Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
File: zNz_ISpraZpXC0qdF18WI3GDLKU.cer (raw, json)
Hash identifier: Pk/j9Q/XZmQu9ZobNK2DzMrVNCpeSh43Xfx3eSQNTTE=
Subject key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020231
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 25 Jul 2024 02:40:12 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 24074
IP: 202.12.248.0/21
IP: 202.27.140.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Sep 2024 20:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131633 (0x20231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 25 02:40:12 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:7d:04:34:b2:0c:66:82:cd:89:ac:79:f0:
7f:56:4a:6b:5b:82:7f:2f:b4:02:1d:0d:56:ac:35:
0a:64:9c:09:f0:dd:fa:b9:22:cb:b1:de:d4:c6:80:
0e:1b:8b:75:f8:31:fe:f0:c1:49:6a:d8:d8:ed:d1:
96:6f:d6:57:40:46:99:3e:8d:35:4f:13:28:a6:f5:
41:f5:cf:af:a9:1e:6a:5e:dc:d3:b6:28:23:5b:36:
86:43:55:00:f4:ec:4a:8c:c4:29:4a:0a:70:1d:dd:
ea:70:ba:e7:5d:dd:2c:b3:ab:47:42:ce:a8:de:b5:
65:fa:81:cd:74:bc:b3:45:47:f7:ad:ba:11:b9:73:
17:bd:3b:25:ed:ea:23:70:63:97:3c:02:59:da:99:
f9:c9:88:0d:6d:f0:1d:33:a8:a5:28:d0:fb:b0:a7:
f7:42:06:0b:14:d8:eb:8f:01:c3:83:63:53:ff:0e:
12:82:a4:41:84:32:98:bf:9b:d2:1c:e2:09:cb:ad:
66:c1:67:8c:b8:a3:e7:46:11:fe:b2:64:87:8c:28:
6f:79:d8:89:25:02:46:ee:bb:b6:da:90:57:8b:0e:
31:eb:4a:fb:4c:e6:01:60:87:99:a0:c1:bf:cf:10:
f8:6b:d9:bc:5d:51:7a:b0:3a:88:3f:fd:d5:07:60:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24074
sbgp-ipAddrBlock: critical
IPv4:
202.12.248.0/21
202.27.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:86:67:8c:27:4b:dd:61:60:41:00:ce:6b:63:9d:08:7c:0a:
1a:91:ff:75:76:32:32:70:2e:6e:3f:05:44:49:a3:df:b7:55:
4f:41:97:3d:38:b0:9a:19:e0:f9:cc:15:84:2f:f8:91:25:29:
f7:94:28:3b:da:a7:7d:4b:29:63:f1:ab:13:28:f7:1f:59:1b:
eb:82:d3:10:20:f1:17:71:94:a0:3d:d8:3d:2f:87:a0:0f:0a:
8a:29:cf:a3:76:d1:c3:28:6c:26:57:22:15:19:5a:b8:60:38:
72:6c:3f:ea:cc:6c:ec:ec:a9:9c:d8:9a:50:66:7d:8b:0d:0a:
bc:81:e6:30:88:72:90:69:d6:b6:80:46:fe:fe:0a:e4:71:fd:
42:23:f0:35:a6:01:a6:66:3b:0d:07:8c:3c:be:fb:49:0a:42:
89:88:74:32:c1:7c:63:c6:28:7d:69:b0:81:22:ea:c0:7b:a1:
cb:97:86:c9:98:6b:aa:b0:74:2d:de:2c:99:62:b7:fe:0d:86:
8a:de:4c:dc:d3:18:9a:52:c1:d5:0a:b9:29:15:b9:a1:a7:4b:
06:0c:fb:2f:72:a5:a1:02:c4:6e:70:ec:10:eb:d2:f9:97:54:
50:44:a0:b2:3d:8c:c2:b1:66:51:c3:67:e1:4f:77:3e:05:d0:
fc:d6:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:13:09 2024 by rpki-client on console-fra.rpki-client.org