Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
File: 0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer (raw, json)
Hash identifier: 05Tq3yRHWo/b6+4N6XBmmEvKDf+3QYO4uYFzNmGpOjE=
Subject key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021058
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
caRepository: rsync://rpki.cernet.edu.cn/repo/cernet/1/
Notify URL: https://rpki.cernet.edu.cn/rrdp/notification.xml
Certificate not before: Sun 29 Sep 2024 22:25:29 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 144699
IP: 103.165.110.0/23
IP: 240a:a801::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135256 (0x21058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 29 22:25:29 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:8c:21:32:e5:12:99:ef:d3:39:59:8a:ab:
71:99:75:c1:5e:32:d5:8a:44:1d:6e:2b:c0:f6:b9:
07:1f:4c:46:d1:de:e4:a0:3f:0b:5e:9e:c8:99:7a:
7f:48:e4:33:9d:83:61:bb:f0:95:8a:2b:fa:84:84:
c1:71:6f:4d:3c:0c:49:da:d5:54:1f:fa:6e:b6:fe:
14:69:10:d0:8e:63:ae:d0:45:c0:e7:89:ae:a5:90:
3b:ac:30:3b:7c:c6:e1:3d:9f:a0:cc:c0:f4:df:6c:
a3:5d:cb:62:0b:e8:95:75:3b:c2:62:09:fa:8a:1c:
b5:e8:c0:02:be:5a:86:22:e7:20:3c:32:14:7b:f0:
a6:47:b9:17:fc:ed:d1:34:9b:b9:c4:c2:e9:62:7a:
a1:da:c4:ad:d9:3e:ee:d8:4f:8f:cb:12:fa:aa:cc:
e1:2f:f0:60:e6:a1:ce:e2:32:25:eb:41:72:71:10:
4b:a1:c5:00:dd:b9:9b:13:fd:cf:f8:57:d8:66:94:
d8:1c:a3:f6:30:cd:96:8a:7c:14:c5:0e:61:01:c5:
fe:19:30:36:fc:11:55:8c:81:c6:72:b7:0c:11:d8:
87:f7:35:cd:1f:e0:f7:74:31:0e:11:be:05:e4:a3:
b9:f7:a1:17:00:94:2a:d7:8e:7c:ea:a3:11:4a:ef:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/
RPKI Manifest - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
RPKI Notify - URI:https://rpki.cernet.edu.cn/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
144699
sbgp-ipAddrBlock: critical
IPv4:
103.165.110.0/23
IPv6:
240a:a801::/32
Signature Algorithm: sha256WithRSAEncryption
11:13:49:69:20:96:58:07:d4:87:d5:75:b9:54:03:7c:5f:90:
a5:9e:02:9e:59:0a:2a:90:64:19:9b:3b:72:48:9e:3f:42:ff:
0e:f6:b2:61:17:a4:08:cd:af:c8:f8:d7:bb:98:11:c8:49:be:
ff:dd:2d:0d:6e:46:a5:a8:07:68:49:89:97:55:5f:34:79:e2:
ac:27:a9:38:ad:cc:8d:be:f4:f8:3e:2f:c8:fc:e9:c3:96:65:
ae:66:b4:b6:cc:50:68:c3:8c:9c:d5:f0:f8:56:76:63:bb:13:
33:8d:5d:9b:7e:b6:91:e8:5e:56:ca:e1:5d:61:c9:b8:48:9a:
f0:af:08:c3:31:84:71:e1:5c:34:8d:d4:de:aa:c4:c4:5a:09:
e9:6e:81:54:06:97:27:e6:66:c9:39:c0:df:f3:9d:01:be:52:
97:c8:06:a1:05:bd:94:db:8d:35:7c:1d:4d:45:0e:11:13:52:
e4:64:e2:2c:18:43:02:e8:f7:3f:48:72:b9:c5:dc:cf:91:28:
85:92:ea:5a:bd:b3:84:dc:37:ca:3d:59:ce:b7:8f:79:9d:f6:
98:0a:7e:10:c8:71:f4:0a:c8:45:1f:b8:ed:d5:71:a9:07:6a:
1d:21:dd:55:ac:c6:df:62:2b:bb:44:93:e5:55:6e:6e:62:39:
37:db:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:34 2024 by rpki-client on console.sobornost.net