Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer (raw, json)
Hash identifier: MWsJkHbmJ0qFhlR5q/znNEvLh3fohlWsQdahtVKn9qc=
Subject key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C9CF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Nov 2023 21:39:42 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 131256
IP: 202.137.228.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 21:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117199 (0x1c9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 8 21:39:42 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:9c:11:5d:00:c8:60:28:cf:cf:5b:73:2d:
f0:dc:c2:e5:aa:44:23:98:c9:e0:51:aa:0c:88:77:
3a:b3:b2:d5:c0:68:c3:01:72:45:05:33:64:b7:5d:
85:e6:fb:c0:6b:01:e1:08:1a:8f:55:00:a2:2d:9c:
52:f6:94:cb:83:5f:30:99:e6:fe:9b:88:16:ac:82:
34:9a:1b:2f:72:fa:83:ca:8e:06:22:d4:81:a8:81:
2a:44:53:21:57:bb:50:9c:99:cd:77:0e:08:a6:8f:
7e:f4:41:55:8b:13:df:88:a6:7f:29:c4:74:8b:5d:
c9:f3:a5:5c:e9:e9:ef:34:6e:16:39:6a:90:63:e1:
7f:7e:c7:e0:6b:ce:37:95:69:cd:f0:41:66:20:c2:
e1:76:c9:67:a3:5f:bd:a2:a7:11:9e:e0:d9:8c:c7:
24:87:2c:13:67:8e:46:59:ff:40:ed:d3:b5:fa:ed:
00:bb:7b:19:d5:a6:93:fd:48:65:4c:af:06:bc:80:
c1:b2:74:6d:95:b7:a5:b9:65:c1:96:e8:56:64:92:
1b:65:64:9b:a0:f9:53:04:4c:a1:19:12:e7:e7:db:
6b:60:33:19:6d:d7:2e:b5:e9:2f:da:c1:96:ae:b7:
ee:78:b2:5d:f1:9d:6d:ab:0f:25:bd:48:d0:57:f2:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131256
sbgp-ipAddrBlock: critical
IPv4:
202.137.228.0/23
Signature Algorithm: sha256WithRSAEncryption
37:20:09:cf:a3:bc:85:f3:f5:b0:66:b4:6a:db:b6:6a:1c:2a:
ce:28:12:3c:c6:9c:ac:01:4f:5c:b3:04:97:5f:72:21:56:ed:
89:a6:f4:03:2a:cd:da:79:5f:f0:ef:d5:65:ce:8a:d5:ba:6c:
7b:46:76:ad:27:ba:49:17:4a:0a:0d:7a:50:b1:0f:e9:5c:f4:
25:e2:03:13:8f:fa:08:7a:ff:5d:ca:0e:b8:66:27:29:49:3f:
d1:5d:d8:d8:c8:e1:99:b7:fa:19:9b:9c:a7:e1:bb:3f:8d:3e:
b2:95:24:eb:64:6d:0c:48:3d:9b:63:73:65:52:c4:f5:a1:87:
e6:28:69:8c:2c:9f:96:35:5a:ce:2d:3c:ae:a2:f5:82:97:f5:
be:e9:07:f2:29:2c:45:05:8f:7d:9c:26:b1:89:f8:a9:1a:2e:
7f:e7:0f:14:38:63:0e:95:c5:c0:33:ba:31:09:94:82:52:d1:
cc:3e:fd:f8:08:de:e6:da:83:56:eb:2a:1d:b1:f4:c3:a6:2c:
ae:03:52:30:76:2b:a6:7f:9e:ab:d9:8f:92:4a:a9:1b:2e:da:
f9:9d:6a:a5:b1:31:e3:cd:0e:a9:34:6c:48:b6:ff:c6:bd:27:
3b:94:5a:d1:f7:1b:9a:e0:a6:d4:7e:6b:0e:1b:a0:5a:a1:5f:
26:09:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:45:05 2024 by rpki-client on console-fra.rpki-client.org