Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
File: stpsovF-3e60xFAzYfTYgigLyog.cer (raw, json)
Hash identifier: zXYKjaRs1p6VvLx3/nJ+B8uIlAsU6dTlxrL4vFUk9QM=
Subject key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FD14
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jul 2024 13:14:15 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 135565
IP: 103.66.37.0/24
IP: 103.76.156.0/24
IP: 103.92.131.0/24
IP: 2001:df0:fd00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130324 (0x1fd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 13:14:15 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:93:4c:24:05:98:a3:b8:62:57:6d:0a:55:
9c:7f:dd:d9:61:04:91:46:21:c2:81:c7:15:ca:02:
05:89:62:42:c7:1d:4d:0f:1e:34:11:db:27:eb:10:
86:d0:6f:cb:cc:2d:cf:4e:a8:8f:53:13:b9:9e:28:
bd:1d:f8:84:f4:be:c8:f7:c9:c1:3a:06:d2:c2:8a:
60:9a:6c:ba:e1:2a:70:dd:84:14:29:be:dc:6e:91:
4f:df:a5:94:5e:89:ca:e1:5a:cf:1c:64:8d:73:48:
9c:68:f8:7d:4d:27:fc:ec:f5:76:a6:83:ba:d7:be:
73:45:b5:23:64:db:16:37:35:07:79:04:d9:20:ca:
2b:72:68:e6:e2:1d:53:5f:77:4a:fa:60:48:9a:aa:
e9:71:de:1d:90:32:fc:92:23:98:dd:f6:da:c1:17:
02:de:79:77:3d:77:32:d8:03:e0:99:77:ff:70:3c:
19:4b:8a:82:5e:fe:66:5d:90:2a:0b:d1:81:4c:34:
da:d0:f0:ed:8c:0c:97:88:0e:f5:15:7c:13:e2:7f:
ab:19:72:08:fe:38:0b:35:85:8a:17:35:6b:6e:b3:
9f:99:16:78:1b:74:9a:bc:c2:bb:d4:de:22:bb:76:
9d:c4:c5:46:64:3d:8a:6b:75:da:71:b4:79:be:58:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135565
sbgp-ipAddrBlock: critical
IPv4:
103.66.37.0/24
103.76.156.0/24
103.92.131.0/24
IPv6:
2001:df0:fd00::/48
Signature Algorithm: sha256WithRSAEncryption
03:d8:f2:0e:58:92:af:fa:02:27:e7:61:13:7c:67:f6:67:64:
89:ad:1a:90:f2:ad:b9:77:d8:d2:f6:d7:cb:03:d5:15:dd:fb:
db:79:4b:48:fa:9f:6c:e4:b9:3e:ff:8f:f5:91:37:4a:2b:b5:
32:a9:fe:2e:7e:d8:2e:ca:f3:52:d0:13:73:86:87:7e:2d:85:
56:23:55:74:c5:5c:24:80:61:c0:5c:c7:e4:1d:4f:00:ff:1f:
f5:81:58:be:04:d5:0e:1f:ed:23:bd:91:e5:9e:34:41:94:4e:
ca:b7:55:8a:a5:78:4b:0d:27:7f:5a:11:63:48:2b:9f:a7:68:
e6:4e:b1:a4:0d:ad:14:ce:71:f5:5d:4d:3b:ad:51:6d:23:a5:
68:5d:af:bf:2d:83:e7:7a:96:5f:6c:a2:8a:6e:6a:63:e9:dc:
7e:9a:df:08:a7:f8:69:31:fa:eb:c1:d9:fa:d9:96:ee:cb:80:
9c:6a:41:bc:d0:93:a6:c1:54:38:f4:3e:7b:1f:41:2d:14:ea:
ee:e6:c8:14:2c:0c:89:0a:ca:ea:2a:24:f5:0c:30:bf:a8:7c:
a0:e1:53:d7:9a:7b:13:f3:dc:c9:7c:39:69:18:78:4f:68:7c:
9a:1a:56:d6:ea:cf:1d:d4:c1:9c:0f:b5:9b:61:ec:58:d6:3d:
f1:04:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:11 2024 by rpki-client on console.sobornost.net