Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer (raw, json)
Hash identifier: Q+hcZLxMosqqx9rEpjGBrEBGpawGFM8l3pqzt+p8oWg=
Subject key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01A92D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 09 Jun 2023 10:20:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 150809
IP: 103.214.40.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 00:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108845 (0x1a92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 9 10:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:44:cb:d7:da:1a:dc:80:dd:07:92:53:2b:
45:b2:1b:f9:22:09:d1:4c:8d:4e:ba:5f:74:b1:9c:
aa:df:51:a6:62:a3:27:e1:8e:14:27:2c:b4:3e:af:
15:b8:c4:82:ba:02:27:96:e4:67:c4:d2:48:c3:98:
86:8a:60:04:26:61:72:b6:e6:5c:02:85:fa:ab:ed:
bf:f1:8d:41:8a:9d:1e:5c:ef:4d:a8:f3:eb:cc:ed:
14:57:33:18:3d:58:98:1b:2e:73:20:1f:8d:8a:42:
71:39:5c:9d:a3:99:ca:55:6e:d2:88:07:c7:1b:d1:
79:48:5f:e1:fe:88:da:e4:a7:98:7f:58:a8:de:d7:
52:b4:7c:9b:5f:55:ae:a5:2e:b2:a2:29:6c:ef:0c:
e8:cf:d9:53:f7:ae:55:e6:f2:a9:10:68:e6:e4:8c:
75:14:06:10:0b:d3:c6:53:32:e7:41:59:3e:27:e4:
9f:fc:75:41:11:24:e2:1a:2f:8c:c2:21:cf:e2:01:
7a:12:41:b9:79:be:ad:76:13:58:44:c1:1e:54:33:
36:16:f4:8e:2f:94:3d:3d:f9:93:c0:85:16:9f:5a:
32:f5:b7:81:a7:da:73:3b:e4:a8:0a:5d:93:2e:d4:
7f:a2:45:0d:87:a6:b2:34:2f:3c:46:dd:20:ab:33:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150809
sbgp-ipAddrBlock: critical
IPv4:
103.214.40.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f1:74:e5:b9:46:cf:3e:98:bb:30:e2:0c:dd:8b:76:4a:c1:
64:4a:45:50:fa:f7:0b:f5:0d:17:8f:75:a4:a9:43:c2:f2:86:
c8:c9:93:11:ed:e8:4b:d8:dd:7d:81:3d:3a:b4:45:b6:2b:f2:
95:a7:64:48:58:5a:20:97:ab:4a:00:4a:62:cd:34:21:ef:02:
98:4a:c1:87:74:9d:e2:0c:b8:47:db:42:48:20:41:da:22:3a:
f4:37:df:76:6d:67:01:90:ba:77:9a:15:43:f0:c9:2a:8d:ee:
7b:c3:0b:32:0f:8a:eb:a4:a1:39:d5:3c:2c:f8:4b:e7:b4:f3:
a6:ce:35:0a:1d:5d:1a:f9:88:da:76:6f:5f:b0:fd:43:8d:97:
3d:73:c0:ad:16:a1:4d:5d:6f:e1:50:ee:fb:9f:ed:3b:3a:dc:
91:6b:f7:d6:f9:cb:0d:93:c0:bb:56:19:c3:bc:53:90:5d:0a:
26:45:96:14:06:b8:91:95:d4:cc:a0:48:71:11:a6:1a:14:44:
1e:3d:ec:75:0e:c9:a0:68:60:4e:30:90:c9:cb:ae:67:9f:57:
d3:44:e6:00:fe:ee:5c:58:bc:02:19:30:10:90:5d:00:3e:1c:
96:74:1e:a3:4a:cc:50:9a:d1:16:de:89:cc:f7:af:ba:eb:ee:
31:f4:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:53:31 2024 by rpki-client on console-ams.rpki-client.org