Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.cer (raw, json)
Hash identifier: 3I3u5bCyM1T+kGrp38LSSaf/fj6oA3CGepHrhDEsDoo=
Subject key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020D02
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Sep 2024 09:07:09 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 131282
IP: 103.68.178.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134402 (0x20d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 11 09:07:09 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:0d:60:16:69:f4:2f:1b:e1:8e:72:c8:dc:
41:9c:ee:b9:23:6d:ef:7e:89:07:77:9f:87:65:40:
78:a7:6e:a1:b0:43:ed:44:38:a3:19:9b:41:93:90:
a9:f1:c4:8b:12:10:48:02:9e:be:9a:71:78:1d:7c:
7e:81:79:7e:67:ff:d4:c4:8f:b4:ab:18:24:3d:c9:
8b:66:ca:65:28:94:8e:2f:ab:49:77:30:39:ac:c3:
22:b3:5a:c7:57:c7:45:84:ac:7d:e0:78:99:65:88:
e8:b7:02:fe:93:2b:66:3e:d4:63:3d:f6:f7:83:3b:
35:73:55:1b:8c:70:e2:51:bd:f5:be:27:51:0e:af:
5e:f5:51:1f:ee:33:da:3f:ee:92:ad:9b:93:29:dd:
4e:2c:f3:00:f4:eb:89:27:14:1f:1c:a1:99:67:d0:
ae:31:cd:43:7d:60:fb:bf:b7:10:b5:8b:5d:2a:7b:
12:09:1d:ed:08:c5:25:23:f8:76:8f:09:46:a4:f0:
7e:1c:64:13:3d:32:34:60:f5:10:bc:76:ae:d7:80:
b4:44:11:4c:f6:8d:20:5d:7b:76:76:ec:1b:38:86:
ff:c6:ac:32:57:07:f8:fa:9f:57:78:e3:8c:5b:db:
62:f9:87:e3:db:c3:23:50:2b:c4:87:ba:36:05:7c:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131282
sbgp-ipAddrBlock: critical
IPv4:
103.68.178.0/24
Signature Algorithm: sha256WithRSAEncryption
49:39:5f:f7:5b:3d:fa:d2:df:6a:da:fc:59:7c:d0:d4:30:95:
79:81:43:e6:d1:51:26:e1:f7:24:ab:37:14:66:51:bc:c0:e5:
ab:86:88:68:53:0f:98:70:c0:bb:5a:ee:6c:70:dd:ac:18:87:
50:0f:e5:2e:0d:db:7e:37:ce:68:3e:a1:7c:6d:db:c1:16:16:
e0:eb:d5:e8:1d:15:48:f4:4a:6d:58:b8:a0:0e:a5:9d:32:41:
79:f0:43:50:74:ca:06:da:94:29:dd:63:b0:ac:d7:cd:00:a4:
c0:5d:26:2c:89:5e:87:02:5f:78:9c:e1:a3:4d:6a:3b:17:6f:
5e:9a:ec:6f:c5:91:86:89:b8:35:83:4d:1f:4a:22:97:cf:54:
39:81:05:e3:97:ae:1f:19:d3:6a:7b:36:6f:9f:77:bc:73:6e:
48:da:d7:17:71:1b:6b:50:8f:55:d0:15:59:bc:d7:31:78:e8:
1b:95:dd:4a:b4:e6:66:05:09:db:a6:dc:81:64:68:d7:df:3e:
7c:c9:da:af:a4:da:1e:91:06:39:29:82:19:2b:d8:85:ba:eb:
95:e1:20:0a:ae:35:83:ab:a3:78:2e:07:27:f9:a0:39:19:29:
67:fc:5c:b3:a6:a1:23:0a:5e:f2:ee:82:9f:c1:19:89:70:57:
99:2b:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:40 2024 by rpki-client on console.sobornost.net