Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer (raw, json)
Hash identifier: ny5oFJxOJHgiVM8my/bdgTGnrr6rLLXVAIbYM3QXb14=
Subject key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F749
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Jun 2024 00:36:21 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 135428
IP: 103.138.184.0/24
IP: 103.219.113.0/24
IP: 2001:df2:1300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128841 (0x1f749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 00:36:21 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:ab:2f:b3:88:aa:7f:bb:04:6e:e4:96:63:
9c:37:1a:75:a4:9b:2c:d3:40:e6:1b:7c:64:05:76:
69:04:a4:85:82:35:d9:09:e8:ef:9a:22:b0:70:84:
fe:0f:cb:15:2b:27:50:7e:ca:c5:d5:a1:e7:31:fb:
4d:10:5e:88:0f:fe:21:f7:5c:f6:cc:73:2e:e6:95:
9a:25:68:dd:ad:4b:27:9b:07:88:55:c7:c4:45:61:
f2:01:5e:00:09:67:6b:3b:d2:6f:9b:01:d9:e4:63:
25:08:98:b6:7c:eb:ac:83:ee:bd:50:a7:61:ca:9a:
65:2c:2e:02:c4:0f:c5:e1:ac:7a:dd:e3:86:02:93:
3c:f6:5e:a2:c9:19:1b:3b:f4:ea:15:cd:a9:28:6a:
eb:d1:a1:13:6f:c0:ef:29:e9:75:1f:12:ed:ab:cd:
02:d0:8d:0d:07:e5:92:55:40:59:29:9f:47:07:73:
94:df:4e:f0:9c:e4:89:01:79:64:49:2e:ec:61:e0:
6f:b2:3d:ee:fd:da:c4:ec:de:36:37:e2:12:c9:1f:
05:2a:6f:2c:ce:2e:6c:69:c4:b3:ea:78:6e:75:f9:
57:ca:28:df:ea:a9:7a:d7:cb:4a:22:9d:6d:fd:2d:
7f:6e:19:68:0d:c9:2e:2e:be:68:69:7c:e8:69:06:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135428
sbgp-ipAddrBlock: critical
IPv4:
103.138.184.0/24
103.219.113.0/24
IPv6:
2001:df2:1300::/48
Signature Algorithm: sha256WithRSAEncryption
91:49:5a:e0:77:d9:90:67:90:e0:37:d9:28:63:24:83:ff:90:
ee:b4:59:ee:07:a9:04:45:c2:4f:38:88:a8:58:c0:f0:e9:0e:
de:5b:86:0e:27:37:1f:44:5f:4b:be:09:7d:be:7b:b6:aa:34:
59:c1:a2:45:c0:01:4f:73:1e:b8:17:aa:44:e3:be:c8:af:7c:
4f:2d:8f:45:26:9b:22:d4:60:50:54:a3:91:2b:0b:86:78:15:
3e:70:cf:c3:be:29:9b:41:c3:48:fd:1c:18:60:49:2c:52:dd:
98:ac:1d:cd:fb:1c:8c:8d:6b:43:bd:f5:33:a5:d9:ab:9e:72:
ef:6a:84:4d:c0:91:a9:f0:bc:f0:70:82:7e:38:56:15:ad:c1:
6c:b5:9d:7e:f5:60:90:98:8b:91:07:4e:18:ac:c5:e6:09:b3:
2f:3e:62:e3:36:9b:36:3e:0d:df:38:ea:49:e3:97:0f:50:0a:
d2:b1:48:eb:c1:8a:c8:68:b2:55:81:1e:c3:1d:f6:30:f6:ce:
98:44:0e:be:97:bb:39:c3:d0:06:a8:0a:10:eb:38:e3:ea:1c:
4d:f4:30:69:d0:34:e8:9e:60:a1:73:9b:3e:3a:01:b9:97:e9:
9e:5d:d5:b7:9d:48:82:ac:e4:63:f9:e2:e6:49:02:52:b2:3f:
82:c7:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:38 2024 by rpki-client on console.sobornost.net