Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
File: xvo-z74pzTYwaQdi6zKIEDptCKA.cer (raw, json)
Hash identifier: hwL32C2mZ4XyG0hqzA+rdewkmMkmFnVyrNTITPlllbc=
Subject key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CA1A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 09 Nov 2023 21:43:40 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 58726
IP: 103.20.152.0/22
IP: 2001:df1:1a80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Apr 2024 04:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117274 (0x1ca1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 9 21:43:40 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:8e:e0:db:a1:63:bc:e9:e0:1f:46:c9:71:
09:f7:01:42:81:12:fa:3e:bf:77:28:39:89:05:78:
66:ec:83:13:1a:a0:5c:6e:85:2d:82:30:aa:17:b9:
60:42:38:20:13:5b:a9:1f:bd:99:46:ce:23:22:2e:
28:8f:e0:d0:09:c8:d8:23:4c:03:f4:f6:ff:2b:be:
26:01:a6:61:f1:f0:f6:1a:b0:2e:dd:99:4d:2b:31:
e3:a1:45:17:fa:ba:30:04:2f:77:38:f0:8e:30:4c:
8d:01:da:19:85:da:c9:1c:b8:73:5a:8f:00:92:90:
60:0d:7a:3b:36:2e:dd:44:8b:b4:4c:11:16:e3:e8:
42:cd:96:06:fe:2a:9e:8d:c6:fd:5d:77:48:12:cc:
5a:99:3d:76:81:f0:85:4e:f0:ac:a5:d1:d8:26:fa:
6f:fa:3c:4e:1f:43:90:98:90:b8:e7:f0:3d:59:ad:
3c:63:e5:d8:f0:b1:50:01:91:e3:7d:08:bc:89:94:
59:fb:83:ff:be:89:9f:5b:2c:8c:f8:c3:e1:b8:a8:
2e:41:5f:f9:a5:a9:b0:ec:c2:b3:88:16:86:72:98:
cf:3b:72:19:14:bf:75:46:46:16:eb:57:15:7f:3b:
f4:28:28:7f:00:df:36:58:a2:88:56:1b:74:8e:6d:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58726
sbgp-ipAddrBlock: critical
IPv4:
103.20.152.0/22
IPv6:
2001:df1:1a80::/48
Signature Algorithm: sha256WithRSAEncryption
59:6d:d0:a1:e2:bf:78:78:63:63:b9:37:97:d6:64:3e:34:11:
df:b0:0a:c4:44:0f:da:35:ec:1a:f1:80:dd:0f:ce:ab:85:9c:
23:85:63:08:16:bf:69:63:4e:ed:20:0f:7b:cf:c0:e8:5b:7e:
e3:01:90:e4:b3:89:df:53:49:73:cd:0a:6e:38:f2:b8:e4:1e:
aa:53:d8:1e:6f:cb:08:de:95:ef:7d:87:03:93:1c:5d:65:e1:
16:4c:9d:3b:d9:2a:44:23:a2:66:36:62:58:5a:78:46:bc:ff:
cd:96:a7:3b:da:4e:78:ba:f5:67:8e:cd:29:40:e8:a1:7b:1b:
ac:2b:e5:c2:69:ac:2f:0e:67:08:dc:df:9e:6a:1b:1a:87:5b:
fd:93:40:b1:49:45:11:c9:eb:25:4d:d0:b8:ed:df:ce:64:c9:
05:0a:06:36:82:19:df:96:9b:ba:52:07:bc:ae:fd:e7:be:c0:
e2:a3:e0:46:74:92:86:e5:6c:5c:b3:b7:3a:23:d4:c4:41:10:
ea:1c:9b:b2:fa:84:4e:38:e5:97:3f:6e:3f:b4:0f:78:8b:74:
f0:f6:da:14:c4:8f:e2:e9:de:8a:87:63:0e:2a:58:64:e3:2e:
71:45:1f:0c:16:45:8f:83:f9:7b:85:be:ee:d7:43:80:50:25:
d8:18:0d:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:47:33 2024 by rpki-client on console-ams.rpki-client.org