Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
File: aFlbmOTCezC6ozHOqscmF2fLkus.cer (raw, json)
Hash identifier: 1Gp6pBPYqrTfaFblEsYEmWld3FysvyJaGNgIvfqzTkc=
Subject key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FB0E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Jun 2024 12:48:42 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 24541
AS: 58740
IP: 27.54.128.0/20
IP: 202.164.16.0/21
IP: 203.30.44.0/22
IP: 203.82.208.0/21
IP: 2402:8000::/32
IP: 2402:9f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129806 (0x1fb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 25 12:48:42 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:e6:9d:5b:6f:60:99:13:1e:be:d6:a4:94:
3f:9e:19:88:5f:45:dd:70:d5:34:da:06:6a:6f:6f:
70:c2:ef:cb:f1:58:35:fb:f4:ab:f3:bb:64:f4:e5:
53:04:55:7c:e3:12:30:9f:f2:a0:d3:a0:94:b1:49:
87:19:c5:08:39:a1:ac:18:be:a7:51:67:df:41:7e:
6b:74:e5:25:76:81:7a:30:84:e5:f7:fc:63:cf:8b:
6e:5b:12:ed:be:2d:39:24:0e:19:30:2e:d0:b3:2f:
00:ab:3e:3e:5b:33:84:ef:b2:6e:82:2c:ff:5d:ae:
67:75:1b:c6:9b:75:56:43:82:97:2c:27:9a:e5:4c:
9a:58:97:5b:bd:d7:b7:6e:72:13:96:74:44:7c:98:
c3:de:5a:3b:a0:66:77:58:c6:04:b7:8b:fa:30:e4:
ac:74:4b:7c:ee:6c:db:d8:37:b5:ff:48:35:67:d6:
27:ee:23:21:38:f3:7d:9b:ac:80:b3:83:67:8a:5a:
4b:08:b9:9e:cd:c9:5d:7b:23:67:30:3b:67:b6:84:
d2:e1:fa:55:06:23:a3:ce:93:a6:c8:b6:7b:9e:7c:
d3:1e:86:b6:f1:54:85:a4:31:05:71:15:87:cc:e3:
4b:0f:07:c3:70:77:a4:08:be:a5:b9:0a:04:4a:a5:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24541
58740
sbgp-ipAddrBlock: critical
IPv4:
27.54.128.0/20
202.164.16.0/21
203.30.44.0/22
203.82.208.0/21
IPv6:
2402:8000::/32
2402:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
4d:c3:f4:3d:31:5d:6d:ae:ba:06:60:4f:35:fc:f4:24:07:43:
68:50:45:17:69:75:3d:a4:fc:00:8e:a4:30:e1:42:76:2e:3e:
83:cd:87:e0:b2:f4:57:e6:da:fe:1d:40:93:08:30:7b:ef:ba:
13:d8:29:4c:33:80:83:df:f1:5c:78:9b:4a:66:b8:1e:14:2f:
07:c1:dd:53:9e:83:00:6e:ca:b5:7b:44:ee:31:f2:67:d0:ae:
f3:92:c7:26:8b:f4:d8:93:97:09:c8:45:b7:f2:76:f2:cc:8b:
6f:f8:43:70:ac:8e:0e:30:f0:53:32:bc:a2:87:b9:ab:8d:70:
2d:91:b7:ed:f6:76:64:4d:38:c3:bd:9f:b5:f2:68:f6:2f:60:
d9:e7:b9:5c:1c:91:cc:be:91:17:5d:07:79:1f:5d:bd:65:3e:
33:bf:a3:d7:1e:9f:02:5a:17:4f:24:9b:1f:08:d3:bc:06:6b:
28:a6:6b:0a:7b:c0:7a:8d:e1:8a:cf:d9:9d:5f:c8:e9:73:6b:
88:75:e2:c3:6f:78:60:d9:7c:fa:71:d0:c8:e1:21:fc:96:8c:
d7:96:6c:9a:fc:38:e1:b2:d3:1a:f9:fe:c4:d6:1a:48:25:30:
84:56:b8:3c:66:35:16:f2:6a:c6:c6:15:67:e3:af:08:b0:e1:
74:2c:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:56 2024 by rpki-client on console.sobornost.net