Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
File: ZhNNob_trAyRnSax9_nhaK-dK04.cer (raw, json)
Hash identifier: 8XQk7xIMzKowNiuO/XhapWV7kNVOLKO/MDRMOi/aLuo=
Subject key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 626C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Feb 2025 23:15:31 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 143.188.0.0/16
IP: 147.66.0.0/16
IP: 155.187.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25196 (0x626c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 25 23:15:31 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A912A5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c8:f6:8a:f9:b3:84:89:f4:ae:e5:a6:1b:61:
23:2e:f4:54:7c:7d:19:1a:38:93:6c:02:b1:35:c5:
bd:13:20:0a:f7:68:10:fd:ab:d3:31:e1:64:ce:f2:
cb:64:aa:f2:9f:35:3d:29:bc:f8:10:60:35:1a:67:
41:d8:3e:e4:bd:76:1c:f3:62:f8:77:62:ba:31:19:
14:50:ee:6d:3f:53:2c:5a:f2:e3:33:ee:b2:95:1a:
db:a8:f7:28:ca:28:88:96:a9:a5:0e:de:0b:41:66:
4f:c9:72:0e:7f:a0:1b:8c:a9:ba:41:04:c7:13:e2:
7a:51:37:f1:37:bf:45:5a:a2:16:26:80:8d:1f:60:
63:e6:54:97:eb:0e:38:e0:a7:df:3b:c7:0c:22:78:
f7:48:85:6c:f5:cd:55:48:a2:0e:60:d6:4a:0e:29:
22:9a:f6:76:a4:38:ce:d2:b7:da:45:75:d9:29:10:
c0:5d:87:54:2d:a8:2c:0b:77:7b:7b:c3:7f:0e:ec:
4d:9e:f6:e3:a1:59:75:c0:16:49:fa:24:94:5e:c2:
b1:33:b7:03:ed:56:26:f3:be:c5:67:dc:fe:77:31:
f8:77:6b:d1:d5:d7:4c:d6:4c:37:e3:8a:4d:be:16:
fc:21:3f:f4:c7:7f:48:78:a4:31:8a:1b:fe:b0:e1:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.188.0.0/16
147.66.0.0/16
155.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:35:0c:4b:5f:c2:60:70:73:43:e3:ce:09:2b:47:f9:27:72:
fa:02:35:8e:b5:11:6a:7d:02:67:54:d6:6a:df:49:49:7d:64:
8b:8a:10:45:e1:c4:ce:84:c2:15:26:cf:74:24:b5:1f:7d:a5:
4b:ee:76:bb:6e:c9:c7:f7:ee:ae:34:69:69:38:be:b3:49:de:
c0:53:8d:b6:8e:f7:71:ad:fe:5b:cc:95:4f:e2:f7:fc:4b:6f:
c4:dc:a6:58:1f:8c:14:e5:6a:99:0a:6e:e9:97:de:a2:7e:36:
db:db:9c:1d:5d:e0:80:7a:03:ae:47:59:2e:fa:64:45:2d:48:
8a:9f:5c:9c:e8:75:2f:b2:ea:b2:7a:f4:9f:51:7c:e7:ed:cb:
db:bd:3e:17:2f:19:14:72:4a:f8:ad:3a:06:22:ff:6f:fe:eb:
11:a9:e6:e1:d7:0c:bf:cd:b4:a6:e1:3c:2f:79:f5:c0:e1:2f:
67:46:24:ac:6c:9b:03:17:85:ce:15:2e:6d:3d:0f:ef:90:e1:
57:35:f6:dd:22:3f:66:a9:9e:77:ee:f5:49:dc:62:01:50:e5:
b6:68:fd:35:30:da:34:f3:6f:b3:ad:6f:31:95:a8:a2:61:f6:
36:f7:89:cf:2a:98:b4:74:47:75:05:b9:6c:9e:61:93:54:cd:
5a:7e:5e:54
-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgICYmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMjI1MjMxNTMxWhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyQTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIx
RjdGOUUxNjhBRjlEMkI0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APXI9or5s4SJ9K7lphthIy70VHx9GRo4k2wCsTXFvRMgCvdoEP2r0zHhZM7yy2Sq
8p81PSm8+BBgNRpnQdg+5L12HPNi+HdiujEZFFDubT9TLFry4zPuspUa26j3KMoo
iJappQ7eC0FmT8lyDn+gG4ypukEExxPielE38Te/RVqiFiaAjR9gY+ZUl+sOOOCn
3zvHDCJ490iFbPXNVUiiDmDWSg4pIpr2dqQ4ztK32kV12SkQwF2HVC2oLAt3e3vD
fw7sTZ7246FZdcAWSfoklF7CsTO3A+1WJvO+xWfc/ncx+Hdr0dXXTNZMN+OKTb4W
/CE/9Md/SHikMYob/rDhXwcCAwEAAaOCAvwwggL4MB0GA1UdDgQWBBRmE02hv+2s
DJGdJrH3+eFor50rTjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkE1RDQvNjUwQjRERThGM0NFMTFFRjkxNEVGNjQ0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJBNUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90
ckF5Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAoBggrBgEFBQcBBwEB/wQZMBcw
FQQCAAEwDwMDAI+8AwMAk0IDAwCbuzANBgkqhkiG9w0BAQsFAAOCAQEAszUMS1/C
YHBzQ+POCStH+Sdy+gI1jrURan0CZ1TWat9JSX1ki4oQReHEzoTCFSbPdCS1H32l
S+52u27Jx/furjRpaTi+s0newFONto73ca3+W8yVT+L3/EtvxNymWB+MFOVqmQpu
6Zfeon4229ucHV3ggHoDrkdZLvpkRS1Iip9cnOh1L7Lqsnr0n1F85+3L270+Fy8Z
FHJK+K06BiL/b/7rEanm4dcMv820puE8L3n1wOEvZ0YkrGybAxeFzhUubT0P75Dh
VzX23SI/Zqmed+71SdxiAVDltmj9NTDaNPNvs61vMZWoomH2NveJzyqYtHRHdQW5
bJ5hk1TNWn5eVA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:53 2025 by rpki-client