Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer (raw, json)
Hash identifier: PuGtpTI9znYJovPiQy/chBnrQCsT02fbcjDoz0lP0y8=
Subject key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020689
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Aug 2024 18:38:03 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 103.97.228.0/23
IP: 103.106.202.0/23
IP: 2401:8f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132745 (0x20689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 13 18:38:03 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:e2:1a:2a:2d:21:be:8c:e3:89:34:1c:64:
ee:a3:38:a6:71:df:55:6e:27:61:be:dc:98:26:dc:
cc:8f:4d:dc:2e:cd:2e:eb:af:c2:f8:e3:e4:a0:e2:
74:e9:f0:3d:8b:39:f2:a2:db:5e:6b:9a:b2:17:7b:
bf:35:de:3f:79:48:37:f6:b7:60:5b:37:ce:d1:fe:
f1:11:eb:cc:09:73:e2:bb:e6:e4:6f:4e:cb:51:d8:
5c:ec:6b:1e:47:7c:c3:4e:e1:48:0a:ea:eb:2b:96:
4e:f6:54:44:94:c2:0b:5f:2f:54:e8:05:6a:21:c9:
77:43:a2:79:54:ab:90:9b:54:62:6c:aa:ea:ec:85:
b8:18:97:98:55:12:69:aa:69:d7:3b:8e:2a:0d:42:
67:9a:f2:0f:5b:91:57:a4:26:4e:aa:2e:9d:19:30:
42:60:b0:27:b9:48:a3:b0:d4:df:5c:42:38:65:a3:
b1:2a:ad:dd:65:4a:08:d2:f4:b5:8d:58:dc:99:a0:
97:e4:af:b2:e1:df:6a:4a:cb:2f:22:ab:af:35:06:
57:d2:b0:40:26:bd:07:10:09:89:da:0a:5f:4c:a1:
c5:b4:4d:d8:d4:df:d5:46:95:4c:1a:51:01:07:7f:
4b:26:8e:d8:44:f1:e1:50:84:61:c3:20:c3:86:b5:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.228.0/23
103.106.202.0/23
IPv6:
2401:8f40::/32
Signature Algorithm: sha256WithRSAEncryption
26:5c:5c:2a:24:75:58:2b:9b:8d:5f:56:a9:e7:80:a1:22:a3:
d3:0c:50:d4:9d:d3:b8:b4:b0:ea:71:0c:ab:50:0b:c6:36:4c:
e9:ec:91:6f:3c:57:db:06:06:5c:8f:d5:5a:95:45:e6:22:10:
bb:5d:7b:d2:5c:74:88:15:9f:63:58:67:2e:c9:3a:1c:85:52:
d4:b2:ed:b1:8a:25:d8:e3:f6:24:92:3a:b0:60:7a:be:e2:97:
74:83:6e:c5:e2:2f:72:06:06:8d:e1:d5:08:45:56:6b:c3:d9:
00:b2:00:a1:9c:9d:7c:28:49:c8:18:dd:e1:9d:26:d8:61:3e:
22:11:99:f1:84:c5:e4:94:38:e6:ed:b1:a4:ef:46:2b:60:f7:
a2:0a:d6:35:9a:03:8d:64:7d:3f:a8:b6:5c:f1:bf:4a:34:1d:
a3:13:6f:39:26:7f:f4:f5:f4:55:34:bb:98:1c:fc:83:8d:3f:
5f:3d:00:11:2b:96:ab:44:a2:18:e3:c4:c2:2b:d5:c7:d6:0a:
9c:77:3a:08:7a:1f:47:dc:fc:a2:70:2f:e9:ca:9d:22:d3:2a:
5c:94:65:5d:00:e0:6f:61:e4:01:aa:1c:97:d2:56:0d:d7:b0:
cb:e4:03:92:8c:a4:28:06:9b:7d:c8:a3:4e:4c:3a:d3:d5:50:
a3:c6:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:34 2024 by rpki-client on console.sobornost.net