Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer (raw, json)
Hash identifier: IhbmEDoQpEfEbkueC5XVnLxX8ukEWCcrAQkOcFVTY+Q=
Subject key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020DD6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Sep 2024 19:11:05 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 132683
IP: 103.72.84.0/22
IP: 203.3.132.0/24
IP: 203.11.65.0/24
IP: 203.142.218.0/24
IP: 203.161.179.0/24
IP: 2406:c380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134614 (0x20dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 19:11:05 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:a1:d6:28:0c:62:94:76:e9:c0:78:3b:c1:
95:99:98:b1:19:37:f7:92:1b:c4:6d:cc:8b:a0:e9:
42:4a:2b:dc:d2:93:c0:06:15:d6:fd:6c:a8:c3:60:
e7:b0:4e:c7:5f:d7:90:7e:bb:81:6a:ce:f9:4a:ee:
a4:54:5b:93:e4:f2:2a:ae:09:d6:b9:67:87:62:ef:
2f:bc:49:7d:c5:69:7b:87:40:5f:38:1f:e2:8c:65:
53:90:76:ae:cf:d3:0c:7d:95:f7:36:ac:4c:e9:23:
a5:c2:a4:2d:ec:c1:bc:4a:24:5a:7b:44:26:4b:c1:
62:f4:b7:8e:9d:bc:38:ab:0d:2b:e6:8b:b7:c7:55:
74:f0:c2:78:75:37:5a:ea:39:bf:b2:8f:c2:60:1a:
40:6c:f9:73:10:a6:7b:d6:e5:16:70:6a:3a:79:8a:
69:a7:a7:65:e6:15:f4:e5:18:7a:da:49:a1:2a:05:
da:96:74:7b:2e:03:60:7c:90:59:9f:be:71:07:26:
6f:f7:4e:a3:ba:4a:90:9c:42:0e:a7:f2:28:7b:1d:
2b:7a:2e:cc:76:ef:3f:57:97:4f:18:ea:ba:50:a5:
48:24:44:be:0b:b1:02:b2:23:2e:d9:39:40:18:f2:
62:55:a6:33:94:e8:87:d9:2b:3b:e2:58:27:db:fc:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132683
sbgp-ipAddrBlock: critical
IPv4:
103.72.84.0/22
203.3.132.0/24
203.11.65.0/24
203.142.218.0/24
203.161.179.0/24
IPv6:
2406:c380::/32
Signature Algorithm: sha256WithRSAEncryption
9d:2b:57:a6:82:71:68:55:8e:c2:5c:7b:8e:64:86:0a:81:73:
9c:93:4d:b0:07:2a:70:4f:91:a1:e5:c8:24:11:0d:aa:a4:3d:
d2:c8:2a:7d:d7:5a:ab:df:e7:b8:06:65:c4:ae:42:91:e4:b2:
5b:cb:52:3b:3f:d4:51:e1:71:74:55:5a:d4:14:3d:eb:a1:22:
d9:a3:06:5f:75:e7:35:68:db:eb:83:cf:6f:48:39:1f:00:76:
9e:11:9d:21:eb:29:e9:ac:80:9e:1b:cf:36:b4:2e:4f:ac:ef:
8d:dc:43:30:bc:a4:f6:d3:97:6a:0c:32:ed:f4:a6:37:d8:ae:
bd:a4:fa:c1:bd:60:c8:f8:91:02:36:59:48:87:9a:3d:ed:47:
14:dc:15:8d:c4:af:79:44:e2:5f:af:8f:75:d9:f0:af:98:b9:
94:a9:ed:1b:57:10:9e:31:b4:db:62:ec:d8:a9:e6:23:6f:af:
7b:c9:76:dd:76:14:80:2a:a6:a4:c9:72:b4:21:57:b5:f6:45:
57:33:ac:ff:bf:6d:9f:9d:bc:81:77:54:64:33:71:8a:95:26:
12:2f:03:32:33:62:55:b2:49:62:3d:21:64:64:fa:83:e1:aa:
0c:1c:05:45:b7:42:89:81:6c:d4:dd:4a:24:f1:61:28:21:22:
d4:61:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:42 2024 by rpki-client on console.sobornost.net