Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
File: wekLXRHZAbDQSjQmCADU4p8cYqw.cer (raw, json)
Hash identifier: Z2PkOkY0Je1ibVCszzSK9BtoFaLP6ZWA0HsymIE0ZsQ=
Subject key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020ACF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Sep 2024 20:11:05 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 139603
IP: 103.142.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133839 (0x20acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 20:11:05 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:08:e2:33:e3:12:71:57:d9:60:6b:f3:ac:
51:ee:07:b0:14:61:b4:9c:41:1b:8b:32:db:e9:42:
ed:17:3b:24:ca:21:5e:b6:0d:9c:46:34:70:51:97:
59:12:80:23:47:52:dd:ca:82:20:7c:63:9d:19:4a:
ad:a3:b1:ef:4c:8a:ca:7d:ba:33:0d:4b:27:fa:0d:
d1:e3:33:fd:8b:41:fe:71:4f:96:74:4f:56:81:b8:
7e:b5:e7:3e:30:28:a9:2e:84:a5:ee:3d:9b:94:51:
b3:3d:1a:b2:38:dc:af:a1:48:2a:ec:6e:f3:97:59:
f3:f0:13:f9:77:99:9c:ee:e5:bf:59:7c:a2:fd:0c:
89:1e:ab:95:f7:b9:4c:76:00:e8:1f:4e:d8:a2:be:
19:9c:71:ce:28:98:43:19:61:3c:8c:ed:ea:5c:47:
f3:e4:f6:55:74:6d:2c:41:c0:f6:2c:f8:4c:94:a1:
4b:8d:f5:5f:c0:a2:c0:43:fe:03:b6:80:1a:0e:07:
da:50:1c:39:29:79:54:93:e5:3e:2a:66:cd:81:58:
0c:fb:ba:80:a0:39:3e:3b:2e:07:3b:b7:c9:2f:14:
7b:ae:12:1d:59:29:2d:79:49:8a:a6:91:19:17:f5:
ba:2f:dc:5a:eb:e7:92:22:0a:6c:0e:e3:c5:ff:9d:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139603
sbgp-ipAddrBlock: critical
IPv4:
103.142.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:33:0c:76:5e:ac:d1:f5:40:a9:6b:1f:94:c9:6f:cc:d8:00:
74:6d:e4:e5:a1:54:e3:af:ae:24:88:35:89:5d:bb:fc:17:5f:
d6:91:1c:62:af:6b:63:e5:fe:7e:db:9b:7c:c8:42:3f:3f:6c:
9d:5a:db:fa:2f:8f:85:59:de:b7:95:0a:e7:1d:5c:0e:9e:98:
d8:f3:27:ad:96:4b:03:ef:9f:22:8a:fb:eb:5b:f9:f4:5d:bd:
29:5b:11:61:3c:01:50:89:80:2d:ae:26:fe:9d:18:a3:9d:54:
55:72:f0:5e:69:c8:23:df:f5:e4:49:88:64:a8:20:2a:96:56:
bc:5b:1a:99:82:78:88:66:23:02:06:a3:d9:80:41:94:55:f9:
b9:74:aa:db:14:94:ff:e3:cd:96:09:fd:80:fc:0d:d5:22:0c:
5a:a6:f8:91:01:62:4e:89:da:3b:ea:e7:f4:bc:67:9b:d3:ed:
e1:30:be:a8:73:ac:9c:60:75:75:b7:13:8d:34:08:73:28:c6:
64:23:c9:d9:1b:b6:b9:2a:fa:8e:8a:07:15:61:b2:bf:e3:07:
73:d8:a6:fa:81:15:63:56:25:3a:fe:06:14:1f:67:5d:3c:a4:
06:11:b2:eb:72:6a:7c:5f:3f:5b:39:e7:04:1f:76:9a:ee:67:
83:ad:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:14 2024 by rpki-client on console.sobornost.net