Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
File: XtX3khrIZUHZKTb2kcsc2_bVwqE.cer (raw, json)
Hash identifier: 01O7mVDri2hVkVO+zL0mKed8U6joDBfHV9W2cyGOnhw=
Subject key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6239
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Tue 18 Feb 2025 21:00:54 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 192.64.203.0 -- 192.64.204.255
IP: 198.179.225.0/24
IP: 205.147.104.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25145 (0x6239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 18 21:00:54 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91D85A20000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:48:e9:5f:7d:e8:21:37:2b:f1:93:06:f3:
d3:e6:d3:f3:73:72:af:97:5a:9a:26:ed:06:eb:70:
b1:55:f4:c6:ac:0c:47:33:90:7e:5c:e9:41:2b:2a:
93:0d:ca:8c:75:79:d1:81:ec:f9:a4:47:05:7f:11:
b1:4a:4e:07:63:8f:43:42:29:e3:a7:10:09:84:72:
6b:e2:33:35:d3:1f:a3:a7:47:a8:09:ae:b2:2b:d2:
dd:a9:eb:81:b6:81:c1:4f:e6:5c:2f:f7:cf:eb:f0:
3e:49:85:18:0a:26:ab:72:64:da:f3:17:40:3a:93:
40:22:f8:1c:65:e1:af:d7:cd:b4:2c:ef:7d:cf:a0:
1f:ae:a1:3c:47:15:c8:29:be:ef:d2:54:f7:63:cf:
e4:8c:a5:d5:17:17:d1:fe:b4:8c:b2:c1:c7:56:e3:
7f:a7:f0:1a:fe:93:aa:08:e9:00:69:ea:03:6c:59:
a2:5f:e7:a7:fd:83:5c:a1:c6:7d:02:65:4c:c5:e9:
95:e0:c4:b6:d0:fe:61:71:72:19:89:6b:a6:a0:00:
79:b7:71:f5:cc:10:8d:dc:8f:a1:5b:c1:e4:fa:40:
2c:ab:62:17:24:45:8c:45:96:97:57:17:ed:98:fe:
c4:1a:ec:00:b0:77:3f:16:c6:d4:3b:5c:e4:43:24:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.64.203.0-192.64.204.255
198.179.225.0/24
205.147.104.0/22
Signature Algorithm: sha256WithRSAEncryption
91:76:e3:00:69:17:af:74:4e:07:09:e6:27:07:70:9d:45:e5:
98:59:be:69:89:b7:0a:c8:f2:36:ea:36:3d:ea:fd:1d:1e:b3:
91:a1:ca:e6:f6:bf:38:b5:fd:78:5c:1b:51:41:16:75:9c:41:
30:d9:26:b6:7c:9a:90:6a:05:51:5b:e7:7a:cb:db:bb:09:68:
95:9d:a1:88:1a:5c:86:09:85:61:46:47:c3:31:64:bd:f1:31:
bb:dd:8c:10:73:c0:68:80:34:61:5f:3e:e2:38:bd:d2:e7:4c:
35:47:79:d6:5f:d3:8c:d4:0e:b5:e3:bf:50:90:78:07:24:5e:
8a:09:3d:98:4f:5d:d8:ce:cc:83:21:e8:24:30:f5:df:52:32:
ae:d6:c4:06:f4:6a:33:78:5a:8a:f5:be:76:6a:c4:9a:ce:e5:
f7:00:8f:ef:5a:a6:ad:48:16:48:33:02:a7:88:a0:d6:41:2e:
b9:ce:d5:ca:d9:cb:46:41:6c:fd:9f:54:8a:bc:5e:3a:6a:5b:
22:d1:69:22:23:44:78:d1:33:ba:50:a4:12:02:18:0f:6e:8f:
97:8c:7c:9b:36:fb:cd:70:db:f0:58:a9:1a:47:8c:5b:4d:a6:
41:8a:0a:67:90:e9:33:ea:d8:fd:66:d4:6a:fb:3c:50:ae:8e:
75:e2:cd:ea
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgICYjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMjE4MjEwMDU0WhcNMjYwNTAxMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTFEODVBMjAwMDAxMTAvBgNVBAUTKDVFRDVGNzkyMUFDODY1NDFEOTI5
MzZGNjkxQ0IxQ0RCRjZENUMyQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQj0jpX33oITcr8ZMG89Pm0/Nzcq+XWpom7QbrcLFV9MasDEczkH5c6UEr
KpMNyox1edGB7PmkRwV/EbFKTgdjj0NCKeOnEAmEcmviMzXTH6OnR6gJrrIr0t2p
64G2gcFP5lwv98/r8D5JhRgKJqtyZNrzF0A6k0Ai+Bxl4a/XzbQs733PoB+uoTxH
Fcgpvu/SVPdjz+SMpdUXF9H+tIyywcdW43+n8Br+k6oI6QBp6gNsWaJf56f9g1yh
xn0CZUzF6ZXgxLbQ/mFxchmJa6agAHm3cfXMEI3cj6FbweT6QCyrYhckRYxFlpdX
F+2Y/sQa7ACwdz8WxtQ7XORDJJJDAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUXtX3
khrIZUHZKTb2kcsc2/bVwqEwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwd
bg4wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIw
MUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3
ZGJnNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsG
AQUFBzAFhkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4
NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMi8wgYAGCCsGAQUFBzAKhnRy
c3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1
ZGU0MTAxODNmNjg2NjEwODRiODYvMi81RUQ1Rjc5MjFBQzg2NTQxRDkyOTM2RjY5
MUNCMUNEQkY2RDVDMkExLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJw
cy5hcmluLm5ldC9ub3RpZmljYXRpb24ueG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaMAwDBADAQMsDBADAQMwDBADGs+EDBALNk2gwDQYJKoZIhvcNAQELBQAD
ggEBAJF24wBpF690TgcJ5icHcJ1F5ZhZvmmJtwrI8jbqNj3q/R0es5Ghyub2vzi1
/XhcG1FBFnWcQTDZJrZ8mpBqBVFb53rL27sJaJWdoYgaXIYJhWFGR8MxZL3xMbvd
jBBzwGiANGFfPuI4vdLnTDVHedZf04zUDrXjv1CQeAckXooJPZhPXdjOzIMh6CQw
9d9SMq7WxAb0ajN4Wor1vnZqxJrO5fcAj+9apq1IFkgzAqeIoNZBLrnO1crZy0ZB
bP2fVIq8XjpqWyLRaSIjRHjRM7pQpBICGA9uj5eMfJs2+81w2/BYqRpHjFtNpkGK
CmeQ6TPq2P1m1Gr7PFCujnXizeo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:36:57 2025 by rpki-client