Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y0yV-DniHR3g9FhVPZpM4o5BTYg.cer
File: y0yV-DniHR3g9FhVPZpM4o5BTYg.cer (raw, json)
Hash identifier: tC7I49ooWlMIlo7/BPECVKd9qu1+lJ5VQ3YllsAxLK4=
Subject key identifier: CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01EB06
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Apr 2024 20:27:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 140500
IP: 103.149.248.0/23
IP: 2405:f3c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125702 (0x1eb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 20:27:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91C4502/serialNumber=CB4C95F839E21D1DE0F458553D9A4CE28E414D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:76:2c:cf:43:07:d0:95:20:ea:fc:fc:35:
94:76:dc:8f:57:9a:f3:ec:1c:1f:b8:94:4f:b6:d3:
a7:37:d3:43:83:dd:85:ac:2e:6c:9d:a9:b4:36:1c:
f4:72:42:89:6a:a4:97:fa:c1:83:86:e5:5a:3f:50:
8e:9e:fb:20:04:3e:77:d9:9f:52:2e:63:15:d2:66:
ff:c7:28:ed:11:b2:77:2b:84:46:f7:fc:19:d8:5f:
01:7e:98:da:39:d7:f8:8d:1d:b2:38:0c:28:79:35:
a4:e5:2b:dd:da:44:f9:10:9f:a3:f8:c7:a9:70:12:
20:24:1d:5a:73:e9:dd:aa:3a:55:21:bc:39:38:4e:
32:f4:6b:29:ed:5b:c0:15:1f:96:5d:d7:7d:b6:ec:
2e:32:34:2d:74:23:5e:f7:55:e5:9c:ac:68:5c:23:
78:35:a8:63:f9:68:f8:0f:ae:28:72:86:d4:a4:ad:
0b:07:37:91:e7:03:a4:ca:43:9e:bc:f7:5c:06:7a:
a3:18:84:45:4b:22:81:3e:02:0f:b7:e7:77:5a:38:
7a:e2:de:be:b3:cb:d2:bb:32:50:fd:45:6c:6f:3f:
b2:bd:31:27:89:32:0d:4c:39:79:fb:5e:75:00:11:
8f:a0:6b:88:ea:c6:0b:00:f8:93:ea:4b:0d:0c:29:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:95:F8:39:E2:1D:1D:E0:F4:58:55:3D:9A:4C:E2:8E:41:4D:88
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4502/40E2DFCCB50211EAA29F277AC4F9AE02/y0yV-DniHR3g9FhVPZpM4o5BTYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140500
sbgp-ipAddrBlock: critical
IPv4:
103.149.248.0/23
IPv6:
2405:f3c0::/32
Signature Algorithm: sha256WithRSAEncryption
44:8b:bc:3e:e1:de:f3:c4:dc:37:ef:46:8e:2a:5e:2e:ed:29:
fe:f0:cb:e6:35:95:0b:b8:a1:78:65:bf:f3:8a:2a:ed:d6:9b:
56:09:a0:36:7b:16:de:b9:e5:ab:d8:bb:20:7e:d7:4f:73:a5:
49:ec:42:fb:69:5e:40:43:0d:1b:f7:b5:68:ce:c5:3e:36:cc:
e3:8d:37:cd:8f:8b:75:8c:94:da:5d:76:31:6a:63:dc:16:c7:
20:3b:cd:af:0d:fe:e3:7b:c5:dd:1f:ab:df:32:aa:3e:37:4e:
af:ce:e6:e4:c3:0d:34:25:3e:3b:cd:d4:10:a9:2f:57:f8:bd:
e7:53:ec:ae:24:21:9d:0b:21:6e:51:b3:58:6c:e7:53:87:e1:
9c:37:4e:69:a2:83:1d:43:19:e6:64:a4:fa:bb:69:69:57:4b:
d8:c2:55:37:18:2c:1b:85:b3:61:f7:21:d5:9a:0c:43:62:29:
d9:2d:6f:05:96:bd:27:66:5d:2d:27:35:df:1d:5e:cb:18:1b:
f4:bb:7b:fb:da:1a:3c:17:16:69:e1:63:16:bc:46:c0:d0:19:
ca:64:6c:f9:81:1e:17:45:59:5f:d8:4f:6a:5b:67:1d:bb:fa:
1e:4d:47:74:80:ec:01:59:e2:96:6f:ed:eb:8e:a7:23:5e:53:
0c:13:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:40 2024 by rpki-client on console-fra.rpki-client.org