Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer (raw, json)
Hash identifier: kPCU4LQ5fq9+rU2CR7H3iNvEIWaS4sBBJ87MPwrjYio=
Subject key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F330
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 May 2024 14:05:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 45766
IP: 45.127.48.0/22
IP: 103.40.226.0/23
IP: 103.51.2.0/23
IP: 113.21.228.0/22
IP: 2400:f940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127792 (0x1f330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 22 14:05:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:7a:71:08:98:85:8b:41:08:79:bd:41:d2:
3c:c2:b5:34:a8:ab:a9:95:b9:0c:2b:78:d4:8d:a8:
c7:9e:2d:a6:7b:77:3d:c1:f0:69:7b:33:be:d4:4b:
55:24:47:28:96:c0:bd:c1:3e:76:a4:99:63:82:35:
96:45:3c:1e:05:aa:e9:f8:d6:18:cc:71:8b:eb:69:
2a:b3:f4:b0:84:50:9d:13:3a:f6:53:85:b3:82:9f:
a2:53:66:db:53:c9:59:79:bd:ac:fd:f5:d3:7c:35:
7f:c0:a0:cc:41:f6:59:fc:db:4c:7e:4c:9a:fe:0d:
66:39:d1:e3:13:46:78:45:d5:aa:64:07:ae:3d:b0:
bb:6d:4f:65:27:c3:87:2e:11:1b:ca:e7:82:c9:3d:
8a:c5:42:02:ac:3e:51:47:7a:86:99:5d:f0:dc:29:
38:0d:7d:b5:89:81:7d:2d:83:32:3f:1f:61:36:17:
59:4e:8d:e5:36:35:9d:54:ba:6c:82:e9:7e:9b:9e:
da:8d:63:83:ae:44:5d:7a:08:7e:a1:a3:c6:c3:01:
c1:7f:93:dd:11:85:ce:f7:6d:78:2c:67:03:f7:d7:
0c:de:1c:3d:b2:a2:7f:8a:94:d3:44:14:41:7b:e6:
a5:3a:53:ca:5b:1c:b8:a3:d5:58:58:f9:b9:17:b6:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45766
sbgp-ipAddrBlock: critical
IPv4:
45.127.48.0/22
103.40.226.0/23
103.51.2.0/23
113.21.228.0/22
IPv6:
2400:f940::/32
Signature Algorithm: sha256WithRSAEncryption
87:60:dc:de:7e:1b:f3:51:c7:e3:63:b2:c2:04:bf:06:f2:bd:
f5:fd:3c:49:26:27:20:43:12:cd:3f:6a:6a:64:b7:ba:cf:db:
1d:d8:be:b5:56:67:0c:68:65:ea:36:01:34:f2:9a:77:ef:c4:
95:23:5e:7e:cc:8c:79:28:fb:73:42:84:51:69:73:c9:22:8e:
78:34:66:ab:ce:8f:e0:bc:bb:bf:3b:9d:6a:2b:24:c8:36:b5:
35:bf:d4:87:cb:6b:27:cf:27:6f:ed:ba:f9:d8:1e:3b:3d:43:
44:45:c3:c9:cb:09:e3:6e:82:61:0b:da:c3:a3:22:29:e7:74:
d3:c8:83:1f:13:fd:7f:79:d2:b0:cd:04:f6:b2:42:2e:cd:5c:
b9:0a:d0:f2:93:a6:91:83:78:ce:84:4a:f4:0d:d3:c4:63:e4:
21:2a:e0:b9:84:ab:0d:09:2a:89:f8:04:d0:cc:34:7c:f9:84:
47:af:9b:19:a8:99:a9:b7:7b:5f:67:df:24:76:71:3d:07:2b:
fd:bb:50:1a:35:13:f5:6a:be:67:32:03:1c:25:14:5f:ab:42:
05:e2:f6:e1:89:8c:64:23:e0:99:b6:0c:c7:5c:b2:40:75:3f:
09:df:4a:ae:ad:3a:83:c1:7f:6d:db:1e:e9:b3:c7:2f:3c:60:
e9:e6:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:56 2024 by rpki-client on console.sobornost.net