Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer (raw, json)
Hash identifier: Svn2cx6WitGeXWnSCDomV9z4ZhSHbK90ntVkNSHPTmc=
Subject key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021155
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Oct 2024 03:41:17 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 45.119.204.0/22
IP: 103.5.160.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135509 (0x21155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 03:41:17 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:75:b2:03:bd:da:e0:bf:91:8f:6c:01:18:b1:
f8:26:25:09:b7:ac:fe:66:2c:72:a5:b0:99:6c:0a:
a0:33:c0:04:d4:af:dc:d8:40:0a:41:db:60:ee:d7:
8d:82:94:df:8a:69:df:76:e3:69:07:70:5a:19:6a:
a6:8d:0d:02:6b:e6:c9:2d:00:16:a1:cd:a6:3c:a6:
df:b1:ae:ea:cb:9c:3a:b1:91:cd:b9:56:76:a8:d4:
84:aa:f8:cf:e7:1f:89:ce:98:d8:3a:c9:61:08:11:
b0:02:2b:e1:22:ee:d0:5f:f9:ae:08:2c:e3:83:8e:
e0:d0:64:6b:8a:64:20:1a:bf:1a:c5:aa:e1:02:0c:
9d:7e:7f:58:d4:96:92:d4:71:3e:02:02:c4:70:42:
62:2a:ff:3b:e7:2c:78:fa:3f:7d:cf:43:e0:46:ec:
cc:e3:f3:23:bc:3d:ae:5d:ce:ae:67:60:23:fc:13:
2d:4a:e7:2d:76:6e:e0:4c:7d:4e:7f:e7:ab:3a:30:
65:05:fc:e2:12:26:9c:22:4d:94:33:bf:3d:18:d0:
3e:b9:ba:1d:17:f5:57:d7:45:c2:4c:9e:01:a9:cd:
c9:33:50:13:53:c4:20:e6:d8:4d:a1:45:6a:5f:9e:
b1:dd:0f:da:68:52:8b:36:3b:31:65:ef:8d:eb:a1:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.204.0/22
103.5.160.0/22
Signature Algorithm: sha256WithRSAEncryption
be:03:af:5f:19:fd:d2:17:12:18:9e:71:82:da:a7:43:b8:ed:
9b:52:2b:15:c2:20:a3:42:dd:a8:f7:89:29:53:50:ac:65:90:
e1:2f:40:6d:48:9a:eb:54:56:ee:72:a9:ad:77:0e:a1:52:66:
d3:39:41:ac:20:57:2d:b8:fb:d9:74:85:5e:51:68:ba:1d:0d:
9f:2d:ae:df:24:1c:56:1d:28:bc:e4:c1:c9:d1:a9:cd:9b:31:
90:2c:d6:8d:fe:58:1c:90:d1:c8:bb:6c:4d:de:84:2e:4b:87:
26:e2:78:8e:bf:db:2e:ca:5a:a6:b9:9a:30:fb:b8:51:1f:3b:
21:ea:d1:45:d5:a2:be:ad:5c:48:21:9b:09:fa:60:99:a5:cc:
23:76:e8:72:47:cf:cd:88:3c:09:f8:91:31:80:7f:ff:ca:28:
a4:1d:b4:62:7e:b7:8f:37:1f:50:29:81:7e:89:47:42:ae:db:
bf:1b:61:ca:35:48:a3:23:cb:28:bd:8c:c7:de:43:42:05:11:
c6:76:0f:52:be:10:76:77:24:14:e6:03:b6:27:d2:72:23:63:
0f:59:74:7e:6e:45:9c:48:f4:42:bc:0b:d7:2b:56:c7:c7:af:
48:db:d1:dc:50:55:21:b7:46:c0:78:39:92:8b:42:12:f4:bf:
5d:2b:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:13 2024 by rpki-client on console.sobornost.net