Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
File: UyQGWmE9LRB4F5xiFjcczGp3UHo.cer (raw, json)
Hash identifier: YvN89QOBhSKlyQkQUE0frDaQ56Dh0/wkOiYUxShgSIU=
Subject key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F6D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Jun 2024 09:22:41 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 43.247.60.0/22
IP: 103.3.240.0/22
IP: 202.123.128.0/19
IP: 2401:58c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128727 (0x1f6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 3 09:22:41 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:9a:ca:26:13:10:a6:04:cb:75:c8:4a:cd:
40:25:56:18:fd:6f:17:af:cb:1c:52:4b:e6:7c:4c:
90:2d:70:33:bd:c2:0c:de:c3:cf:01:3e:2d:47:f1:
9c:29:21:0d:8c:aa:33:dc:50:e5:4c:bb:22:fd:15:
66:eb:82:85:f9:5b:a7:b6:6a:a9:87:99:16:f6:d4:
74:95:0b:ec:cf:22:53:8d:b5:45:54:ea:a0:7b:50:
f6:41:13:cc:ea:4f:4e:e6:54:25:e0:78:a2:4a:f9:
7a:f6:a5:b1:6f:82:37:0b:2a:84:64:60:9c:f1:0f:
4f:4b:4f:b6:a6:0b:1a:fb:3a:5a:3f:06:9a:0b:cf:
aa:3b:26:e8:ff:29:10:00:cd:e9:43:b4:13:da:e2:
db:4e:ec:05:f8:f2:e8:00:f7:46:cc:5c:7c:55:29:
f6:9c:79:f5:c1:d9:bc:67:49:5c:f9:11:1e:79:5b:
39:d5:c1:71:84:35:58:93:a5:bd:de:82:bf:ce:05:
a3:e4:0b:1f:6f:6b:9c:7b:a7:dc:12:81:d0:e3:7a:
7f:33:93:ea:3b:bc:d2:97:e5:d8:19:7a:6f:2d:5a:
b9:c7:60:6c:2a:51:b4:9d:d5:23:e3:7a:5f:4a:fc:
3c:09:c0:64:4c:b3:8d:b6:02:7f:77:e7:f9:91:83:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.60.0/22
103.3.240.0/22
202.123.128.0/19
IPv6:
2401:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:4e:ee:68:7c:81:68:40:6c:9a:18:70:72:6a:da:be:b5:75:
3a:7f:17:d9:eb:3c:44:27:43:a7:c3:25:3c:74:ca:4f:da:ed:
73:f4:08:e4:4e:26:72:14:e7:58:94:2b:a9:10:51:79:bc:be:
47:b5:d6:93:52:a3:a1:4d:aa:0b:d6:52:1a:33:bd:0c:0c:72:
c3:75:ad:13:06:35:7e:8b:88:b3:13:68:0d:e1:7f:98:bb:1b:
6d:27:a1:b1:26:22:18:c7:b3:6d:0a:d1:42:e9:21:09:7c:78:
4d:dd:b3:38:91:1b:f4:87:96:c2:9a:7c:a1:6d:88:94:ff:6b:
1c:73:25:3b:41:d5:1d:d5:4f:00:02:ca:96:f7:f9:8a:03:24:
3d:c2:bc:59:4d:93:9d:4a:e3:36:12:bc:c7:ba:cb:73:e0:9d:
33:0d:53:78:e5:78:dd:77:70:eb:23:a0:3d:b2:ad:ea:59:e6:
3b:db:cf:7d:19:45:3c:2d:a6:4d:cb:39:a1:5a:1d:c0:1a:cf:
07:6c:23:d9:33:f5:34:ec:76:b2:36:d0:ea:77:2e:90:8a:4e:
20:b5:71:b9:59:54:80:cd:e4:40:92:b8:bb:8c:73:68:c1:4d:
e9:d8:da:35:99:00:d9:79:06:fd:58:2c:4a:52:d4:91:37:aa:
a8:24:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:52 2024 by rpki-client on console.sobornost.net