:62:85:3c:60:fa:49:f9:68:9e:84:41:
01:0d:df:cc:35:95:42:47:c5:01:66:93:45:9b:48:
c0:51:31:71:8a:4c:4d:27:0c:91:9f:c9:1b:d5:c6:
06:9b:f9:72:cb:6a:a5:c8:66:a7:2d:b0:b9:cf:ca:
86:1d:d6:f3:d0:ab:ad:61:8c:28:f7:9a:51:80:d0:
1b:79:6f:a0:70:52:e8:50:84:21:26:fe:54:39:00:
a9:70:90:b2:93:14:71:d2:1c:f3:2a:97:67:36:70:
f0:4d:14:c9:13:cb:2a:23:99:7b:6e:9b:ef:c9:9d:
a2:99:de:1c:4a:5b:77:4a:93:02:bc:19:2b:d2:7f:
d5:5a:5d:a5:2d:1f:6b:36:7f:15:b4:be:e0:44:0a:
21:a4:98:50:dd:1f:a6:dc:32:a9:f3:5a:56:0a:ef:
93:7d:46:08:5a:23:39:b8:04:f1:44:13:22:d8:ef:
ee:b5:3d:78:08:dc:4f:15:32:65:86:46:6c:0e:e2:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55789
sbgp-ipAddrBlock: critical
IPv4:
103.9.116.0/22
202.59.250.0/23
IPv6:
2001:df4:8a00::/48
Signature Algorithm: sha256WithRSAEncryption
79:0e:d4:a9:07:5d:98:72:42:42:be:25:3d:fe:0a:72:a4:66:
84:b3:e2:23:a7:19:f5:8d:d6:ba:70:35:11:ab:3f:95:9f:98:
5d:4a:00:14:95:7b:c5:51:e8:6c:3e:62:44:e6:52:00:58:18:
fa:60:c1:21:37:64:5c:a2:ee:8d:00:90:0f:f9:67:d9:84:a3:
f0:c8:12:c6:21:e8:f9:c5:2f:06:f1:60:8d:24:f9:03:22:88:
a5:b7:6b:d1:db:63:a0:fd:c8:71:a9:88:84:75:1c:55:73:67:
60:9b:37:e9:bb:c1:b5:2c:08:c8:a2:31:f2:ad:53:62:02:b1:
b1:05:66:cb:2c:3f:f7:00:f0:6b:16:b3:b5:a9:1c:17:52:d2:
91:57:7a:19:ec:42:df:5e:22:e0:cf:d8:92:51:88:57:5d:46:
b3:cb:2b:c4:be:22:27:fb:db:d2:c4:b6:37:39:d4:d3:1b:6a:
b5:dd:ea:26:89:e0:45:37:50:6c:5d:fd:f2:0d:64:41:2b:f2:
4f:c2:37:99:bd:2d:3c:c5:85:5a:45:32:c6:1e:83:cd:6b:eb:
42:f8:9f:08:2e:f1:9d:02:12:b0:8b:ac:8d:14:e6:16:77:d6:
d4:c3:25:80:a8:8d:fa:bc:51:f2:70:8a:88:03:15:f4:33:55:
c4:b0:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:00:11 2024 by rpki-client on console-ams.rpki-client.org