Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
File: ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer (raw, json)
Hash identifier: ld1bLm3HikKEQaHgBCfLkCAI/T/NO8lxT6CzdUla9Kw=
Subject key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021153
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Oct 2024 03:33:47 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 132722
IP: 103.19.100.0/22
IP: 202.88.44.0/22
IP: 2402:7a80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135507 (0x21153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 03:33:47 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:0c:50:db:79:ea:65:ce:47:14:ae:08:47:
50:92:e3:f6:1b:05:d6:13:44:cd:7c:1c:c5:0f:f3:
a0:c6:ce:30:80:e5:66:e4:22:6f:21:dd:32:14:8e:
b0:27:8d:10:3b:85:8e:68:b6:ec:57:a1:e7:2d:02:
0a:60:39:44:e8:c0:fa:62:69:94:d6:92:83:99:68:
f6:bc:6b:6b:de:46:0a:42:f4:c3:ef:81:61:c0:eb:
70:20:ab:f7:43:7f:f7:e7:42:e3:76:f8:2e:cf:7b:
79:0c:61:79:db:de:26:f5:41:18:4c:a0:1b:35:b4:
74:59:03:ce:1c:f0:63:8c:e6:78:fd:4a:2b:ff:8f:
59:aa:b5:d2:83:e8:ba:fa:02:04:8f:bf:08:80:63:
0e:47:64:ce:c8:95:1b:77:ac:c1:1d:a1:12:8a:8f:
f0:77:7d:e7:84:1f:02:e7:7c:90:f6:88:9d:37:44:
f8:b2:0a:83:dd:2f:84:90:dd:fb:f3:2d:de:43:7a:
72:66:b3:0a:6b:3f:b3:8d:4a:88:af:31:14:15:38:
cf:9f:4d:32:56:1f:9b:bb:5b:4e:73:82:18:47:07:
e0:b4:23:d0:e2:a2:17:b4:04:0c:53:55:22:7a:42:
73:a8:79:43:97:c5:47:60:a7:b3:b7:8a:31:40:14:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132722
sbgp-ipAddrBlock: critical
IPv4:
103.19.100.0/22
202.88.44.0/22
IPv6:
2402:7a80::/32
Signature Algorithm: sha256WithRSAEncryption
c0:c3:3b:61:bf:bc:f0:8b:98:1d:9d:db:bd:52:ce:ef:c1:ac:
21:c9:68:16:b8:98:e0:60:bd:50:e6:2d:d7:e8:a5:40:9a:dc:
4b:d4:c3:da:5a:d5:24:a2:9e:2d:1d:58:b7:20:11:cc:8d:6a:
35:74:47:3e:fa:74:52:04:f1:da:85:30:cc:d8:f4:3d:a1:72:
7f:9a:76:61:a3:f0:85:d4:a0:0b:69:7e:cc:e2:dc:eb:45:04:
ec:7c:16:03:f9:76:85:52:df:82:0f:5c:45:e9:9f:06:bc:17:
55:86:3a:87:ce:80:af:fb:d3:98:e3:93:19:b3:56:c7:09:4d:
40:be:d2:8d:01:69:90:bb:be:43:6a:0d:0c:e4:c4:59:33:cb:
47:54:48:13:c4:b6:11:87:05:10:08:03:be:c2:b2:bc:23:44:
66:99:8c:66:ab:28:a0:2c:0a:ad:79:3d:9e:98:99:ac:39:0c:
37:33:eb:bf:6c:8a:12:31:c3:db:63:fb:3b:12:38:a7:b2:ad:
f5:88:83:ee:d5:40:ad:74:8b:c3:ff:90:61:86:05:88:a8:93:
2a:a9:29:6a:18:63:c5:fe:52:34:34:cb:b5:1d:c5:a6:ea:a0:
65:55:b3:7b:46:4c:c1:12:7f:1a:11:50:d0:a1:f4:09:19:ae:
f6:7c:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:15 2024 by rpki-client on console.sobornost.net