Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer (raw, json)
Hash identifier: 5c3CjlDIxnWBSS2966p63VDbnIhieGBqATxNiBZOPLk=
Subject key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020DB5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Sep 2024 12:49:21 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 103.248.10.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134581 (0x20db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 12:49:21 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:c7:bc:b5:72:51:67:61:3f:25:ca:be:4d:
10:fc:3e:a3:96:b1:c2:c2:f5:5c:d5:29:77:29:0c:
0b:25:60:7b:bb:73:d2:db:41:44:17:33:cb:7f:29:
56:e9:c0:da:61:e0:c8:4f:04:d4:ff:12:78:57:7d:
77:4d:eb:95:90:fe:6b:07:69:e2:4b:fd:80:cd:02:
29:7f:56:4f:88:0b:9f:b5:be:39:1f:34:9e:ca:39:
20:e8:a9:28:5f:7c:40:de:dc:3c:28:09:29:e2:53:
89:39:95:37:2d:81:56:e7:27:6e:c8:d3:6b:b4:f4:
f7:a6:95:be:7b:e3:a8:9f:ba:23:bf:cd:5b:d5:1d:
31:08:b4:f0:9e:ee:93:0d:c8:ae:1f:f1:5b:fe:2d:
d0:b0:cf:00:f2:98:55:58:9a:6c:47:f9:41:9f:8d:
13:a4:39:f7:26:5a:d1:8d:d2:cf:4d:c2:78:ba:70:
36:61:f2:18:6a:e8:99:14:07:e7:77:0a:9c:59:8e:
06:0c:25:6a:8a:2d:7c:7f:c9:dd:4c:1c:1b:d6:e2:
e5:b6:56:5d:0f:a0:a7:e2:b0:45:e9:ed:9a:2b:e0:
d4:cf:17:9a:44:15:59:43:a8:80:37:aa:dc:28:7c:
c1:93:c9:8d:73:ed:ac:72:6a:4a:c3:e6:0d:ac:54:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:90:b6:e9:9c:53:ae:da:f9:06:4c:85:21:7c:0b:8b:cd:79:
18:53:65:f6:12:27:0b:9e:dc:7d:d3:9b:73:33:f0:cf:3e:51:
5b:cf:c7:f3:3a:be:05:9f:dc:5f:15:2e:bf:4d:57:d8:ef:cc:
6f:c6:f9:5f:98:39:26:82:16:0f:24:52:49:b5:1f:bb:a9:a2:
7b:ee:f4:f3:b9:af:dd:d6:8d:2d:fa:53:79:a4:ef:f1:fc:0d:
55:5f:36:86:49:04:1e:0d:cf:af:6f:c6:b0:a1:48:9f:34:70:
24:64:10:d4:ab:68:2c:bd:ee:9f:3c:ea:26:af:2f:f6:5e:6f:
d5:29:f2:2b:01:81:54:05:ce:fa:0c:2d:98:bc:d4:36:cb:47:
46:dd:49:4e:90:f6:ca:3b:29:2b:db:bd:65:82:a9:77:e1:6e:
6b:b2:89:c9:f9:4e:e5:e1:bc:4d:1e:e9:f4:6d:cd:8f:6d:b7:
11:b9:5c:cc:da:04:16:76:92:f3:07:5b:55:d3:17:bc:36:76:
8d:05:5c:fe:27:d2:5b:82:40:d5:8b:d6:dd:e6:ab:ab:ca:6b:
fa:8c:42:ad:ec:74:74:d7:c9:e4:f6:a3:1f:ac:c8:d7:38:7c:
12:3c:e2:b8:b3:dd:84:20:bc:c3:bf:5d:bc:30:9d:a2:21:72:
5f:01:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:34 2024 by rpki-client on console.sobornost.net