Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
File: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer (raw, json)
Hash identifier: QotEeGQbTisJI0UL51KxhvM3ULOIfbGGRJoAKbOy/os=
Subject key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F8D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Jun 2024 22:27:30 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 132262
IP: 103.9.64.0/22
IP: 2403:d100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129239 (0x1f8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 12 22:27:30 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:f5:4c:32:77:3a:a9:ce:c9:19:b5:20:af:
4a:3b:b4:7b:c2:4c:61:9d:67:84:e1:a7:f0:6b:2d:
21:0e:74:99:9b:1e:13:60:6a:8d:98:d8:e6:90:84:
0b:54:03:65:76:b2:77:bb:d1:2f:a3:10:eb:ab:26:
f1:40:c9:84:dd:29:0f:10:89:bb:33:5d:e5:18:f3:
bd:38:07:50:f5:1e:d8:a4:3b:d5:80:9a:b0:ee:06:
26:56:fb:64:73:d0:51:f8:13:d6:e7:fd:1c:8e:d8:
f5:29:28:b0:06:aa:65:1f:1e:ee:e2:aa:fa:4f:e0:
5a:e3:bc:9b:9e:d6:78:f3:9f:dc:8f:4b:43:0d:fd:
06:cd:93:4c:6b:5f:2d:c6:e4:2e:32:5e:09:7f:d7:
70:45:9a:09:b9:4c:20:98:e3:ea:65:46:d5:1d:49:
c1:7a:36:a2:ce:09:4f:52:ca:68:f5:1b:4c:02:c6:
af:1e:30:6d:4a:8d:90:bc:f1:54:8f:81:4b:b6:09:
38:f3:cc:3a:4b:d8:86:80:fa:e9:66:2d:df:ef:53:
96:a7:dc:50:20:98:b0:ca:f9:87:04:dd:1a:aa:f7:
fe:8a:c6:ed:fa:02:db:c5:c4:b5:96:6f:fa:60:16:
7f:06:27:34:d2:cb:4e:c9:b0:30:f3:c6:da:f7:14:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132262
sbgp-ipAddrBlock: critical
IPv4:
103.9.64.0/22
IPv6:
2403:d100::/32
Signature Algorithm: sha256WithRSAEncryption
a4:ec:39:1a:43:2d:39:d8:d9:2e:92:28:7c:a0:07:eb:30:8a:
75:85:ca:c6:78:51:e9:4c:64:4c:3e:ed:32:25:15:1c:89:1f:
a1:57:f5:b8:4d:80:90:c8:23:76:9a:d5:06:0a:64:90:75:47:
9f:9a:83:13:22:ba:47:38:87:02:6a:ba:bc:d7:9a:23:75:ae:
62:e9:b6:a7:08:56:21:f8:92:3c:5c:a8:7d:ae:a9:1d:50:b3:
d0:a9:df:88:30:e1:a6:3c:26:f5:08:c6:de:e9:d5:fd:85:91:
a9:5d:3a:a0:2d:1b:e6:07:8e:c1:ed:be:23:48:10:f9:29:27:
1a:9a:f0:45:04:89:87:ef:20:2c:ac:97:e4:82:a6:5e:a1:af:
ab:36:49:e0:8d:03:7e:9c:c8:e9:1f:1c:ae:f8:8d:7f:bc:1d:
6f:4b:65:49:f4:8a:9b:67:8e:76:0c:60:f2:0c:21:6d:8a:2c:
1f:5d:5b:bb:a0:17:9d:36:dc:d3:a1:bd:a1:d1:e0:3d:50:a8:
03:55:fa:3d:90:a0:71:e7:f4:c0:f7:84:6e:a2:36:ca:5f:45:
7e:a7:9d:e4:94:f0:83:ff:44:fd:84:f7:f0:6e:ac:dc:37:93:
a1:b3:c6:1d:00:83:21:0d:99:8d:84:07:7a:ee:bc:bc:40:5f:
05:3f:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:38 2024 by rpki-client on console.sobornost.net