Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
File: z7b2KJfnSw0H75YAuncJOQXLh1s.cer (raw, json)
Hash identifier: SfAkJGCbCYu9KzDbtTUBb1Tm5BsqLqFq9cWfNeWtq0s=
Subject key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C98
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 16:45:10 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 151484
IP: 103.230.244.0/23
IP: 2001:df2:a340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142488 (0x22c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 16:45:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91463ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:3d:6f:24:e3:fc:d5:34:97:5c:70:c9:04:
df:52:6b:1d:7b:68:f4:bc:b9:52:f2:e3:68:b1:09:
cd:d1:40:8a:22:a2:01:08:58:51:07:ba:76:c9:a5:
1b:ab:6c:08:d7:d9:8e:d5:c5:7b:cc:8d:88:76:3a:
de:91:b0:9a:88:69:87:6b:ec:82:73:69:e6:b7:e9:
38:f4:bc:3b:5a:ab:92:57:73:01:3f:7b:8f:17:19:
f8:1d:26:aa:dd:e2:6c:e3:95:cc:89:79:b1:74:d6:
68:17:b0:d7:a9:d9:11:fb:7b:ce:4d:92:30:ab:f2:
18:c8:0a:bf:d1:35:ff:c1:72:a9:1e:fe:1f:38:a9:
93:36:f7:df:c3:4f:9f:6d:4f:a7:b3:8d:ca:58:1d:
3b:2a:3a:75:15:e1:e6:b7:c1:b6:ba:8c:55:1f:49:
8a:fe:bb:02:ff:21:5e:5f:74:40:33:45:7d:94:b3:
a3:2d:a8:ad:21:36:dc:32:9a:b4:37:4c:01:fb:e5:
3a:77:7f:3e:2a:1a:a2:8f:54:43:99:7e:69:e2:76:
29:fd:b4:67:ac:27:c4:a0:d1:71:64:d3:f3:f4:2f:
07:31:57:ab:6c:d7:c0:ca:ba:95:cf:7b:b3:7e:aa:
0d:ae:5a:29:ec:cc:2a:80:84:4c:ae:ef:15:f4:0f:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151484
sbgp-ipAddrBlock: critical
IPv4:
103.230.244.0/23
IPv6:
2001:df2:a340::/48
Signature Algorithm: sha256WithRSAEncryption
27:f2:48:93:16:fb:0a:f4:a9:6a:34:16:c0:2a:f3:0f:48:29:
fd:bb:0a:87:28:d8:dc:f7:10:7a:16:06:72:87:a2:66:c0:a0:
6a:3a:75:d1:e8:f4:4a:d0:ee:be:60:17:aa:02:ce:16:c3:7c:
82:1c:b3:5f:cc:e3:de:13:ee:6b:cf:bb:24:82:70:91:11:a5:
c0:0d:be:89:62:9c:25:07:c3:12:f0:37:91:f7:2e:8a:ee:12:
b9:d4:c8:08:98:5d:b4:0c:15:51:28:46:ec:42:cf:6e:6e:83:
94:ab:16:fa:80:71:7e:d7:74:c6:d2:ff:f2:6c:ac:2e:2e:42:
6d:3f:45:bb:48:bb:95:14:30:8a:b6:f0:98:fb:87:9f:ba:65:
b8:65:b5:23:68:41:2c:c6:26:53:40:bc:4d:21:9e:0e:49:bd:
57:60:23:25:c6:99:e1:b8:8a:65:6a:a9:4d:10:e7:00:b1:bf:
82:d2:16:09:22:03:83:b7:01:81:a8:59:36:a3:ce:c3:41:73:
ef:e6:47:d8:0d:00:ed:34:67:00:16:5d:d2:4f:e9:7f:43:b1:
b3:6b:f7:39:3e:f5:cf:61:c2:d6:8d:a3:70:7e:a3:5b:3c:2b:
ad:77:f6:08:a9:34:fb:3f:ea:04:d3:67:b6:04:0f:cc:21:7b:
ce:6c:01:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:34 2025 by rpki-client