Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer (raw, json)
Hash identifier: 2y8Uxkzmi9vvh76ZFyxCD7RGa9VUu/81jkPDRsOx7bM=
Subject key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0211E2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Oct 2024 14:59:16 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 132222
IP: 103.112.177.0 -- 103.112.179.255
IP: 2400:8b20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135650 (0x211e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 3 14:59:16 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:a7:53:e9:a2:b6:b0:83:cc:ee:dd:df:a8:
6e:9a:a4:b6:91:ba:3b:cc:0f:32:21:1b:38:63:99:
21:f1:ea:12:7c:f9:51:44:73:6a:fb:76:7d:5f:32:
14:c9:04:ed:24:76:35:46:d0:e9:00:86:a7:54:3b:
62:b7:97:f3:e8:cb:f6:4d:e5:f1:6e:31:d8:b9:fe:
e8:87:d5:1a:e3:7b:5e:b7:b5:e5:96:80:28:51:2e:
52:1f:fe:34:17:28:67:f9:69:8d:04:71:95:d6:3b:
c3:0e:bf:7d:8d:f3:7f:b2:56:63:48:41:ce:47:3d:
0b:61:d0:92:b9:98:b9:69:b0:a1:f9:00:4e:3b:1e:
a5:73:b4:2f:c6:8e:b7:39:33:39:e5:e6:46:24:5b:
73:ca:13:ab:0c:5b:29:88:e3:3b:ab:5d:e6:28:14:
90:be:bf:d6:e6:a2:3a:1d:b9:3f:b2:8b:9f:a6:13:
0a:d0:f4:0d:f7:74:a9:8a:e5:36:15:ad:11:03:86:
cd:74:2f:2e:81:08:3d:7e:40:32:44:e7:48:f9:95:
25:0d:d6:5b:c9:1b:8d:95:3e:36:4d:b0:cb:ef:4d:
fd:ab:eb:ed:52:99:ea:35:4d:8b:5a:e5:ac:f0:be:
53:fa:2e:33:47:3d:61:91:77:4f:60:a0:ab:b6:92:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132222
sbgp-ipAddrBlock: critical
IPv4:
103.112.177.0-103.112.179.255
IPv6:
2400:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
12:65:39:34:fb:c8:75:ec:7d:b0:29:d5:bc:55:f6:dc:f8:3a:
4e:31:47:d6:84:a0:46:18:e1:e3:2a:d3:47:46:58:0e:7e:0e:
13:e4:df:36:b3:69:df:3e:11:01:0a:92:e1:29:23:6b:16:19:
2a:d8:14:52:f2:39:21:7a:b1:eb:a5:4e:c6:11:fa:ff:47:2d:
9f:24:d3:7c:98:17:be:65:d3:59:86:b5:9d:4c:52:b0:f3:c5:
02:e2:1f:79:9d:47:0b:9c:11:61:c0:6b:68:c6:70:ef:cd:b0:
d9:c0:11:cc:d2:42:24:2e:70:98:89:16:51:56:40:e6:77:54:
2a:cd:75:33:c5:91:d2:8f:ec:af:dc:80:b5:2d:9e:c2:06:d2:
75:ea:8d:2b:24:e0:9e:81:ec:bb:54:7d:e1:b4:8e:1e:93:3d:
08:22:1b:58:fd:fa:77:52:13:d4:83:6d:6c:4d:ba:69:56:ed:
e6:59:b3:3d:12:1c:64:64:9f:74:28:ae:9a:00:70:75:72:7a:
91:e3:11:13:bc:8b:ab:ec:38:39:59:f4:1d:7c:5f:7e:08:5a:
d5:fc:22:c5:d5:a3:81:8c:60:dd:23:48:46:4f:44:f0:d7:fd:
26:58:8b:af:c2:bc:01:43:06:06:d6:82:e8:74:16:48:e8:31:
2a:52:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:58 2024 by rpki-client on console.sobornost.net