Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cn1G1OfHecpnYSxgtGVS68IZkPs.cer
File: cn1G1OfHecpnYSxgtGVS68IZkPs.cer (raw, json)
Hash identifier: S3eBxxlPZ+6/wn9II9ClJqZ2uGA+I89sUkA1NhFRqOM=
Subject key identifier: 72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020E05
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Sep 2024 19:22:35 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 132146
IP: 27.123.228.0/22
IP: 103.71.12.0/22
IP: 2001:df3:d200::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134661 (0x20e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 17 19:22:35 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91D4D97/serialNumber=727D46D4E7C779CA67612C60B46552EBC21990FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:91:43:6f:7f:91:6f:fa:58:2b:63:8b:36:
fe:60:b5:21:cc:34:0c:42:aa:44:d2:a8:af:d7:2c:
a6:34:da:fd:8c:6e:a7:15:65:fc:8c:33:61:f6:86:
5d:3b:0b:3f:d8:6d:8c:49:60:b0:de:a6:c9:00:21:
3e:ce:a9:ac:58:97:13:9e:86:20:89:77:31:a0:fc:
58:aa:56:93:10:a5:51:e0:d8:ca:7c:2e:64:01:da:
7c:87:54:1e:a6:b4:94:8a:a9:26:6d:42:f2:79:61:
4b:62:ae:14:65:0f:38:78:34:72:05:63:e6:9e:1a:
0d:57:75:e5:04:9c:f0:70:a3:08:b8:01:5a:7f:20:
b1:42:68:a4:50:b9:0c:85:e1:d7:2b:e8:9f:ab:8c:
fb:83:04:a3:c3:c0:d8:a8:c8:1b:13:52:6f:ff:6f:
5e:9b:f4:50:45:ce:c0:d4:7a:05:a0:22:d0:16:26:
98:4d:d9:48:0e:5c:8a:05:99:86:24:76:53:9b:59:
71:f2:c4:1a:df:8b:f3:26:d7:8e:17:c4:99:e8:a9:
1b:e1:8b:3b:dd:fe:c9:2e:25:ef:f5:a7:00:b3:a3:
24:12:fe:99:6b:75:0e:92:87:77:7f:be:c5:43:71:
91:2a:b2:e7:a3:5b:b8:05:cc:3e:bc:ab:a5:12:58:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7D:46:D4:E7:C7:79:CA:67:61:2C:60:B4:65:52:EB:C2:19:90:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4D97/1F6146E0567811EC922A3567C4F9AE02/cn1G1OfHecpnYSxgtGVS68IZkPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132146
sbgp-ipAddrBlock: critical
IPv4:
27.123.228.0/22
103.71.12.0/22
IPv6:
2001:df3:d200::/48
Signature Algorithm: sha256WithRSAEncryption
80:8e:05:c4:69:c6:5c:31:51:16:47:89:ea:82:88:b0:c1:e6:
5f:89:10:a2:0e:72:8e:86:be:b1:51:53:96:4b:72:e4:cd:a2:
bc:69:1f:2f:17:fd:c8:93:cb:1a:0a:5a:68:07:d2:eb:7e:79:
e4:f4:45:87:18:a7:51:d8:f2:f3:f9:e8:59:8c:e2:87:57:a8:
96:6f:e0:c6:a0:5c:cd:9e:f6:a7:ab:17:03:05:0c:02:64:54:
e9:92:3e:f8:9d:e1:a7:05:42:1e:ea:3c:31:31:51:27:a9:81:
04:2c:c2:39:9a:a6:dc:2b:f2:59:c3:6e:36:a6:5e:ff:e4:fe:
a0:4a:b9:ed:e0:96:7b:a7:54:f2:97:b3:d7:ed:07:b9:fe:76:
32:39:fb:0f:9f:93:aa:65:d2:ca:d3:f9:07:0e:3b:24:1f:46:
eb:14:28:9f:5f:d0:d2:04:1b:45:fe:ec:33:66:1e:aa:8e:c4:
62:35:9d:70:d5:6a:e0:49:db:01:0c:98:9f:c0:f3:38:c5:3c:
75:d7:55:49:ee:6c:24:b4:c9:9f:09:1a:a6:31:b9:bb:ba:4b:
f9:ae:f8:bb:f5:9d:97:fd:ca:99:be:5e:ac:f9:74:70:b4:cc:
2e:bc:f3:aa:c4:00:00:57:d8:74:f4:bf:73:81:18:33:dc:54:
a9:dc:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:58 2024 by rpki-client on console.sobornost.net