Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer (raw, json)
Hash identifier: /X8kEqRWm14j75/TogD1EIdOJ6VuWfZso20lZ5FqWzg=
Subject key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E2A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Mar 2024 15:03:00 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 141748
AS: 142548
IP: 103.163.120.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 15:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123553 (0x1e2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 15:03:00 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:50:33:54:08:db:0c:86:b3:72:23:6e:a9:
9f:20:d6:4c:3e:c3:e7:14:28:80:42:a8:21:d3:44:
6b:39:42:fc:d5:43:48:cc:8e:b2:8d:e3:00:a5:d2:
1a:91:6d:d0:42:0a:4e:84:3b:91:d0:94:6d:b0:69:
76:19:02:eb:1d:3a:9e:da:5c:51:a0:a9:07:bd:cd:
82:ce:50:f0:bb:d3:d2:94:6d:21:9f:b0:21:08:0c:
7b:ce:8e:b0:0e:c0:61:b7:2f:40:7f:f5:d3:63:86:
a3:10:8e:7f:c7:0a:3b:1a:48:4e:04:b7:41:d7:f7:
be:c7:0a:a5:44:ce:fd:fa:a9:ed:71:39:3d:6f:74:
ea:23:3a:cb:16:89:dc:18:03:bf:ab:a3:96:95:0a:
c0:b8:99:b4:d1:cb:d4:37:0f:b8:8d:be:55:24:51:
99:42:cc:0e:db:5a:19:3b:79:fb:fd:2f:0c:e3:2e:
7a:6f:5c:5f:29:09:37:6d:e3:67:bf:ac:2c:08:22:
f6:5d:fd:a7:46:1c:a9:72:2b:4a:fd:4b:9c:4e:1b:
5e:d9:1a:df:57:e2:7f:a1:44:32:10:64:ae:1a:ad:
a9:df:a9:1f:83:02:f4:9b:04:0d:25:37:a6:b5:8a:
d9:d5:d8:64:dc:0e:7f:15:a0:a3:d2:b3:a6:af:ee:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141748
142548
sbgp-ipAddrBlock: critical
IPv4:
103.163.120.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:45:aa:ed:cd:e4:5e:5c:9f:aa:05:94:66:15:17:7f:9a:8f:
14:2a:88:6a:3f:c1:66:f2:21:7d:20:36:c8:42:f7:71:90:3e:
9a:6a:89:25:a4:ae:b4:98:81:e7:8c:54:64:43:4d:66:e1:a8:
98:3a:57:27:78:a9:36:9b:5f:c5:1e:d4:92:07:9a:27:de:8c:
72:17:51:37:2f:c6:64:85:fa:33:e5:33:43:bc:a3:11:15:ac:
4d:2d:ce:d9:87:83:d0:66:39:75:c8:4e:8f:b7:68:7c:e3:46:
a0:04:74:f6:0b:8b:f1:fa:cd:99:46:c4:79:a5:3c:59:89:d0:
8f:5a:d6:80:32:d1:d2:6f:3c:da:d9:03:27:71:98:d9:d3:27:
ad:60:00:15:f5:71:21:34:48:d7:a5:00:b1:21:12:e1:99:9d:
73:a3:b8:55:73:67:af:f1:c7:bb:b5:79:a0:f1:06:a9:12:c6:
5c:d9:2f:c0:e3:e8:f1:0e:f0:bb:0b:a0:41:41:03:b6:21:b5:
a7:2a:27:6b:bd:0f:e8:06:97:e9:95:89:19:d8:f3:d9:fb:63:
fe:66:64:5b:ac:67:a2:45:0c:0d:3d:ca:1e:f6:38:b6:48:ab:
f0:32:c5:7a:a3:e9:ca:97:b7:b3:b7:7f:77:dd:36:fe:45:10:
00:4c:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:41:14 2024 by rpki-client on console-ams.rpki-client.org