Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
File: y3TVYT1zQs-5t_ed7wyfrYhceCI.cer (raw, json)
Hash identifier: kuShs+qEBV14XR0sKT5W59cyegVy+cL/XK9JEn/CJe0=
Subject key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01AFF4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Jul 2023 12:12:58 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: AS: 151410
IP: 103.227.6.0/24
IP: 2001:df2:97c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 05:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110580 (0x1aff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 13 12:12:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:b1:84:cb:f3:e6:ca:f5:7e:a8:f5:4d:0b:
79:ab:ae:3e:5d:91:bc:9f:ad:25:7b:42:ba:0e:bd:
5b:50:d5:57:3b:62:0d:a1:c6:a0:31:52:2d:88:61:
e8:61:0f:38:25:5e:35:59:bd:e6:6f:65:8d:8a:6f:
6c:d7:98:1c:07:72:fb:b8:6e:a5:33:b9:84:ed:dc:
04:74:e5:d6:d5:2d:5c:ca:15:2c:4a:d4:0c:3a:d0:
c9:0a:b0:ae:09:a0:49:e0:0b:29:cf:95:07:46:ae:
b6:25:b1:03:af:5e:85:1f:e3:9c:23:d6:66:bd:b8:
9e:15:60:58:66:56:4c:d7:3b:e9:ae:7a:ab:74:1d:
b3:fe:a4:90:c9:61:ec:b3:be:21:c7:0d:27:34:d5:
b0:8c:0e:13:48:e2:9c:83:8d:b2:b2:95:9c:da:71:
ca:ea:7e:45:c0:93:81:cd:1b:79:33:2f:d8:b2:36:
c7:9e:83:c5:40:db:24:3b:55:ce:8b:5d:29:46:bb:
04:ef:94:94:16:9a:e6:79:c0:d7:e6:d5:2c:fb:7b:
19:69:eb:98:e5:6e:af:01:01:5e:33:8f:d8:2e:90:
f1:fd:63:2f:42:a2:c7:c9:8b:90:21:c3:50:d1:fd:
e3:ae:b1:cf:14:d1:d0:66:b8:07:c1:4d:9d:eb:e3:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151410
sbgp-ipAddrBlock: critical
IPv4:
103.227.6.0/24
IPv6:
2001:df2:97c0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:f1:19:b0:53:d9:0a:1b:ad:c2:5d:4d:7a:ca:c0:9e:18:2a:
af:fb:03:0a:91:78:52:b2:88:54:5c:5b:a4:4c:3a:d0:f2:07:
f9:8e:b7:d2:d9:32:ce:f9:c6:f3:49:8b:85:ac:37:3d:3d:e7:
61:6c:a2:f9:13:06:a2:e9:97:0e:20:49:5c:38:c9:e0:74:d1:
45:02:25:01:61:92:d2:ce:f7:61:04:a0:b9:bf:6e:90:36:1e:
de:7c:32:80:ba:a3:89:40:3c:b9:47:48:d8:19:23:5a:fd:41:
68:bf:20:05:9c:e1:1a:c5:e7:60:21:8f:7c:4c:a4:81:d8:1c:
4c:7c:21:19:b8:1d:aa:3d:a8:b0:f1:41:a2:8c:c6:f4:14:60:
b5:75:94:37:ba:5e:bd:a1:0f:79:27:d9:ed:50:cc:7b:c8:c4:
a8:aa:f8:60:e9:3b:27:7e:d7:f8:be:ca:b9:30:ff:ed:61:20:
ae:91:41:63:5c:fd:37:6f:74:ac:b3:ec:2c:60:19:3e:fa:42:
51:05:7e:77:69:2c:75:69:66:2d:21:e1:d0:c5:19:d5:66:53:
b0:88:c1:e5:6b:47:9d:9c:de:07:1e:42:7f:1f:ad:4a:17:63:
6f:2a:4c:ff:9f:f3:2d:1e:db:e8:f2:80:fa:92:bc:1b:a4:43:
58:03:d6:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 2 06:14:42 2024 by rpki-client on console-fra.rpki-client.org