Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer (raw, json)
Hash identifier: ArhB2EK4ffm0JgFoRSOjIyUKhRXMGFevWdGIQpShFk0=
Subject key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0201CE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 23 Jul 2024 16:07:27 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 135598
IP: 103.69.128.0/23
IP: 2001:df1:4040::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131534 (0x201ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 16:07:27 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:3c:54:e7:bf:b5:17:fe:9d:34:ef:b7:81:
99:ce:90:53:5e:db:c9:7c:ac:9c:ff:4c:b6:4f:72:
d0:c9:66:b3:73:4a:bf:f7:63:32:76:e7:47:30:76:
69:70:92:0f:47:ee:b1:1f:48:98:6b:b6:18:ec:5f:
ae:6c:30:39:66:e8:d5:f8:9f:a9:02:19:bb:d9:52:
fe:4d:b4:45:ab:ea:75:74:65:65:ef:da:53:69:cd:
89:41:b1:db:c1:7c:e0:84:52:11:1c:73:8d:ae:c1:
3a:1b:86:cd:52:ec:30:a3:0c:0d:2e:9e:0c:b2:ca:
35:1c:db:2d:d2:bb:4d:5b:dd:d4:be:96:00:15:cd:
52:7c:39:f8:6b:4a:9b:73:3f:b7:71:bc:69:19:57:
99:31:45:e2:1c:93:ff:a7:29:7e:2c:12:2d:3d:35:
c0:a9:96:b0:42:81:97:37:9b:24:3a:17:51:d3:85:
f6:e7:94:af:bd:35:da:fd:f4:f0:28:4e:66:c1:df:
d4:0c:0e:c2:47:fd:22:fa:ed:6e:eb:25:b2:f1:0b:
f3:fd:e7:1c:5a:b5:86:02:49:5f:6d:57:a2:e8:f6:
2e:57:30:48:f9:b9:59:29:43:20:3c:86:6c:4d:3f:
1f:1a:48:a8:d8:b3:1f:dc:61:a1:ed:ef:94:ca:52:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135598
sbgp-ipAddrBlock: critical
IPv4:
103.69.128.0/23
IPv6:
2001:df1:4040::/48
Signature Algorithm: sha256WithRSAEncryption
6b:78:12:d9:7d:69:e8:65:d3:44:52:8c:48:1a:56:3d:5f:2c:
dd:11:94:43:31:4d:37:bb:04:99:26:e8:fb:69:22:c3:89:a3:
c9:90:2b:56:b4:ca:df:5b:0b:81:ec:02:08:55:76:a1:d2:d9:
22:71:51:ad:a7:7d:02:60:11:5d:d3:0c:16:9e:fe:c8:3b:f9:
41:44:e0:d2:69:86:3c:4d:20:c6:e3:26:9c:0d:3c:f3:68:ff:
5f:95:d6:83:70:5a:fe:ee:74:e3:7d:38:50:55:06:a1:20:09:
de:43:2c:b9:34:86:c0:3e:a1:05:53:48:01:3f:82:dd:2e:c5:
e3:5d:f4:89:2b:dc:58:ac:a0:d6:d0:31:cb:7c:0f:c9:2f:fa:
fb:fb:a7:a4:63:51:a8:95:4b:64:47:d1:07:56:aa:fc:af:bf:
6f:f3:4e:10:d1:5d:03:4e:4c:d1:9e:39:ce:9a:11:3a:d8:90:
23:17:4f:c7:20:c7:a0:0e:6c:f5:f6:dc:0c:8b:36:11:51:74:
01:a4:39:c5:04:f3:61:19:6f:95:88:61:eb:bf:06:5d:40:2a:
4c:00:b1:25:7e:79:27:00:6c:fc:8e:d2:80:2e:b0:f4:cf:ae:
e3:37:c5:d1:17:bd:d0:27:ad:7f:f9:ba:4e:4c:a0:f6:c0:f5:
fa:e3:05:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:11 2024 by rpki-client on console.sobornost.net