Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
File: jUEzbLXQr_8QKCFtlTS7fgLD54U.cer (raw, json)
Hash identifier: 0XJXbHNFbHD6MFvWZsJqa0gkXSJNxZjx17fSjPUS6lU=
Subject key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F99F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Jun 2024 20:04:01 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 140633
IP: 103.151.150.0/23
IP: 2001:df3:c680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129439 (0x1f99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 17 20:04:01 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:93:f6:e8:32:19:2d:a8:13:ba:fb:29:da:
16:94:bd:2d:76:66:45:c5:b2:b9:b2:bc:d3:4f:af:
63:ee:a6:41:3b:53:65:16:fb:63:14:71:2b:c3:b4:
5e:e7:63:07:5d:c5:20:c4:2f:18:29:39:73:3b:8b:
90:85:6f:89:04:af:b5:96:95:a4:3d:79:cf:df:1e:
49:78:70:54:e5:28:1e:ed:11:c3:c5:9b:7e:9b:37:
d0:2b:6d:f6:2f:40:88:6b:7b:18:0c:39:ed:52:0e:
42:9e:cd:bd:42:05:83:c6:64:1d:1d:f2:a4:54:38:
9d:ba:b8:5a:90:78:e3:62:03:dc:52:f4:b9:aa:27:
bd:a8:56:68:7f:8e:d9:4e:8f:9b:bf:e9:ef:e7:0f:
46:a2:07:6f:e4:87:17:7d:a4:05:60:3a:01:01:d8:
ba:f4:69:1b:0f:fa:bd:7a:0b:26:9a:bc:92:89:f2:
05:be:80:e9:9d:48:45:4a:8d:93:c9:cf:19:0f:67:
e6:b4:18:37:0a:08:96:ee:ae:06:6e:8f:c2:11:d8:
0c:82:45:2e:87:22:bf:05:90:93:98:1d:f6:40:a6:
c0:54:88:d9:b1:16:07:64:82:8b:33:c9:58:18:00:
88:31:42:c3:ec:a2:56:61:db:51:5b:f7:81:bf:42:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140633
sbgp-ipAddrBlock: critical
IPv4:
103.151.150.0/23
IPv6:
2001:df3:c680::/48
Signature Algorithm: sha256WithRSAEncryption
b0:3c:18:10:06:8b:05:ce:e8:90:de:0a:8e:df:f3:6c:a8:54:
c9:4f:4d:22:af:df:78:b7:9f:31:a0:73:75:b2:3b:65:44:b7:
ce:55:d4:02:34:fa:98:74:95:75:dc:69:7c:64:fd:f5:1c:1f:
9c:64:36:5a:4f:08:cd:bf:e3:64:14:1e:fb:da:a1:26:23:5c:
2f:5b:ec:00:a7:e3:00:8c:08:91:41:e2:27:6c:96:6f:9f:c6:
02:2a:b5:62:83:69:e6:93:c6:9a:dc:bc:81:af:ef:24:4b:9c:
72:05:03:6a:66:7c:af:6d:7a:ea:0f:98:f9:b5:5a:fe:77:72:
de:ab:8d:ab:cd:1a:86:53:28:10:f9:78:cc:8d:be:00:6d:d6:
54:34:13:cb:c2:08:4a:c7:55:3f:ba:d7:2a:a2:30:eb:e5:df:
b6:15:c2:94:39:49:0b:d1:d6:0e:28:29:66:00:cf:ff:56:ed:
a0:80:27:43:d3:69:5f:04:78:8b:91:a0:69:8a:61:72:94:d2:
41:fe:f9:65:28:f6:ee:8b:28:d0:b1:71:8d:be:bd:c3:bf:a4:
ce:86:e7:62:5b:9e:5d:07:bb:d9:6b:06:6e:b0:76:18:1d:a2:
44:27:24:59:3a:60:70:df:8c:dd:df:c8:64:8e:95:ca:e9:dc:
e3:d5:61:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:04 2024 by rpki-client on console.sobornost.net