Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
File: zQysDn6E4-geSHYXTiwhQIUJQmk.cer (raw, json)
Hash identifier: rbPqJN4E+V3hWxe77gyurcVnTpPSZBMGCvRcerLQyvg=
Subject key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CCF3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 03:19:44 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 134529
IP: 103.35.158.0/24
IP: 2001:df0:cc40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 17:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118003 (0x1ccf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 03:19:44 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:3d:a5:e4:83:a4:d2:f6:3d:1a:40:cc:94:
59:37:ac:2b:b7:76:06:c0:19:ab:c4:33:5f:46:4b:
9f:e5:41:a1:14:1f:eb:1f:f6:ff:ac:cd:60:9d:da:
1d:35:aa:13:1e:41:bc:55:59:74:5d:30:9b:52:43:
54:80:7c:33:9b:53:8d:84:b7:c3:2d:b7:12:06:87:
01:41:bd:a2:40:f3:7c:79:2a:05:30:ae:d6:60:f4:
8c:37:40:40:de:a5:a8:fe:ef:cc:a1:a1:a1:c0:d9:
c5:80:28:0d:0c:88:b1:41:fc:26:ed:aa:34:69:1b:
80:a0:30:89:c8:e0:a5:e1:e7:42:18:e5:c4:0e:d7:
91:e7:ec:0a:c4:e1:a2:df:22:da:7d:ed:89:73:cc:
fe:78:77:48:b5:8b:a5:08:e9:34:de:25:09:fa:fe:
f3:f6:05:33:c3:46:bd:df:01:73:3d:70:5c:c0:3d:
27:6c:5a:7a:a6:c1:76:88:c8:df:1e:83:59:ba:f2:
ad:8f:66:70:5d:c8:5b:8f:9b:9c:46:2c:a9:8d:5d:
b9:f3:18:56:27:f5:91:4e:07:2b:9b:7a:86:c7:22:
4e:17:cb:36:62:b8:c2:2a:3a:e9:44:ff:93:a6:37:
91:e2:ed:43:b7:c1:ef:6f:19:34:1c:9b:12:d8:bc:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134529
sbgp-ipAddrBlock: critical
IPv4:
103.35.158.0/24
IPv6:
2001:df0:cc40::/48
Signature Algorithm: sha256WithRSAEncryption
7c:13:f6:91:66:dd:58:6d:66:85:12:46:21:49:b7:e9:67:67:
d9:6d:eb:a3:16:5d:2b:7b:e3:d4:66:b0:b5:df:9a:ee:74:7c:
f5:b1:2e:60:8e:52:5e:e7:ed:87:74:75:30:78:6b:dd:45:fe:
d9:44:e9:0c:a3:8a:42:f1:d1:b4:fb:87:70:b0:f2:31:23:07:
c7:29:bc:e9:a5:06:d0:db:96:64:07:c4:3d:34:0f:ce:2a:d1:
ab:65:85:e6:87:a0:ba:5f:64:4a:0a:d3:4d:f3:c5:b2:23:5a:
30:d2:f5:0a:d0:f3:f0:65:4f:33:bf:ab:44:13:8a:b2:66:3e:
7a:4c:5d:3f:e5:d1:b4:dd:af:b0:f4:fe:26:d3:4a:19:64:48:
49:04:30:fe:ea:ba:ec:a4:2c:95:d0:7d:e0:5a:c9:93:af:6a:
56:99:8a:82:ca:9a:fa:48:ba:3e:b2:9e:27:5d:2f:54:cd:70:
d1:96:ab:83:ca:54:f6:78:c9:e8:98:86:ec:cc:2c:79:54:4e:
60:d7:03:62:7a:9e:40:98:02:79:34:5d:fd:87:6f:ba:ed:e0:
ad:82:6c:bd:5e:fa:80:8b:23:88:43:59:97:ca:90:27:02:9f:
00:96:0d:ce:02:01:b4:7b:36:2e:54:b9:bc:9e:ac:58:59:18:
77:de:47:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 19 19:17:40 2024 by rpki-client on console-ams.rpki-client.org