Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.cer (raw, json)
Hash identifier: YI0a3o39UN5bQpX4Xes8ELFRvyhs1TZgPUrwzpmceWo=
Subject key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0207C3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Aug 2024 22:39:28 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 140679
IP: 103.142.148.0/24
IP: 103.251.168.0/24
IP: 2001:df3:7a00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133059 (0x207c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 19 22:39:28 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:fa:f2:01:82:66:bc:ee:57:15:49:d0:9c:
84:51:1f:b2:f9:94:c0:fd:9e:4c:32:00:ae:ab:90:
45:09:ad:b7:db:93:90:a8:71:09:1d:59:26:30:19:
ee:6b:64:a3:c3:63:83:7d:64:47:dc:0c:f0:33:f1:
4e:bd:ee:ed:e5:86:59:7f:18:66:19:bd:ee:33:47:
1a:5a:0c:0b:2d:c6:e3:f5:41:88:f3:e2:d9:b2:60:
76:9c:82:98:10:aa:d2:5c:7d:b3:cf:cd:73:77:3c:
46:b9:a8:ad:c1:ca:b4:51:b8:eb:d0:82:64:a3:5a:
ad:70:c1:2b:5e:cc:16:ba:0f:43:95:c8:9b:4b:42:
51:98:7d:5f:8d:80:c4:c4:bc:f0:c7:d9:00:62:57:
55:97:9b:a1:4c:dd:bc:e5:36:a3:fd:bc:0e:7e:54:
ec:f9:ce:48:9c:f2:e6:da:f4:9e:32:ce:04:09:9b:
1b:1c:5a:db:c8:6d:46:10:2f:41:a5:4f:5a:cb:3e:
db:50:6d:ba:b6:67:b1:99:9e:ee:68:9d:05:6d:a0:
9d:1d:eb:fe:ba:00:3d:b0:38:5c:3e:81:66:a9:c1:
e5:31:f9:ea:3e:f7:c0:83:db:39:5d:5a:b1:22:71:
af:f0:c6:62:d1:cf:bb:03:2d:60:89:51:9d:1a:6b:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140679
sbgp-ipAddrBlock: critical
IPv4:
103.142.148.0/24
103.251.168.0/24
IPv6:
2001:df3:7a00::/48
Signature Algorithm: sha256WithRSAEncryption
b9:ee:f1:78:d5:66:e0:75:9e:3b:56:78:50:ea:a6:f2:d3:90:
5a:b3:e1:b6:6d:24:03:12:9c:dd:b9:47:d4:e1:ea:87:fd:ce:
2d:bb:f5:cc:c9:06:78:1b:09:ff:62:6f:05:a6:6b:45:ec:ff:
f0:6b:31:c7:b9:a7:70:d1:a6:94:ec:43:d4:c2:0c:1b:7f:2d:
a0:65:8d:01:19:74:d1:ab:a6:95:39:0f:5c:a4:66:d6:d4:86:
94:f3:67:72:6a:18:4f:cd:cc:33:19:27:d3:fa:63:15:52:5c:
43:40:bc:bd:bf:1d:c7:67:60:84:8b:7d:55:52:c2:5f:87:48:
e6:80:82:e1:91:7e:bb:ee:5a:ea:0c:c9:2b:f6:70:82:35:8a:
d9:7a:ff:49:80:c2:e9:5e:e3:07:1b:38:82:e3:78:15:c6:33:
04:79:f7:2a:95:9a:2e:bf:11:62:50:6b:a5:00:dc:39:ef:5d:
d5:11:6b:55:bc:e1:ff:1b:30:b5:5d:75:e9:ec:13:6d:61:b9:
9c:37:0d:67:7b:44:50:fe:db:dd:91:be:e5:77:da:9c:32:ae:
85:ca:b2:a1:37:41:64:7f:53:a1:d6:f9:67:c6:d6:82:77:2e:
5c:1c:2f:0e:17:b0:11:02:bf:72:dc:37:d9:a3:99:ef:06:09:
0f:27:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:33 2024 by rpki-client on console.sobornost.net