Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer (raw, json)
Hash identifier: hzz2yXrx2MxxUUb+cqs/2Jh4qbTfbFxr6FTiyZWBbFw=
Subject key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F17F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 May 2024 14:36:34 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 23731
IP: 203.175.120.0/22
IP: 2001:df0:e1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127359 (0x1f17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 13 14:36:34 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:43:bf:a3:a4:89:10:7d:85:a8:21:ec:52:
04:44:e7:41:d7:c3:d2:e8:95:d2:08:01:6b:25:e5:
e2:ae:d5:83:75:6a:cd:50:f4:2a:7e:0c:fd:4e:42:
05:47:13:72:6c:38:19:de:9e:1e:ae:e2:3b:87:00:
a4:ac:52:d1:cd:7d:2a:fa:eb:d2:d2:54:56:a4:70:
02:32:4d:b6:e1:fc:da:1e:e4:35:8a:60:61:9f:2a:
0d:e6:eb:4b:b3:93:6d:cb:38:fa:79:8a:8b:10:6b:
e2:f3:f5:5d:90:59:5b:74:2e:5e:de:3f:29:09:fd:
fe:00:5e:be:fc:f2:26:0d:48:d2:70:54:8a:3f:3a:
39:af:24:09:ea:94:cc:7e:c5:53:02:7a:bb:5f:8c:
03:35:19:d4:d8:9c:89:17:a7:5d:90:1f:5d:32:18:
fd:3a:35:2e:c7:df:6a:fa:b5:6f:0e:8a:7b:df:9c:
71:b1:a7:25:ce:5e:44:b2:aa:03:29:80:22:87:0c:
0e:95:af:27:00:68:e0:26:84:54:95:80:f3:3a:74:
3a:2a:bf:aa:e0:2d:28:78:c9:10:26:fe:b9:45:fa:
d0:b8:2d:01:8b:53:19:97:0d:4d:50:f1:d9:91:2b:
34:5f:3d:82:c7:c5:8a:22:86:95:fc:82:e0:f5:c9:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23731
sbgp-ipAddrBlock: critical
IPv4:
203.175.120.0/22
IPv6:
2001:df0:e1::/48
Signature Algorithm: sha256WithRSAEncryption
aa:f8:3a:d3:38:2d:f8:dd:79:f2:51:5a:e5:ce:18:d9:83:52:
23:23:be:a0:6b:1c:6e:2a:de:98:73:4a:0e:cb:92:59:23:7e:
91:38:b8:f7:00:2e:15:4a:e2:41:9b:6c:fd:b3:50:64:9c:7e:
3a:9e:b0:c7:a6:cc:33:e6:44:01:85:ce:cf:34:06:ff:66:ac:
2c:d2:cc:af:74:f8:ba:eb:88:d7:6f:27:93:45:94:30:98:a9:
66:d0:ad:5b:ce:10:53:5a:be:09:8e:f8:6e:e9:70:47:1b:cb:
6e:53:8a:27:f9:6a:50:46:2d:19:48:c8:2c:61:30:10:47:f1:
f7:66:09:45:29:84:91:d3:eb:f2:d5:d0:bb:8e:f3:2c:54:28:
a1:49:71:68:84:6d:e0:65:1f:2a:58:ce:f7:a9:73:38:74:12:
8d:dc:a2:80:9c:67:14:71:59:34:eb:4e:42:65:7e:ac:e5:b2:
94:e5:a8:47:b6:8b:58:35:a3:a5:c9:04:17:a2:ba:14:69:df:
c2:fc:03:3b:5f:b7:12:8e:b3:0a:77:1a:4d:f9:5b:20:60:6a:
7b:7b:bd:1d:02:e0:cd:a5:91:ae:09:b7:b4:a9:1a:21:ec:e4:
da:61:b1:1c:7d:f8:01:1a:2b:b2:a5:2e:c9:10:4f:ec:6f:2e:
4a:23:8d:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:36 2024 by rpki-client on console.sobornost.net