Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.cer (raw, json)
Hash identifier: Xc6Aonfnfy5Wcb+6a1stbV8WejtNaa/g91whi4RtDv8=
Subject key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02077D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Aug 2024 01:30:20 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 17887
AS: 45667
AS: 58430
AS: 64045
AS: 132842
AS: 139010
IP: 43.247.56.0/22
IP: 103.11.12.0/22
IP: 103.106.8.0/22
IP: 103.213.204.0/22
IP: 202.60.192.0/20
IP: 203.159.72.0/22
IP: 203.159.96.0/19
IP: 2405:6d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132989 (0x2077d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 19 01:30:20 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:ef:15:a3:c1:d7:41:9b:13:54:85:08:c2:
e8:eb:43:70:7a:ff:c3:d7:95:23:37:1c:9e:69:0c:
60:2f:5a:da:ba:af:ac:30:73:cf:fa:84:db:af:0e:
ca:f7:31:fc:13:a8:d4:aa:ab:84:b9:c4:93:a9:51:
5c:7a:42:41:4b:d5:ae:61:83:7b:8b:31:0c:45:6f:
63:0d:71:09:25:89:0e:cc:cc:78:85:70:69:f9:69:
ec:d9:02:ee:b8:24:b2:f7:51:15:dc:ba:ac:11:05:
45:b2:d2:00:63:9a:36:4d:43:92:c2:6a:7b:47:76:
86:9f:80:f4:9c:84:f3:b6:ce:72:85:76:b9:3a:c6:
73:77:12:fc:b2:dc:91:2c:97:62:ba:8d:ba:1c:ca:
5e:84:ec:d2:a8:95:9c:ff:a3:dd:0e:75:8d:92:7b:
2f:e0:bd:07:8a:02:12:0c:fd:49:3f:c9:4f:a1:c2:
ae:80:e9:98:1f:4b:a0:01:5a:9b:4f:6f:bb:3c:4d:
a3:be:0a:6e:1a:a6:3f:11:29:58:14:15:c6:57:fc:
5d:89:d1:d5:c1:0b:e3:62:d7:a4:38:f1:1d:ec:6a:
4e:2d:97:be:f7:4b:b3:0c:4e:d7:8f:6b:87:26:23:
bf:55:fe:cd:41:0c:aa:62:dc:03:c1:3f:61:59:d1:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17887
45667
58430
64045
132842
139010
sbgp-ipAddrBlock: critical
IPv4:
43.247.56.0/22
103.11.12.0/22
103.106.8.0/22
103.213.204.0/22
202.60.192.0/20
203.159.72.0/22
203.159.96.0/19
IPv6:
2405:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
b4:aa:d5:31:64:56:d8:5d:94:d3:ad:85:88:56:59:16:96:d3:
6f:f2:d8:58:81:d6:12:a2:96:6c:fb:6e:69:3d:25:c4:b7:c2:
81:63:c8:43:00:2f:b1:49:7b:8f:f5:4b:c9:35:bf:6b:f2:86:
1b:82:eb:77:8d:79:4e:44:3c:de:84:6c:76:1a:9d:48:10:70:
7a:87:16:27:34:27:41:53:e9:7b:c4:13:2a:11:17:ae:10:33:
aa:d2:49:b9:a3:a1:38:4b:ef:45:ed:82:7e:eb:9d:21:1c:52:
87:b6:17:c3:0c:b9:72:7b:e4:98:35:b9:e2:9d:f9:43:db:a4:
79:35:f7:36:96:b4:76:10:93:83:69:03:b7:67:77:5a:71:9f:
8b:7b:38:ba:8e:c3:28:7f:e7:3e:33:c9:c3:6a:96:e3:19:51:
58:2e:fc:2b:3b:60:89:99:b5:b4:02:6e:ae:c2:1a:b8:a9:d4:
2f:8f:0e:b6:91:7e:c3:bc:2c:35:ba:a0:c9:e7:8f:6a:6b:8b:
32:2f:cf:f9:71:e4:a6:5b:c5:9d:ef:92:dc:6b:58:fe:f8:e5:
de:cb:a7:ba:f2:33:c2:64:80:78:e8:de:e6:76:60:16:8c:81:
9f:2a:8c:8e:86:ce:34:71:ae:ea:9b:6a:50:c4:12:8d:00:29:
81:bd:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:44 2024 by rpki-client on console.sobornost.net