Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
File: s-lBocVdFIOrV5HZSYdQ492t7cw.cer (raw, json)
Hash identifier: rF71Wl5CT0aEdvqp/dE8+nqusaStadTotfGFmkouWLI=
Subject key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61E2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Feb 2025 13:33:09 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25058 (0x61e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 5 13:33:09 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A913B018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:24:e4:7e:16:b2:a7:e0:3f:09:45:cb:61:
c3:4d:33:54:0e:09:bb:47:02:4b:10:56:f1:c6:40:
5a:ab:a8:7d:9f:30:bb:4a:15:50:22:4a:01:53:20:
71:f3:5a:e3:46:04:af:ab:0c:c9:86:aa:89:16:1f:
a6:07:b5:a2:ff:5a:a3:95:2c:09:70:e5:51:2e:2d:
b5:2b:7d:09:5c:35:ad:15:c8:21:d9:81:14:36:83:
72:97:6e:45:1c:b0:0a:ae:1f:d9:99:fb:9a:d4:ea:
47:d3:81:06:ce:16:37:9a:df:7b:2d:d2:e5:e9:3f:
97:49:f5:47:32:72:8d:76:31:7c:a5:b1:10:08:d7:
ee:91:45:eb:de:e2:f5:98:48:ef:33:ea:ca:18:01:
0b:71:4e:d3:50:d4:e8:51:53:e8:c3:0d:6d:fe:b1:
26:3f:51:e6:f9:4d:50:3a:86:69:4e:7e:8c:10:2b:
b4:9e:f5:7b:6b:26:31:8c:cf:10:ee:29:64:c5:8f:
95:84:90:c7:3e:74:46:05:31:a6:f1:a2:48:14:37:
d5:39:b9:87:43:f0:f9:5c:cc:eb:93:38:22:9b:eb:
81:c7:a7:7c:f2:f9:01:32:02:bf:97:59:64:b2:8a:
2a:c6:e8:ca:5e:25:92:9a:02:2f:be:54:1b:74:fa:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.32.0/23
Signature Algorithm: sha256WithRSAEncryption
25:0c:e4:f2:d4:f6:6d:b7:92:a9:c7:0e:0b:b4:98:be:89:37:
7b:8e:0b:d7:59:78:2d:35:11:1b:96:e8:0f:d6:84:1c:94:d4:
fc:a9:b0:74:2a:5d:09:6a:72:0c:bd:0f:ff:1d:2d:1e:15:e6:
f3:5b:04:65:c5:94:29:3f:7c:fc:17:a8:95:ff:e2:85:64:e5:
88:e7:72:bf:72:9f:00:2e:90:32:f3:bd:58:4d:77:8b:ea:5d:
6e:f4:48:74:41:fa:32:7d:bc:01:b5:9a:ff:26:04:80:84:6d:
7c:ba:1f:87:68:e7:4b:83:6b:0e:58:18:99:9f:b5:e5:34:0d:
ed:41:07:3b:a1:e3:96:b3:20:33:90:8d:0f:77:98:96:3b:34:
a0:33:dc:6e:37:ba:6e:e1:9c:ac:c3:ae:c6:aa:11:3e:82:55:
39:34:84:10:83:77:4d:e8:78:e1:96:d1:9b:9a:a1:4a:d8:09:
0d:2a:d8:96:ae:f7:bf:be:5a:63:9d:bc:01:6b:c0:f6:f2:40:
d8:b7:73:f5:83:c5:c4:4d:29:cb:9f:fe:ef:90:66:9e:86:78:
42:b3:9e:5b:a9:99:12:95:4d:2a:82:da:ff:9a:d9:6b:7a:f4:
d6:b5:05:14:8a:5d:85:8a:a5:91:f3:b8:ed:d3:af:88:7e:62:
cb:ba:33:1d
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMjA1MTMzMzA5WhcNMjYwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzQjAxODExMC8GA1UEBRMoQjNFOTQxQTFDNTVEMTQ4M0FCNTc5MUQ5
NDk4NzUwRTNEREFERURDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APAtJOR+FrKn4D8JRcthw00zVA4Ju0cCSxBW8cZAWquofZ8wu0oVUCJKAVMgcfNa
40YEr6sMyYaqiRYfpge1ov9ao5UsCXDlUS4ttSt9CVw1rRXIIdmBFDaDcpduRRyw
Cq4f2Zn7mtTqR9OBBs4WN5rfey3S5ek/l0n1RzJyjXYxfKWxEAjX7pFF697i9ZhI
7zPqyhgBC3FO01DU6FFT6MMNbf6xJj9R5vlNUDqGaU5+jBArtJ71e2smMYzPEO4p
ZMWPlYSQxz50RgUxpvGiSBQ31Tm5h0Pw+VzM65M4IpvrgcenfPL5ATICv5dZZLKK
Ksboyl4lkpoCL75UG3T63jsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSz6UGhxV0U
g6tXkdlJh1Dj3a3tzDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0IwMTgvMzA3OUQ4MTJDNUY2MTFFRUJFMEI3OTYwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNCMDE4LzMwNzlEODEyQzVGNjExRUVCRTBCNzk2MEM0RjlBRTAyL3MtbEJvY1Zk
RklPclY1SFpTWWRRNDkydDdjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0KIDANBgkqhkiG9w0BAQsFAAOCAQEAJQzk8tT2bbeSqccOC7SY
vok3e44L11l4LTURG5boD9aEHJTU/KmwdCpdCWpyDL0P/x0tHhXm81sEZcWUKT98
/Beolf/ihWTliOdyv3KfAC6QMvO9WE13i+pdbvRIdEH6Mn28AbWa/yYEgIRtfLof
h2jnS4NrDlgYmZ+15TQN7UEHO6HjlrMgM5CND3eYljs0oDPcbje6buGcrMOuxqoR
PoJVOTSEEIN3Teh44ZbRm5qhStgJDSrYlq73v75aY528AWvA9vJA2Ldz9YPFxE0p
y5/+75BmnoZ4QrOeW6mZEpVNKoLa/5rZa3r01rUFFIpdhYqlkfO47dOviH5iy7oz
HQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:48:24 2025 by rpki-client