Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
File: N-A1JLWEfb6tAP43jEar0MpwRfg.cer (raw, json)
Hash identifier: 8Wj2C59wkTclhSsTN753pTX25dkTHDqoJSXP5pGMQ3s=
Subject key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02111C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Oct 2024 20:40:37 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 38242
AS: 133793 -- 133794
IP: 43.251.240.0/22
IP: 103.43.20.0/22
IP: 202.151.36.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135452 (0x2111c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 20:40:37 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:ce:42:1f:04:41:cf:22:8c:a0:d8:88:5b:
ac:06:12:45:bb:65:ab:e2:73:bb:82:95:1f:02:f7:
37:71:67:60:e5:f2:c5:35:8e:01:61:3a:d9:5f:db:
c2:e2:10:9e:f4:3b:6d:80:9b:c5:cc:98:db:c6:ec:
f9:04:16:10:68:75:e6:47:7f:0f:4a:b9:42:93:0a:
e5:6b:f6:b3:56:24:fa:58:fc:de:c1:31:e9:fd:42:
24:cc:1d:d5:a9:8c:76:d0:9f:b4:8a:51:c5:bb:08:
64:74:11:25:3a:75:b9:9d:90:1a:11:d1:7b:3d:89:
f4:93:da:b5:78:25:5d:97:17:a5:fa:eb:8f:63:b2:
9a:e7:b0:6c:bb:23:9e:b4:ae:23:8c:46:b5:5a:36:
50:ab:a9:e4:c5:09:08:20:2e:13:14:fa:0a:b3:b9:
6d:dd:ce:1e:f7:61:71:ef:75:af:cf:5a:27:ce:e9:
0f:76:be:74:7b:64:37:53:f8:1b:0b:ff:1d:1f:0e:
0b:13:53:c7:c0:a7:1b:ed:a3:07:37:bd:96:d1:ea:
04:0f:2a:91:ee:15:ef:14:9a:85:f6:a6:97:51:3f:
e6:70:0c:03:1e:ff:73:cf:c7:a9:d2:07:8c:fa:1d:
97:0d:c6:70:d6:7e:49:5a:a3:fe:3d:a8:e5:9e:06:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38242
133793-133794
sbgp-ipAddrBlock: critical
IPv4:
43.251.240.0/22
103.43.20.0/22
202.151.36.0/22
Signature Algorithm: sha256WithRSAEncryption
75:29:3a:1f:05:34:97:74:8c:16:31:d7:13:2c:67:b3:a9:88:
02:4f:14:ba:4b:07:02:25:d0:dc:b3:3a:a4:5e:97:39:66:37:
01:81:e0:60:de:e0:ee:55:69:2b:fb:21:5d:3d:cd:21:95:aa:
df:92:6b:9c:66:85:1e:c1:c0:ff:a7:3c:43:35:e8:66:8f:20:
39:40:ab:b5:e5:c1:7b:a3:90:6b:3b:56:4b:f9:a8:f6:96:bd:
8c:b3:c9:44:24:45:1a:51:6d:2e:f1:e1:8a:19:8c:75:a9:8a:
45:6d:e9:8c:f1:a9:0e:35:9c:42:64:7d:74:de:0f:38:77:a3:
7d:4e:b6:a6:95:9a:e1:12:f6:da:af:dd:2f:2d:22:9b:17:04:
0d:dd:3a:37:25:e2:4c:a9:32:60:0e:31:a8:34:79:25:32:51:
03:e9:eb:64:02:5e:fb:32:42:c8:da:de:2d:f7:99:59:9a:8c:
61:d3:69:b9:b0:0a:b0:26:1f:cf:82:9b:31:a9:a0:df:ac:0d:
2a:4d:9e:f9:71:cd:aa:0e:dd:69:0c:09:6c:d1:08:50:22:ea:
4b:95:b2:c5:91:00:ed:11:66:36:5f:ef:77:0f:35:09:58:e7:
0b:76:9a:c1:cc:c9:ac:2f:e8:94:8b:7b:0a:f5:41:a2:a3:cc:
a8:5a:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:47 2024 by rpki-client on console.sobornost.net