Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
File: wSlv-tNPKfBODvrV2SRMAqfYfY0.cer (raw, json)
Hash identifier: OncrbXCPZdaQkF4MuY+MNepcURiiixamX3Qy3J2pN5U=
Subject key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F2ED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 May 2024 02:14:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 7604
AS: 18195
AS: 37996
AS: 45145
AS: 131479
AS: 132145
AS: 132873
AS: 133060
IP: 103.6.12.0/22
IP: 103.25.112.0/23
IP: 103.241.200.0/22
IP: 119.252.64.0/19
IP: 122.202.64.0/20
IP: 180.233.128.0/22
IP: 202.74.160.0/19
IP: 202.191.4.0/22
IP: 203.7.224.0/23
IP: 203.19.12.0/24
IP: 203.22.25.0/24
IP: 203.23.208.0/20
IP: 203.24.54.0/24
IP: 203.25.26.0/23
IP: 203.30.19.0/24
IP: 203.30.34.0/24
IP: 203.31.0.0/24
IP: 203.32.124.0/22
IP: 203.34.30.0/23
IP: 203.55.198.0/24
IP: 203.56.98.0/24
IP: 203.124.176.0/20
IP: 203.196.92.0/22
IP: 203.209.160.0/20
IP: 2401:400::/30
IP: 2403:1900::/32
IP: 2403:3400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127725 (0x1f2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 21 02:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:88:80:b4:c2:ab:dc:69:c8:6e:f4:0f:77:
42:0f:d7:db:a6:68:bd:a7:4c:23:13:a2:1b:eb:00:
6e:1d:45:05:05:05:bc:e7:26:a6:27:80:a8:65:01:
b0:bb:cd:ac:28:d9:76:89:09:2e:f8:bc:c0:27:b0:
d6:65:35:41:71:59:75:b3:d8:5d:06:38:d0:ba:96:
2b:ad:35:3a:f5:50:9e:37:18:64:ae:1f:2c:ce:9f:
20:ca:fe:10:a8:b7:67:60:a8:50:11:8d:27:71:b0:
70:c3:53:7a:4e:3d:77:b3:29:4d:a7:45:4e:6e:11:
aa:62:0c:c6:fe:bc:7f:be:cb:83:e2:5f:e5:f5:1c:
1b:90:a1:ed:98:22:7b:9b:3b:e4:3a:7e:ae:28:7d:
e6:eb:1a:c3:c7:63:af:ba:2b:de:8e:44:63:11:7c:
c8:2a:bd:2c:e8:cb:9c:1e:9d:80:f2:c4:44:45:33:
e1:14:a5:3a:c5:cb:1a:1a:9c:ae:5c:8d:5d:fb:4f:
c1:8d:7b:ef:c1:3f:eb:36:0d:81:b3:6e:f0:6c:f8:
7f:39:b9:75:28:4a:6f:8a:6b:4c:55:18:95:a1:d0:
da:cd:83:69:dd:04:c6:2c:c8:6f:88:f3:b6:82:a7:
f5:ee:f1:33:ef:58:31:e5:13:c1:81:db:94:50:5b:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7604
18195
37996
45145
131479
132145
132873
133060
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.128.0/22
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.22.25.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.56.98.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/30
2403:1900::/32
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
2a:ac:11:ac:98:ca:1c:8f:e8:7d:9c:61:a4:4f:5a:22:8d:d4:
6d:20:e0:2b:50:33:10:fe:70:fa:94:a1:38:c0:d3:e4:56:3a:
12:bf:e8:a3:3a:36:8c:bf:7a:2e:dc:21:96:1f:64:05:87:7c:
8a:d8:0e:84:ee:33:bc:89:7e:12:d5:e5:9b:95:1a:a2:f8:b4:
c4:e0:e8:41:ba:68:da:88:40:ff:4e:b5:bd:b5:97:e9:69:1d:
54:e0:3e:21:ff:b9:5c:3c:bb:a8:3d:c6:82:15:39:ff:8d:25:
a7:d0:50:37:69:45:8e:1f:d8:d1:8f:91:69:ad:ca:f5:89:8b:
42:be:f0:ff:81:32:62:70:a4:d3:13:ba:42:fe:e1:c7:9a:43:
11:d8:f5:ff:7e:d2:96:80:a4:6a:e6:56:05:54:a9:17:1a:90:
2a:fa:78:cc:b7:78:97:76:55:70:25:5e:e7:9d:47:ea:2d:f4:
ea:80:3e:70:f1:c8:c3:ce:4b:9d:35:c6:ef:26:8a:2a:3d:2f:
26:ad:fc:ba:2b:ff:97:7b:c0:18:72:ea:39:9d:3f:55:fc:67:
7f:f7:aa:71:da:b7:dc:1d:37:09:a3:59:94:17:c2:81:76:c9:
83:cd:4a:4c:6e:a6:a7:af:13:fe:8d:48:92:87:21:24:f8:4f:
ad:0f:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:13 2024 by rpki-client on console.sobornost.net