Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer
File: x2h2G8gatP5_1EAVSCYcuocge-o.cer (raw, json)
Hash identifier: hEsq45kS5XGL3XCVKeEwzC/BhLT6peBuv0i/TLYAgYc=
Subject key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020889
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 23 Aug 2024 12:33:44 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 103.140.228.0/23
IP: 2001:df0:d880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133257 (0x20889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 23 12:33:44 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:92:5e:7d:74:d9:e8:89:1b:ce:c7:48:a2:
17:c2:fd:ef:da:eb:69:f6:c3:a8:6a:9b:e3:d3:8e:
48:ca:06:b5:72:4c:fa:cf:d9:c8:53:73:11:29:6e:
73:06:83:b6:9d:47:ff:8b:cb:2c:10:bd:6f:b8:4f:
39:c6:69:cc:cd:96:d8:27:f6:e9:b3:e3:ed:5e:4f:
f8:f3:65:2f:62:16:fa:b2:68:89:50:ef:40:54:d0:
e6:e8:b4:35:13:2c:a4:66:13:44:b4:f6:4d:c7:35:
8d:7d:13:af:c4:6f:56:34:4b:19:29:fa:70:c9:8b:
4a:88:9a:48:61:aa:67:d5:ad:8d:0d:18:52:3d:86:
5b:7f:82:5b:57:77:ec:62:a9:9b:65:7c:b2:b1:bb:
d0:f6:b3:8e:e2:b8:f6:94:d6:1d:2d:f7:21:54:a6:
3d:7a:4f:67:df:7c:a4:c4:25:c7:45:71:c2:9f:8e:
e3:7a:cd:66:c6:4a:8f:a2:25:bb:c2:03:24:dd:03:
c9:2d:2e:94:40:9b:f5:44:c0:b5:b1:63:92:52:96:
8c:8a:94:1c:ba:a5:11:86:51:d7:71:0f:80:1c:d0:
68:d3:1e:5a:ac:a9:00:b1:dd:1a:cf:38:c9:d7:e3:
63:69:33:fc:68:3a:34:89:b0:30:c5:8f:de:e6:41:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.228.0/23
IPv6:
2001:df0:d880::/48
Signature Algorithm: sha256WithRSAEncryption
85:73:4b:02:bb:e2:1e:09:03:0e:16:54:c8:5e:0a:19:5d:75:
16:12:1f:e4:91:db:2d:99:23:ae:78:f3:2e:80:56:16:ce:ff:
32:0d:7f:6c:a4:19:a5:c6:7d:5d:77:5f:5b:59:2a:62:84:9c:
30:08:45:cb:f8:39:ec:32:8e:ba:e4:b4:04:e4:97:44:fd:25:
5b:70:ce:56:e5:92:c2:12:19:bf:35:d4:54:f4:41:9f:c6:35:
10:9b:d4:e0:c7:f6:ca:a0:dc:ad:ff:01:d8:cf:81:2c:30:b9:
dd:32:6e:d5:3d:f8:b7:d1:56:93:78:25:bd:4f:d4:1f:41:3d:
f4:14:e5:db:0e:5f:1a:de:ed:50:5a:4c:2b:eb:ec:89:93:d0:
52:29:3b:ec:e0:9e:f9:e9:5a:ae:67:1e:4d:18:dd:cc:50:cf:
39:66:88:44:b9:f7:cc:3e:dc:83:8a:8f:6c:5e:35:90:a5:a1:
f7:90:b2:15:06:7c:8a:59:8d:08:47:df:5f:88:a4:36:6e:9d:
59:c4:87:20:9e:fc:83:bd:55:7d:b9:36:d7:32:42:a7:a6:75:
89:c8:c7:c2:15:41:73:dd:33:91:0d:1a:0c:ed:40:60:10:eb:
9d:b5:e0:49:fd:05:f5:69:30:47:c9:dc:7b:96:79:e7:e2:c4:
c5:ee:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:14 2024 by rpki-client on console.sobornost.net