Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
File: yegJAGD4rmNwoBt-HsHW4m5PwBo.cer (raw, json)
Hash identifier: c5+X3Vu7gkWSApPEg8LnYPhmdWtpioGurEPYW7hKJiM=
Subject key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01FE94
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 05 Jul 2024 19:42:46 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 151400
IP: 103.215.180.0/23
IP: 2401:8e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130708 (0x1fe94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 5 19:42:46 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:87:2b:91:35:de:ad:e2:47:7d:93:71:4b:
fd:86:52:cd:0d:70:0d:d8:ae:2a:46:ef:1a:55:da:
3f:6a:fe:4c:f8:57:c3:d7:be:6b:13:9a:73:3a:cd:
c9:72:36:4c:f9:8e:4e:a2:ad:74:dd:80:a8:ba:d1:
a1:d7:6c:42:79:b4:de:e9:b0:24:4e:95:b5:31:69:
a1:4f:f9:79:79:b2:a2:2e:2a:c7:7b:42:6c:44:0a:
b0:4a:2f:13:81:03:95:62:1d:98:18:14:23:1c:1b:
68:e1:9a:95:0a:f1:95:e9:ef:29:1e:20:f7:5c:4f:
5e:da:65:1a:5c:39:f8:84:20:be:07:15:44:b7:b0:
5a:64:74:20:71:88:19:e4:de:93:32:b8:47:38:9e:
9d:85:97:1c:33:5a:1a:89:70:7c:b2:ba:41:5f:21:
07:61:9a:4a:63:74:f6:34:f3:6e:04:ef:90:5a:20:
b7:b2:0d:87:e5:25:7b:ce:5c:d9:d5:aa:dc:1f:bb:
67:27:33:c8:7b:a2:17:2e:11:8c:0e:44:6f:e1:ef:
82:4f:fd:29:e9:e1:19:08:a0:ce:77:5f:08:a6:fb:
77:c8:f9:d8:b1:22:66:f4:57:60:dd:55:fe:c9:0c:
2a:43:ec:9e:ef:9f:2e:16:b5:93:ca:e3:e9:f3:7e:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151400
sbgp-ipAddrBlock: critical
IPv4:
103.215.180.0/23
IPv6:
2401:8e0::/32
Signature Algorithm: sha256WithRSAEncryption
19:1f:2d:cd:0d:b1:52:01:b1:63:0f:05:0a:c9:30:36:c7:98:
3e:60:1b:f9:48:bc:ab:3b:a1:92:bd:eb:df:d6:74:a7:3a:a9:
ad:e3:f0:f8:13:1c:2b:db:85:d3:8a:bc:81:f1:25:27:64:df:
12:b6:2c:3f:2d:05:96:d0:2c:61:2e:ae:39:97:65:17:48:20:
f8:39:40:53:07:e7:33:42:74:76:22:9e:f9:df:89:20:0b:8d:
ef:e0:36:39:a1:cf:8d:06:16:c2:e0:b8:a1:38:ff:be:d4:00:
b2:c6:51:a9:63:03:8e:e2:b7:25:92:26:e0:40:4c:27:e5:9d:
79:64:61:7c:66:e9:32:4d:ca:b8:9b:92:7d:db:a4:df:99:4a:
68:80:3a:8c:d2:76:e5:17:14:c3:33:3d:ca:88:1d:4f:06:fd:
96:af:6c:ef:aa:93:ae:d1:9f:24:d8:39:4b:fe:01:fa:c7:92:
40:45:cd:75:9d:f6:47:62:ec:15:0c:d9:e6:f3:48:41:d8:76:
65:1a:60:d1:85:00:02:15:90:59:73:1b:e7:08:fb:94:c7:39:
e4:2d:b5:e7:9e:83:a7:aa:e3:c4:b4:4d:d8:fb:e6:32:1d:ce:
b1:99:73:e2:08:f4:34:b7:57:c8:c8:d9:41:e3:78:d4:78:52:
87:f6:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:15 2024 by rpki-client on console.sobornost.net