Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer (raw, json)
Hash identifier: 1Tkk5FLsKrm3AGmXhEiNvg5rv/P91ry0u3ua0vTubpI=
Subject key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01BB5F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Sep 2023 17:58:21 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 132491
IP: 103.73.84.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113503 (0x1bb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 4 17:58:21 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:09:55:47:78:ba:13:d4:54:4c:9e:c7:f0:
c4:fc:e2:70:bd:15:fa:89:e6:c8:a1:eb:6a:36:7a:
80:5b:2f:c9:54:4c:fe:c8:fa:e1:08:29:9c:c4:55:
ae:95:23:27:ff:0e:e7:73:5c:a0:05:a4:47:d6:a1:
2e:6a:a3:a6:16:71:8c:00:02:1c:39:66:87:1c:fb:
d3:8a:83:64:35:ba:24:85:a4:9b:ae:a2:00:a4:e9:
54:6e:1b:ee:a4:81:a0:26:97:8d:20:86:e0:f7:36:
c0:9a:19:1f:bf:fb:c9:62:87:b5:26:cc:b0:4c:54:
7a:10:95:e8:2e:17:69:d8:60:77:e8:20:ae:d1:48:
01:fc:9f:0c:8a:04:f7:c9:7e:2f:9a:16:11:e8:ae:
1f:7f:61:f8:f1:38:a9:65:f1:ab:0a:67:aa:f3:63:
0a:e2:4c:71:39:7b:0e:8c:e1:c0:73:3c:61:75:30:
eb:cb:8b:55:fe:15:e6:47:a1:8a:7d:b5:1e:6b:8f:
e6:b5:4f:41:f0:e2:94:dc:89:5e:af:28:d4:89:2d:
67:07:f1:06:60:c6:e7:7f:94:08:2f:14:21:eb:a3:
86:cd:4e:5f:ca:56:77:97:c6:07:8a:c6:38:7d:bd:
c2:1e:0a:0d:f1:d6:a0:c8:55:18:a7:ca:b5:53:ca:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132491
sbgp-ipAddrBlock: critical
IPv4:
103.73.84.0/23
Signature Algorithm: sha256WithRSAEncryption
84:d4:d7:60:3b:50:74:84:c0:49:aa:de:5e:30:3d:35:c7:94:
b3:7d:f0:5d:44:76:f9:d3:6d:57:ca:b1:18:49:31:33:5b:10:
cd:85:00:e5:b1:69:05:e8:31:b8:43:f9:d1:50:70:04:ff:32:
2c:39:f6:e6:2b:c0:2d:2c:2c:88:27:22:d8:71:20:9d:61:eb:
78:66:72:26:af:80:a9:b5:6f:dd:26:5e:88:9e:f9:e5:6e:15:
7e:4c:e9:7e:80:8c:38:64:17:20:1e:4c:08:c6:ed:23:2b:7c:
69:07:f0:18:1b:1b:0f:b6:67:00:61:a5:f3:14:4d:e8:73:6b:
4f:06:4d:76:31:0b:13:42:d7:64:03:87:11:2d:35:a9:11:18:
25:e8:74:66:20:02:ea:63:65:27:73:3f:a4:ce:78:b3:ac:48:
3f:66:42:78:5b:7f:fd:14:c1:92:99:8b:6c:ba:42:21:42:fe:
7e:eb:15:55:b6:6c:c3:4b:b0:22:ee:49:b7:61:b5:13:04:65:
0d:16:cb:53:ec:31:1a:c1:51:14:60:7f:34:15:2b:b0:50:4b:
08:91:5e:5f:b6:df:08:ea:b9:d3:64:64:9d:7b:79:76:4d:bc:
00:0d:71:7a:e4:8f:90:96:b6:df:42:d6:03:c9:2e:be:f9:b8:
f1:03:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:58:10 2024 by rpki-client on console-fra.rpki-client.org