Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
File: 3glSX1epVbpvLTKtIoMwQhUYLkU.cer (raw, json)
Hash identifier: 7QM++oaoDmgWvf6GjGWoou4h5kE8Q50kn2zN3jgiXJ0=
Subject key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020DEC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Sep 2024 12:32:01 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 151654
IP: 103.250.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134636 (0x20dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 17 12:32:01 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:48:43:32:31:e5:a6:f7:29:1e:fa:07:dd:
44:36:aa:97:28:dc:b2:ee:48:a5:78:38:53:86:da:
73:8a:83:1e:47:13:59:f9:9b:8f:61:07:60:23:a3:
f7:ed:b4:c4:6a:0e:1d:4a:a0:21:34:5d:0b:f2:03:
ef:fd:74:2b:94:69:8c:b4:ec:3c:65:c9:41:fa:38:
d6:37:50:e2:a6:54:2c:49:d6:54:d3:f6:52:3a:d0:
84:5d:64:8e:0a:08:e8:a7:fc:7c:50:0d:42:39:78:
6b:4c:60:77:f5:f0:ec:29:da:77:4a:f6:1c:d4:df:
6d:d8:5b:c5:e4:66:1f:a8:a7:f3:02:5c:23:af:71:
00:8f:6b:e3:74:21:bd:62:d6:8f:aa:b8:2a:db:77:
f1:2c:b6:1c:69:97:89:65:54:2a:03:6d:8d:86:15:
c6:51:53:b6:e0:e7:62:7a:9e:2f:a5:db:6e:1a:26:
57:5e:6b:d8:3c:63:54:aa:0a:33:76:85:9b:b1:5e:
16:dc:42:6d:97:69:07:83:74:8d:70:60:67:54:0a:
ab:70:c7:7c:7a:9f:72:d3:9c:e9:69:ce:30:60:bb:
6e:5c:af:28:c2:f7:ba:4b:2b:fa:f2:7d:33:0e:32:
85:bd:3c:10:97:8b:c0:e4:4d:01:76:6b:6e:e0:6e:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151654
sbgp-ipAddrBlock: critical
IPv4:
103.250.122.0/23
Signature Algorithm: sha256WithRSAEncryption
36:c7:e1:d4:22:0f:e0:c0:0d:85:60:0c:33:14:bf:68:37:ee:
8c:0b:b0:71:60:b5:8a:13:cc:57:27:7c:59:6c:67:4c:e7:a6:
4d:ac:03:1b:a3:af:e4:44:96:9b:5f:fa:22:a2:96:97:2b:b3:
d4:95:9c:40:16:1e:b8:1a:dd:7b:d8:e6:cd:29:54:72:8b:a5:
e2:e4:8f:3b:ef:37:75:56:f6:3d:26:88:b3:3a:df:36:97:f2:
95:7b:a9:ae:82:1d:94:31:72:09:79:22:f1:7d:f6:55:35:18:
32:1c:7f:db:85:bf:61:27:2b:bd:d5:bb:bc:2a:be:00:10:39:
66:31:1d:8e:e7:d4:a9:bb:76:15:ff:cc:0f:71:42:60:64:21:
4b:5a:44:ce:ef:19:0f:19:58:82:f6:ef:17:af:2b:bd:5c:63:
c0:f4:2f:8e:7c:26:93:49:03:f9:bb:34:86:30:6c:ca:ed:d0:
98:34:fd:79:fd:bb:4a:56:7d:96:2f:db:c5:ae:49:8c:ae:20:
fa:e9:8e:19:b4:bf:ca:d3:16:3b:1c:28:b2:c9:8d:1c:87:5a:
d2:87:2c:61:28:34:0b:69:1f:c6:6a:ca:a9:c8:6e:07:13:27:
f2:27:e3:f3:38:ac:13:16:21:b0:af:65:e1:0d:96:64:bc:ff:
90:bb:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:35 2024 by rpki-client on console.sobornost.net