Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
File: 4Loijq-YEvBn0v87-AaJVpjJOXc.cer (raw, json)
Hash identifier: JrzrWjpmVkvB7m6/PaFLiVvtknpTP4be5VIYGk03G+w=
Subject key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020F1D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Sep 2024 00:19:59 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 38186
AS: 55331
AS: 153339
IP: 27.126.176.0/20
IP: 103.237.72.0/22
IP: 115.126.0.0/17
IP: 116.212.112.0/20
IP: 118.99.0.0/18
IP: 118.102.8.0/21
IP: 119.47.80.0/21
IP: 163.53.216.0/22
IP: 202.59.152.0/21
IP: 2404:ee00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134941 (0x20f1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 24 00:19:59 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:52:5d:9f:de:4c:f2:58:cf:4b:83:ed:79:
51:b8:c2:a3:1f:45:e9:bc:f6:e1:e3:2d:d5:ff:8f:
be:bf:f0:2b:57:64:8a:8e:44:54:29:e8:59:ea:1f:
6a:3f:b3:96:90:40:83:55:da:1b:7f:90:58:f6:7f:
88:b4:66:5b:1b:cb:60:49:89:8f:d8:c5:f5:1d:5e:
90:a8:92:e7:1a:a2:5d:e8:b0:aa:b9:0a:53:13:01:
d5:3e:a6:0f:69:3f:f4:dd:57:b6:98:d0:c8:36:2e:
ef:c8:fd:66:ad:8f:26:b0:f8:31:1a:e9:bb:ca:cc:
b1:21:ae:8d:ae:ae:b9:66:18:69:46:fe:ab:1d:c2:
40:bb:f8:a5:38:26:a0:25:56:13:6d:bb:71:a6:e8:
ee:68:40:f6:54:08:1a:45:50:b1:99:5d:5a:c6:93:
17:58:c0:af:7a:2b:32:9b:34:41:88:76:25:bf:17:
6d:ee:22:f3:70:97:fd:30:34:db:b9:14:ea:16:bb:
74:f7:28:26:05:5a:bb:60:a4:fb:0a:36:c3:ae:aa:
7f:e7:20:4b:4c:67:ff:39:7b:54:2a:a8:67:f5:e7:
77:58:d9:52:2a:a8:4b:d3:af:9a:67:9f:5d:dc:39:
59:da:e8:2e:ee:74:c3:14:b0:28:e5:0d:f7:51:83:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38186
55331
153339
sbgp-ipAddrBlock: critical
IPv4:
27.126.176.0/20
103.237.72.0/22
115.126.0.0/17
116.212.112.0/20
118.99.0.0/18
118.102.8.0/21
119.47.80.0/21
163.53.216.0/22
202.59.152.0/21
IPv6:
2404:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
37:d6:bf:de:27:dc:1e:d8:1c:2b:e3:ca:21:70:8b:ac:a8:a5:
3d:5d:dc:b6:19:6c:91:87:5d:6b:2e:a9:27:cc:c4:49:bd:d7:
a8:e3:b4:b4:db:d1:38:44:d7:34:4c:e4:bf:19:9a:d5:8c:78:
08:96:39:4c:f9:02:2f:42:17:e0:f0:65:0a:f1:66:be:4d:6f:
22:35:92:b2:8f:36:e1:37:fb:a7:3a:f0:1a:0d:94:c8:3e:64:
d4:ce:5e:e0:a3:8b:db:ba:0b:7d:78:fd:fa:ec:7a:59:df:ef:
52:67:70:f2:28:4d:03:53:fe:dd:19:07:4f:11:e9:03:8a:38:
ec:76:21:66:5f:e0:a7:a8:b0:b9:34:56:5f:ea:0e:4d:e3:7f:
3c:c5:0d:13:d9:90:55:d3:0a:d1:e6:9c:44:9f:3e:21:da:8a:
b4:69:3d:cd:f2:d4:86:aa:8e:9e:35:e0:a6:9c:54:cd:07:47:
a8:71:f3:42:84:65:5f:5d:41:32:97:3a:9c:4a:72:19:18:1e:
aa:47:ac:b3:ab:e0:79:9a:37:01:50:9e:9d:43:09:94:60:b5:
ba:44:64:52:87:7b:46:0f:16:e7:d4:f1:56:f1:8a:78:82:c7:
82:74:81:e0:cb:99:4c:0d:5b:1e:06:14:43:8b:12:cf:d2:6e:
99:5b:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:36 2024 by rpki-client on console.sobornost.net