Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
File: p6JnToSEYDkgd5o1LFWATlU2UBQ.cer (raw, json)
Hash identifier: Hl8XgzSXk0wvejoY8f5dcf5Vrm1hmiWXnPp+DRONYd0=
Subject key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020C84
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 08 Sep 2024 15:44:15 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 58983
IP: 45.119.160.0/22
IP: 103.240.176.0/22
IP: 2400:5880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134276 (0x20c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 8 15:44:15 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:15:c7:da:6c:7c:b9:83:bf:c0:9b:ae:f9:
7b:4b:81:71:42:19:f4:c2:be:7a:1d:f8:c9:17:4a:
eb:6d:eb:4a:d5:ad:98:0d:0b:24:d4:6a:e0:c9:19:
e7:0d:4a:fc:15:8c:56:e7:19:d8:f7:e0:a0:ec:c9:
28:50:97:bb:95:9f:3d:04:d4:26:03:f6:05:1c:9c:
59:de:52:b0:03:6a:2d:55:da:75:6c:ac:47:74:49:
bc:b6:0c:f2:aa:98:b3:1a:57:ee:2c:84:05:0f:fe:
9b:b6:74:a4:f9:90:35:18:22:aa:fb:f6:99:15:6f:
d3:68:14:79:47:8a:da:46:5f:e8:ff:6c:f2:e0:2d:
a0:06:5f:bd:b9:dc:41:d0:97:b9:bf:f1:b2:3f:3f:
82:d8:ec:e4:91:03:55:09:0f:25:7a:5d:62:8c:c4:
46:4e:c7:f5:bf:eb:94:68:47:a9:1a:c5:2f:07:08:
00:54:21:7f:6a:e0:ba:8a:35:a8:41:00:f5:65:ff:
f6:5e:96:0b:c7:ee:51:9b:cb:c6:29:ec:f0:33:ae:
77:65:91:43:65:2e:84:57:36:86:8e:bd:6a:53:f1:
26:71:61:b0:40:dd:0c:8e:05:cc:1e:16:ad:e5:10:
36:8e:49:12:36:18:22:c6:39:26:00:0a:51:eb:6f:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58983
sbgp-ipAddrBlock: critical
IPv4:
45.119.160.0/22
103.240.176.0/22
IPv6:
2400:5880::/32
Signature Algorithm: sha256WithRSAEncryption
00:b3:b6:91:3c:79:52:dc:3c:63:08:05:c5:b2:0c:76:65:4f:
e0:cd:e2:e1:ef:2a:79:c9:00:b9:6e:0c:35:a0:22:f6:66:11:
20:93:e5:f0:5c:eb:05:5d:87:8a:94:e4:40:de:49:cb:dc:07:
a1:97:09:cc:63:b4:df:a9:08:9b:40:3d:74:8e:75:d5:f5:6b:
6d:06:e6:38:6d:a0:8f:fa:20:c6:64:aa:85:b5:7e:9f:0c:ab:
42:6f:cd:6b:55:cf:a2:93:c7:c4:ef:77:4e:2c:da:11:25:5e:
34:f8:07:96:09:d2:d9:55:34:33:67:3a:2d:2f:45:1b:0d:84:
ae:8b:c9:70:97:d4:00:49:e7:83:e3:80:0d:73:b0:47:df:e0:
c0:88:7a:c4:af:4f:25:f6:97:81:d1:c5:cb:82:c7:95:92:d7:
e8:ea:9e:32:4e:eb:c4:d1:db:74:57:29:95:f6:0f:84:40:68:
31:e1:f5:ba:d8:01:77:11:fe:66:c1:ae:e6:ff:74:a2:f9:9b:
8b:b6:17:d3:aa:b5:cd:09:18:d9:72:8d:f8:21:50:4f:c0:5b:
5e:c3:19:e3:7c:6a:43:15:3c:69:b8:78:bf:e6:88:82:f5:f0:
48:a5:26:0a:c5:e2:41:0a:a6:b7:b6:9c:e9:c3:f6:a2:66:f1:
62:ba:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:08 2024 by rpki-client on console.sobornost.net