Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer
File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer (raw, json)
Hash identifier: 0z9OtED8s9BY6emEKopBOJIH8vL3q1nCuKi2uCcUkAM=
Subject key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02096E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Aug 2024 12:44:36 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 55769
IP: 45.250.236.0/22
IP: 103.242.56.0/22
IP: 144.48.136.0/22
IP: 144.48.228.0/22
IP: 157.119.96.0/22
IP: 202.53.144.0/22
IP: 2405:e280::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133486 (0x2096e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 28 12:44:36 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:5a:2e:3c:73:50:c3:e6:76:5a:5d:93:4d:
b1:a5:ba:ec:f9:dd:4e:73:56:a1:e5:49:3c:d5:b1:
d2:1f:9d:b0:21:40:24:d8:11:6f:e1:2c:a2:79:b0:
e0:2d:a6:a7:75:97:31:90:d9:85:7b:ba:37:1b:19:
de:bc:f7:3f:41:9b:14:da:3e:d4:ee:3f:1a:96:27:
95:79:14:ce:f3:a5:b5:fa:26:7d:62:fe:85:fa:9f:
2d:30:be:fc:2a:82:f3:2a:6b:f4:4b:e0:ac:2d:5b:
6d:87:c0:16:14:a1:3b:90:14:4d:c1:f6:fb:77:f8:
27:a4:5c:b1:da:12:3a:cf:5b:37:07:0c:ee:72:8c:
3e:38:96:7c:b4:20:1f:6e:4c:03:70:18:63:70:be:
3f:e0:db:04:ef:60:68:d2:4a:36:6b:16:cd:3c:3c:
5d:8d:ab:65:e7:49:7a:ab:f6:1e:9f:6a:66:8e:dc:
6f:b7:a6:e1:c4:96:51:a7:26:d9:dd:91:a0:1f:03:
03:64:7f:c7:3a:e4:0f:e5:98:48:c7:8b:e6:32:da:
33:d4:5c:39:88:8c:76:87:17:1d:00:98:ae:e9:4c:
b9:33:53:de:2c:45:6b:93:95:f5:ba:64:8f:f4:d4:
21:bf:66:e1:1d:dd:8a:3f:9b:f2:ff:71:8c:23:2c:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55769
sbgp-ipAddrBlock: critical
IPv4:
45.250.236.0/22
103.242.56.0/22
144.48.136.0/22
144.48.228.0/22
157.119.96.0/22
202.53.144.0/22
IPv6:
2405:e280::/32
Signature Algorithm: sha256WithRSAEncryption
09:20:44:68:a7:16:54:b9:b6:8c:9c:b6:b6:5b:45:56:6e:da:
79:83:fa:96:89:33:1d:28:37:1b:9e:6a:02:7d:28:8e:58:40:
a7:47:ea:01:c0:ac:c7:95:68:6a:70:60:51:49:27:76:07:b7:
60:7d:7f:78:b9:a3:a9:58:78:21:6c:55:18:ac:71:06:f9:99:
ce:32:f3:dd:e8:70:d0:cb:17:7b:e9:e1:70:e0:9b:fa:f7:f9:
3a:3f:a8:7e:67:71:df:1a:08:a5:a2:24:e4:78:a7:f8:6c:22:
cf:1d:3a:84:64:d5:e0:7e:5d:08:6c:ad:c7:7b:1e:9e:ab:11:
b5:d5:9c:03:d5:f6:0d:45:ab:bf:b1:bd:ba:64:3d:57:8a:b3:
d0:02:01:60:d7:81:0b:73:ca:58:9d:82:f8:0a:0f:6e:ba:57:
b6:73:8d:31:3f:ce:30:cf:0f:9b:6a:aa:71:8d:78:53:1a:39:
92:98:90:82:0f:63:c9:79:04:6a:7f:33:31:fe:5d:7d:3a:27:
52:99:33:99:48:1b:31:ba:37:8d:e4:24:de:38:89:e5:ce:bd:
fb:fd:de:d0:b3:ec:df:4b:b8:75:ad:bf:2c:09:2e:bc:ee:62:
b3:64:db:fe:52:3d:70:48:9d:6c:4e:86:02:0c:f7:c5:c5:3b:
8e:c3:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:02 2024 by rpki-client on console.sobornost.net