Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer
File: KOoVV7meKxJ1Uc00DDqvTAphAGs.cer (raw, json)
Hash identifier: 7B6txO6O4bDODnSHwlWZYEkkIsGOnBp5aj5BIomG4qw=
Subject key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F343
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 May 2024 17:26:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 149768
IP: 103.186.6.0/23
IP: 2400:6be0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127811 (0x1f343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 22 17:26:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:77:d1:93:40:69:cf:9d:27:ec:38:33:e4:
86:92:67:f1:16:51:02:07:56:f2:e1:65:29:70:c8:
df:16:d0:82:d4:48:40:f2:fa:55:3d:40:4c:35:63:
7a:ef:97:92:51:92:f8:4f:e9:5b:a6:76:25:53:f6:
11:70:5a:01:ff:db:34:a5:ec:ad:57:e4:13:57:ff:
39:b2:22:04:0c:c4:6b:49:44:8e:4a:57:1e:f4:4e:
08:01:d3:74:f7:19:fa:2d:3e:36:7b:e9:c4:2f:f0:
28:cd:3f:6e:38:e3:11:68:d6:87:e5:3d:05:88:69:
5a:a3:e4:39:a4:b8:e0:49:17:76:fa:fd:03:f7:a6:
b3:7e:33:16:4a:bd:87:a0:ec:ea:98:4b:8b:54:80:
26:6e:a3:b8:d2:30:c4:55:64:c0:3b:c4:f0:3a:3c:
7f:ea:f2:6d:d1:82:ea:5f:7d:f0:61:c4:98:b3:94:
8d:88:85:77:cb:bc:5b:b1:2a:e3:35:a9:ba:64:10:
a5:90:65:0c:fb:ea:5f:3a:9b:65:10:92:f1:db:d3:
c5:88:21:4d:33:b2:e8:cb:06:09:bd:6a:4b:9c:a3:
60:79:c5:ae:51:ed:1f:3d:c1:9c:c2:f6:47:9e:99:
80:f0:6b:7d:b8:9a:96:e8:e3:1e:17:c8:57:2c:0d:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149768
sbgp-ipAddrBlock: critical
IPv4:
103.186.6.0/23
IPv6:
2400:6be0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:f5:1c:d2:cd:0c:e1:ed:86:c7:db:59:41:b9:c2:2a:e8:f0:
04:3d:52:3c:56:af:37:b5:22:8f:c6:34:44:68:fb:64:e5:4b:
ab:e9:e7:9d:26:b4:5f:e7:ad:d8:82:8d:de:7b:11:7c:d0:fe:
ee:f5:73:44:b0:0b:e0:98:70:8c:be:b6:1f:7f:b7:81:46:cc:
b6:16:d6:23:b7:cd:cc:65:0e:c7:fc:c5:6b:a0:dc:e9:af:58:
e0:9c:b8:10:f4:bb:26:ff:d4:c1:1d:1e:c9:53:72:36:c2:67:
c2:62:fa:24:75:1e:c1:9d:6d:b6:47:99:c7:45:25:d0:28:63:
14:45:06:01:10:dd:0f:0e:d7:c9:e2:39:0c:fb:40:32:ec:b3:
80:d6:7f:c9:2f:c1:4b:31:f5:75:cf:17:bf:1b:6e:dc:bd:9d:
42:f4:c2:46:39:1b:8e:d5:0c:db:49:df:68:ec:7a:bb:fa:fb:
55:a1:25:83:4f:18:55:08:04:21:c7:48:82:14:f7:3c:1a:e1:
6e:fe:ee:a5:c5:35:94:58:5d:72:a5:c4:5c:e3:06:0e:f5:9e:
09:13:92:12:be:cc:7f:17:2c:f4:2e:80:fb:b9:fe:6e:f5:60:
1b:b8:ac:b4:dd:32:ed:1d:28:77:2e:17:e8:16:a0:5f:de:1b:
71:20:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:45 2024 by rpki-client on console.sobornost.net