Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
File: WR4siXPGPwtQ7voTRGvLFexS5R8.cer (raw, json)
Hash identifier: I2jUWOmWGhIbr1grbbrxqAecXgtHKJml/DeDMbu82CY=
Subject key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0206AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Aug 2024 14:45:34 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 138351
AS: 151493
IP: 103.233.178.0/23
IP: 2001:df3:9a40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132780 (0x206ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 14 14:45:34 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:62:ae:8e:65:15:da:90:8c:ed:96:bc:60:
7c:3b:e2:6a:a6:84:ba:2a:52:82:82:a1:bb:a0:b1:
c4:c7:68:46:00:1d:03:20:85:f4:4e:32:ce:31:3b:
50:52:2c:b4:03:0a:ea:d3:75:20:7a:72:65:20:c0:
df:86:d1:e3:bf:0a:ff:26:62:84:d2:c5:3e:39:1f:
6c:18:bb:ff:b4:e3:ea:f0:be:8f:d6:d2:55:44:bb:
ec:3d:db:03:a3:d6:4d:7c:a5:bf:88:2b:f8:8d:01:
81:d2:db:06:da:27:00:18:80:35:80:e9:33:91:49:
c1:8b:ec:8f:be:e2:a8:c9:c5:ac:30:ae:c2:1d:23:
79:00:57:40:c8:a8:1f:a4:80:03:5a:0f:22:6b:54:
ca:b7:e7:fd:fc:23:8c:a9:11:50:b1:a7:3e:62:5c:
af:6b:66:7d:a1:ce:65:44:b3:50:19:56:de:7f:58:
d5:65:81:de:aa:aa:ed:40:6d:37:56:99:b7:2a:b6:
9f:1b:ea:34:22:2b:f4:aa:9d:5f:71:3f:92:85:39:
71:73:48:d6:b4:9a:9f:ea:a8:45:87:37:37:b5:ea:
e1:62:78:81:32:8e:0a:28:9f:a3:00:8f:6c:64:61:
da:fe:12:b9:7c:14:24:31:51:ad:36:ca:76:84:27:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138351
151493
sbgp-ipAddrBlock: critical
IPv4:
103.233.178.0/23
IPv6:
2001:df3:9a40::/48
Signature Algorithm: sha256WithRSAEncryption
49:c4:44:e4:b8:77:fc:f1:7c:bd:ef:3c:3a:e8:ad:95:9f:b0:
81:0a:db:91:4e:69:45:fb:ba:76:fb:0c:52:7a:a5:7e:10:aa:
c7:62:42:40:56:07:a8:fc:bd:56:09:ab:4c:f3:08:31:4e:b5:
53:02:f5:2d:b4:8e:55:fe:b4:63:cf:6c:c6:f4:f0:a7:82:1e:
61:45:29:be:ea:50:18:d3:b1:0a:ac:21:ca:33:5c:e8:d2:54:
c8:20:f2:8e:ff:f4:6b:fa:c8:94:da:e0:3b:75:e8:72:c2:9b:
f4:d1:91:f9:4f:03:3b:14:7d:54:e3:a4:71:a3:9f:70:7c:68:
5d:73:c6:1f:8f:1c:00:90:be:10:0b:50:41:64:4e:13:6f:e0:
07:61:3b:cf:fb:ed:b7:13:ee:a0:8b:36:d7:7a:a5:78:b4:d6:
0b:87:b9:68:ce:b3:94:a5:e1:b9:92:91:3c:70:7b:23:12:22:
bf:37:b1:36:39:e7:21:68:f3:f3:45:b2:3e:49:9d:b9:91:fd:
49:3a:fe:40:5a:e1:7d:2a:0d:5a:fa:8f:a0:1f:df:1e:b9:6c:
77:1c:e2:51:53:a0:aa:04:01:c2:65:48:42:4c:b8:84:9d:3e:
68:9d:eb:31:67:0f:86:9d:75:d1:f1:74:f8:b8:59:08:24:54:
96:dc:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:53 2024 by rpki-client on console.sobornost.net