Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
File: YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer (raw, json)
Hash identifier: J9e9tNxMxdiWrJnSSOlWkZvxyT/7LVYFfDuEEs0WE4o=
Subject key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 54EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 25 Apr 2024 16:23:37 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 66.96.224.0/19
IP: 139.0.0.0/16
IP: 139.192.0.0/14
IP: 139.228.0.0/16
IP: 139.255.0.0 -- 140.0.255.255
IP: 140.213.0.0/16
IP: 157.10.0.0 -- 157.10.5.255
IP: 157.10.8.0/22
IP: 157.10.16.0 -- 157.10.21.255
IP: 157.10.63.0/24
IP: 157.10.66.0 -- 157.10.71.255
IP: 157.10.74.0 -- 157.10.77.255
IP: 157.10.88.0/22
IP: 157.10.94.0/23
IP: 157.10.97.0/24
IP: 157.10.102.0/23
IP: 157.10.106.0 -- 157.10.111.255
IP: 157.10.114.0 -- 157.10.117.255
IP: 157.10.148.0/23
IP: 157.10.152.0 -- 157.10.161.255
IP: 157.10.178.0 -- 157.10.185.255
IP: 157.10.190.0 -- 157.10.193.255
IP: 157.10.205.0/24
IP: 157.10.212.0/23
IP: 157.10.222.0/23
IP: 157.10.228.0/24
IP: 157.10.230.0 -- 157.10.237.255
IP: 157.10.252.0/22
IP: 157.15.0.0 -- 157.15.4.255
IP: 157.15.27.0/24
IP: 157.15.40.0 -- 157.15.49.255
IP: 157.15.51.0/24
IP: 157.15.62.0 -- 157.15.68.255
IP: 157.15.72.0/23
IP: 157.15.76.0 -- 157.15.80.255
IP: 157.15.82.0/23
IP: 157.15.96.0/23
IP: 157.15.112.0/23
IP: 157.15.116.0 -- 157.15.120.255
IP: 157.15.122.0 -- 157.15.125.255
IP: 157.15.139.0/24
IP: 157.15.144.0/23
IP: 157.15.148.0 -- 157.15.157.255
IP: 157.15.160.0 -- 157.15.166.255
IP: 157.15.168.0/21
IP: 157.15.180.0 -- 157.15.187.255
IP: 157.15.194.0/23
IP: 157.15.198.0/23
IP: 157.15.204.0 -- 157.15.212.255
IP: 157.15.214.0 -- 157.15.217.255
IP: 157.15.226.0/23
IP: 157.15.230.0 -- 157.15.233.255
IP: 157.15.236.0 -- 157.15.241.255
IP: 157.15.244.0 -- 157.15.249.255
IP: 157.15.252.0/23
IP: 157.20.0.0/21
IP: 157.20.10.0 -- 157.20.13.255
IP: 157.20.18.0 -- 157.20.25.255
IP: 157.20.30.0 -- 157.20.32.255
IP: 157.20.34.0 -- 157.20.39.255
IP: 157.20.44.0 -- 157.20.50.255
IP: 157.20.70.0 -- 157.20.73.255
IP: 157.20.78.0/23
IP: 157.20.90.0 -- 157.20.100.255
IP: 157.20.118.0 -- 157.20.128.255
IP: 157.20.130.0 -- 157.20.133.255
IP: 157.20.144.0/23
IP: 157.20.152.0/24
IP: 157.20.154.0 -- 157.20.159.255
IP: 157.20.162.0 -- 157.20.165.255
IP: 157.20.167.0/24
IP: 157.20.176.0/22
IP: 157.20.188.0/23
IP: 157.20.193.0/24
IP: 157.20.204.0 -- 157.20.210.255
IP: 157.20.212.0/23
IP: 157.20.217.0 -- 157.20.223.255
IP: 157.20.230.0 -- 157.20.239.255
IP: 157.20.243.0 -- 157.20.245.255
IP: 157.20.252.0/22
IP: 157.66.0.0 -- 157.66.9.255
IP: 157.66.14.0 -- 157.66.21.255
IP: 157.66.29.0/24
IP: 157.66.34.0 -- 157.66.41.255
IP: 157.66.50.0 -- 157.66.63.255
IP: 157.66.66.0 -- 157.66.69.255
IP: 157.66.82.0 -- 157.66.87.255
IP: 157.66.112.0 -- 157.66.117.255
IP: 157.66.122.0 -- 157.66.133.255
IP: 157.66.136.0 -- 157.66.142.255
IP: 157.66.168.0 -- 157.66.177.255
IP: 158.140.160.0/19
IP: 160.19.16.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 17:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21742 (0x54ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 25 16:23:37 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:38:1c:07:dc:bb:5a:95:89:df:cb:3e:f1:
5c:c2:62:1f:03:15:9e:93:5c:cd:53:a8:18:09:72:
e3:30:a5:d2:0d:30:18:3f:8d:3d:0d:a8:d0:f7:aa:
73:4b:a9:80:85:bd:9b:af:ba:63:b6:a5:bc:30:35:
be:66:f9:b4:9c:26:da:0e:a4:82:09:46:5a:ae:91:
81:37:0b:e3:d1:dc:d0:41:4d:41:a8:b8:84:68:39:
99:ab:f7:12:49:be:b8:80:0b:98:09:0c:70:28:3b:
