Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer
File: W6ynah06AONY_-Uxi5AkmIANgmw.cer (raw, json)
Hash identifier: OsPuEslUyZJpKJSB/Hbc6SpDmCf94MJP5mXbgbK7cpI=
Subject key identifier: 5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020CA0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Sep 2024 12:42:37 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 132100
IP: 103.70.216.0/22
IP: 182.255.52.0/22
IP: 2407:780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134304 (0x20ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 9 12:42:37 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A911BFB0/serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:26:8a:83:c8:0b:28:2d:98:37:ef:20:ec:
d0:42:c5:34:89:47:1d:c8:d6:ba:fe:5c:d4:a2:ec:
b4:9a:2e:9c:4e:52:3c:28:ae:17:e0:32:63:a3:da:
e0:ed:0c:09:87:e6:ad:8e:72:be:e3:d0:d6:d6:44:
e6:17:55:ad:ef:32:3b:13:80:a9:09:0e:a1:99:11:
6f:37:b8:99:01:b6:10:14:1c:99:2c:80:ef:6a:51:
ad:35:9b:19:3f:27:76:4d:3b:7a:bc:cb:b5:73:14:
52:f1:6d:81:7f:00:0d:35:64:40:66:e7:17:88:bc:
0f:b5:34:8b:a3:75:51:77:51:a5:66:87:3b:8a:20:
3a:4b:fa:56:aa:f4:ef:9b:e8:ee:d7:3c:d6:ba:6a:
92:62:84:7d:84:25:96:2c:97:15:8a:8b:4c:f0:17:
56:60:75:9c:10:8a:db:00:7d:af:81:f0:7e:2b:52:
d0:23:29:37:38:92:5d:f7:6a:63:37:83:45:a4:87:
8c:a1:04:f0:a8:a5:91:2d:cd:47:6e:68:63:de:92:
15:e9:90:25:b0:02:86:7a:c3:bd:57:7e:d9:7e:ea:
1e:4c:a9:68:30:04:aa:5c:05:33:b7:8d:20:e1:da:
0f:2c:07:95:f6:7c:9c:14:99:41:35:28:76:ed:cb:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132100
sbgp-ipAddrBlock: critical
IPv4:
103.70.216.0/22
182.255.52.0/22
IPv6:
2407:780::/32
Signature Algorithm: sha256WithRSAEncryption
ae:15:fb:5d:31:3e:1e:26:d3:e3:2d:5b:9f:2d:b9:5b:62:2f:
27:87:a5:12:34:93:16:96:83:d4:06:90:75:67:eb:33:09:6c:
80:bf:03:79:0a:a9:c4:eb:9a:3f:9d:d4:4b:22:49:f9:88:a9:
c9:86:dc:88:50:e5:13:3d:3e:4f:a6:72:d5:50:8a:be:6e:34:
85:75:40:a3:cb:13:80:2d:1f:56:15:1d:b1:8f:d2:86:12:75:
d0:0d:92:a4:e8:d2:21:5a:7c:15:89:e5:da:a3:cf:92:86:9c:
12:6c:2e:29:fe:5c:ad:df:de:aa:2a:0f:55:2e:f8:83:b1:70:
01:ff:fc:fe:ac:fe:f6:de:ff:ba:89:60:bd:12:d5:6b:a7:23:
5a:b4:f5:4c:7e:9f:49:6a:e3:e4:ed:77:cb:fc:f5:6f:99:b9:
a8:f5:e3:4b:d1:11:e2:de:fe:26:2d:ef:99:6f:4e:3c:bc:ef:
2b:8c:c0:91:98:7d:09:6d:53:76:53:4b:6c:15:75:e6:d4:2b:
33:51:64:2f:c2:86:a4:8c:ee:ac:b1:1e:7c:02:c7:17:51:27:
8f:56:8a:27:dc:3e:5c:4d:84:89:84:12:17:c2:ad:fe:a1:63:
35:b2:22:af:4d:95:95:f1:4a:5a:db:d8:35:b5:90:5a:aa:a6:
0e:9d:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:53 2024 by rpki-client on console.sobornost.net