Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer (raw, json)
Hash identifier: QI+LNqh6oPAp0fpMYWd3QAZY1Y7P1eiHFzIIXfaL9Nk=
Subject key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020E1B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Sep 2024 12:09:34 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 153324
IP: 2001:df4:3f40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134683 (0x20e1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 18 12:09:34 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:89:92:28:9b:89:3b:6e:f4:e0:dd:20:cb:
c2:65:4c:bd:93:0c:f5:54:1a:c4:53:bc:e9:4c:47:
ea:9d:cb:09:61:bb:99:84:38:b2:05:bf:a6:65:92:
67:bb:f8:ca:ac:e2:c5:33:b7:2f:bc:45:f9:41:9b:
5b:b0:ef:53:68:86:1f:ad:8a:84:c3:24:d0:12:ae:
40:ec:8c:b9:f4:c6:e9:6d:35:7a:4a:fe:33:d7:ab:
f9:21:79:b1:d4:e3:33:a1:77:b1:26:96:9e:81:1c:
c7:be:6d:31:ec:43:73:2e:da:8f:cd:89:f3:6d:80:
b1:5f:4d:b1:2a:50:46:37:73:b5:c6:c4:a6:99:56:
77:af:37:0c:5d:af:dd:be:30:f8:77:84:ed:01:35:
a4:d9:45:2e:fe:a9:9e:99:08:f3:f4:78:d1:45:2e:
e7:33:24:73:0a:f3:a1:e1:22:5a:3c:a5:f3:3c:85:
15:41:2b:01:ed:de:c3:b6:d0:2f:c2:e9:67:64:65:
9a:01:2b:18:3d:61:7c:a6:6a:00:d2:60:cc:cf:55:
36:58:40:f8:95:79:90:15:a6:9d:a7:97:a0:78:50:
bc:aa:bb:e4:44:09:e5:ab:e1:90:f6:d3:7e:5e:c2:
aa:61:7c:41:37:62:f5:40:c5:ff:0f:40:c8:9b:2d:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153324
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3f40::/48
Signature Algorithm: sha256WithRSAEncryption
ae:75:32:9c:d0:97:8f:a4:0a:02:50:ae:fa:a7:dd:65:bf:cc:
a8:68:79:63:c6:49:be:e5:df:30:6d:63:0c:f8:4c:77:c4:e9:
77:0b:5a:2d:6e:5a:c2:36:79:86:8f:75:cb:8a:c9:7a:ec:64:
20:1b:69:74:ed:cf:bd:93:e0:ff:41:97:5c:b8:ca:66:9d:ca:
43:25:16:fb:b2:c9:35:e9:75:98:eb:be:2b:83:73:46:29:95:
24:aa:e9:4e:d3:a4:2f:05:e8:65:cb:8a:1b:e7:e6:dd:62:59:
3d:53:81:46:4b:e3:8e:b6:33:c2:72:14:ec:67:ad:da:46:5c:
91:41:af:9a:3a:3d:92:d8:d2:dd:10:9a:8d:c8:4c:73:19:ac:
37:56:db:c1:10:0c:9a:dd:f1:4b:82:61:fd:7b:3b:ae:f5:73:
0a:5d:fa:82:a5:29:41:77:21:80:85:cf:c6:f6:59:b4:4c:7b:
d4:dd:bf:12:2d:28:0f:98:c2:19:7b:4b:69:ec:b5:98:80:83:
f4:02:1e:0f:65:0a:09:af:9e:60:03:54:68:b7:c8:90:1e:2d:
37:31:4f:2a:61:09:5e:21:0e:b0:17:49:1b:50:1d:be:a6:ae:
ff:44:b3:11:00:98:08:05:34:27:01:8c:3b:1c:2c:66:36:73:
a6:79:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:41 2024 by rpki-client on console.sobornost.net