e5:64:1b:96:84:d4:46:89:cc:17:68:9c:9e:b7:6d:
6a:c6:59:6b:07:62:aa:b0:cd:82:d4:29:4a:10:1c:
a3:a9:e0:0e:34:ef:9f:c5:82:82:5c:64:3c:c1:f4:
e4:a0:7d:10:14:74:2c:f7:87:dd:05:5e:1e:df:dc:
cf:90:55:f8:1b:29:46:0f:c0:53:3b:75:0e:a5:ef:
c5:a8:e2:43:b1:69:71:1a:c2:18:f4:fe:15:d6:30:
3c:f0:b5:07:8b:79:82:37:cb:c2:82:d7:80:c6:a3:
6b:b7:8f:8c:61:0f:f3:8f:ce:59:70:99:ad:1a:c8:
88:43:af:b2:95:11:94:e1:23:de:54:3b:b3:f5:34:
59:c7:4c:ba:13:5f:7a:cd:91:00:c7:35:dc:cd:63:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.96.224.0/19
139.0.0.0/16
139.192.0.0/14
139.228.0.0/16
139.255.0.0-140.0.255.255
140.213.0.0/16
157.10.0.0-157.10.5.255
157.10.8.0/22
157.10.16.0-157.10.21.255
157.10.63.0/24
157.10.66.0-157.10.71.255
157.10.74.0-157.10.77.255
157.10.88.0/22
157.10.94.0/23
157.10.97.0/24
157.10.102.0/23
157.10.106.0-157.10.111.255
157.10.114.0-157.10.117.255
157.10.148.0/23
157.10.152.0-157.10.161.255
157.10.178.0-157.10.185.255
157.10.190.0-157.10.193.255
157.10.205.0/24
157.10.212.0/23
157.10.222.0/23
157.10.228.0/24
157.10.230.0-157.10.237.255
157.10.252.0/22
157.15.0.0-157.15.4.255
157.15.27.0/24
157.15.40.0-157.15.49.255
157.15.51.0/24
157.15.62.0-157.15.68.255
157.15.72.0/23
157.15.76.0-157.15.80.255
157.15.82.0/23
157.15.96.0/23
157.15.112.0/23
157.15.116.0-157.15.120.255
157.15.122.0-157.15.125.255
157.15.139.0/24
157.15.144.0/23
157.15.148.0-157.15.157.255
157.15.160.0-157.15.166.255
157.15.168.0/21
157.15.180.0-157.15.187.255
157.15.194.0/23
157.15.198.0/23
157.15.204.0-157.15.212.255
157.15.214.0-157.15.217.255
157.15.226.0/23
157.15.230.0-157.15.233.255
157.15.236.0-157.15.241.255
157.15.244.0-157.15.249.255
157.15.252.0/23
157.20.0.0/21
157.20.10.0-157.20.13.255
157.20.18.0-157.20.25.255
157.20.30.0-157.20.32.255
157.20.34.0-157.20.39.255
157.20.44.0-157.20.50.255
157.20.70.0-157.20.73.255
157.20.78.0/23
157.20.90.0-157.20.100.255
157.20.118.0-157.20.128.255
157.20.130.0-157.20.133.255
157.20.144.0/23
157.20.152.0/24
157.20.154.0-157.20.159.255
157.20.162.0-157.20.165.255
157.20.167.0/24
157.20.176.0/22
157.20.188.0/23
157.20.193.0/24
157.20.204.0-157.20.210.255
157.20.212.0/23
157.20.217.0-157.20.223.255
157.20.230.0-157.20.239.255
157.20.243.0-157.20.245.255
157.20.252.0/22
157.66.0.0-157.66.9.255
157.66.14.0-157.66.21.255
157.66.29.0/24
157.66.34.0-157.66.41.255
157.66.50.0-157.66.63.255
157.66.66.0-157.66.69.255
157.66.82.0-157.66.87.255
157.66.112.0-157.66.117.255
157.66.122.0-157.66.133.255
157.66.136.0-157.66.142.255
157.66.168.0-157.66.177.255
158.140.160.0/19
160.19.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:72:84:8c:7f:2d:26:3d:cc:e1:08:77:62:6b:b9:71:08:6d:
d5:55:4e:f0:25:85:e6:f1:cf:a0:da:cd:54:99:86:d2:28:18:
cd:98:71:ee:18:10:9a:6a:38:05:fd:b8:e6:17:c4:3e:a6:ed:
9e:f4:eb:f5:8d:c7:da:fb:d1:b0:bf:67:a6:b7:39:9a:5a:89:
ee:b3:28:d0:49:b5:ba:34:87:92:3d:76:05:88:4b:d8:c6:d2:
00:9f:d7:e2:69:ed:04:f7:4b:33:d1:6d:f0:64:08:4f:ce:08:
5f:b1:c2:ba:40:06:ca:b5:af:d8:1e:0d:0f:d7:35:77:b8:cd:
1f:9c:d1:67:00:24:8c:12:5b:57:0f:a3:b7:e2:f5:79:b9:72:
0c:cf:d7:63:e3:91:7d:c8:ee:a0:ab:19:22:99:8c:4f:ba:57:
0a:42:26:97:ec:f1:aa:bf:0c:2c:10:b6:9f:29:66:62:da:6d:
62:ab:66:9b:97:8d:77:b9:90:91:6a:94:7c:3f:85:b4:cb:46:
bd:46:0d:89:52:e4:25:bb:14:f8:ed:71:fc:9b:52:05:d9:f5:
b4:6a:02:e5:84:81:3c:cd:ea:2e:b6:4e:ed:a2:b2:7c:86:22:
16:e7:3a:3a:09:63:2d:98:2a:77:0a:11:fa:10:b6:1f:70:41:
26:b7:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:08 2024 by rpki-client on console-fra.rpki-client.org