Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer (raw, json)
Hash identifier: lkG0cZe+o/NTtz7eL3z7EyE1zm0oa2pCmVgTtgL9A0A=
Subject key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02051E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Aug 2024 20:00:48 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 38071
IP: 58.147.168.0/21
IP: 223.27.80.0/20
IP: 2401:7b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132382 (0x2051e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 20:00:48 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:70:7b:b9:59:62:af:60:72:17:12:fb:e9:
ff:d3:b2:c0:6f:64:05:69:18:da:f9:75:71:d7:63:
56:10:69:22:16:ba:70:a6:50:4f:62:35:b0:28:3e:
fc:47:67:e1:1d:f7:da:aa:f0:52:c5:dd:e4:4f:1c:
c6:72:58:52:c1:77:63:d3:49:a4:04:38:25:5b:a5:
82:f4:dc:fa:3e:98:a1:ab:95:7d:c1:c8:92:69:57:
a8:d8:ad:ea:03:18:d7:21:d4:dc:2a:1f:15:95:82:
7d:b1:40:cb:40:10:3f:ba:2c:01:98:28:db:27:27:
7b:e7:9b:77:73:f4:6e:fe:d0:b8:cf:35:ef:68:d5:
c5:1d:de:9f:1e:18:cc:37:0b:bc:cb:9f:db:ee:eb:
e5:76:eb:40:28:d2:ae:1b:5d:be:82:00:f8:52:06:
da:f8:f3:cb:b6:62:f7:4f:49:1b:fa:62:18:56:1b:
bb:b2:c4:fa:ab:79:70:bd:4e:29:48:5c:c7:17:7b:
c7:cd:fa:b7:97:09:b2:92:16:c9:65:98:11:57:ca:
49:9e:e7:fa:89:cc:49:b9:42:be:67:c8:e2:91:4a:
40:7e:70:89:a3:fc:40:71:42:ae:9f:74:f5:a7:bf:
5f:5a:c1:08:7a:ca:e6:4c:94:47:ae:ff:c2:d9:fe:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38071
sbgp-ipAddrBlock: critical
IPv4:
58.147.168.0/21
223.27.80.0/20
IPv6:
2401:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
ae:31:64:c2:8e:b3:30:7a:f4:92:48:48:bb:ff:04:3e:20:e4:
c6:df:8b:ec:73:fe:d1:db:6f:09:f0:1f:df:90:67:9a:6d:f1:
ee:c2:02:d7:31:36:52:13:66:d5:78:a7:b9:a2:35:7f:b6:31:
7c:f2:e3:c2:46:79:39:99:bc:d9:10:09:4a:67:79:8b:4a:9c:
19:ca:01:80:0b:ee:a9:94:da:5e:40:2f:47:18:d6:0b:c7:c9:
a3:ee:4e:e4:33:20:5b:4a:62:14:8b:4b:6d:88:00:47:36:c5:
ce:3e:cc:d2:8f:00:a0:fa:f8:53:09:7c:cb:36:53:a6:75:51:
6b:54:64:92:33:03:26:b1:1a:3b:61:22:d9:c4:f7:d7:15:d0:
6c:47:f5:e8:99:9d:3e:40:fa:18:58:43:fa:53:69:98:02:b3:
1a:0b:ec:87:15:46:e9:8e:28:5c:3e:aa:55:d8:d4:4b:7b:0a:
cc:95:b1:3d:b1:a9:ad:6c:ff:ba:6c:44:74:82:20:53:99:88:
4e:cd:ca:45:0d:7a:b2:86:04:52:be:ef:b2:2d:5d:ac:c2:a4:
e9:8a:1f:43:3a:4f:24:3e:0b:50:77:4f:d3:8e:a0:31:bc:19:
57:a9:f8:46:d9:04:30:c3:e3:c0:c2:89:16:d4:de:76:da:fb:
1c:24:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:03 2024 by rpki-client on console.sobornost.net