Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
File: sJELB8hrD_owClKsfDH8tSwFMtc.cer (raw, json)
Hash identifier: 86VabiEu1BG1XfIr0kySbH+nG0H9hEdGwTsLu2S2tYE=
Subject key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4E96
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Nov 2023 00:50:27 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 72.35.248.0/22
IP: 74.114.48.0/22
IP: 135.84.232.0/21
IP: 146.88.152.0/21
IP: 159.117.132.0 -- 159.117.143.255
IP: 159.117.201.0/24
IP: 159.117.223.0/24
IP: 165.84.232.0/21
IP: 208.66.232.0/21
IP: 208.71.212.0/22
IP: 208.81.116.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20118 (0x4e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 7 00:50:27 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:43:9f:47:82:ab:02:13:a5:fc:eb:ef:e7:
92:40:ff:45:5c:5a:16:b0:c0:2c:9c:73:3f:ed:72:
6f:fd:d9:ef:bf:4e:a6:73:0a:0f:85:55:a5:62:e5:
c5:7c:2d:25:6f:d8:e2:e3:df:ce:58:4b:38:74:f4:
73:c7:bc:9f:1a:5e:0d:af:a8:77:2f:35:e4:51:47:
c9:fa:e4:78:2c:48:d4:fa:db:7b:1e:9e:61:b6:e3:
a6:f3:8d:2b:b9:2f:ea:fc:a6:04:0d:64:66:9b:a4:
6f:aa:18:9b:95:af:0b:ad:6f:b0:78:c2:8e:e1:65:
cc:6d:47:e4:32:2a:40:2e:c8:d6:a4:68:24:bd:b9:
a5:fb:50:06:90:97:e5:b6:3f:64:9d:35:76:6a:81:
b8:06:db:27:75:a2:dd:7e:1f:5e:ed:4c:e8:da:80:
d9:ac:69:c4:0b:e6:17:d7:23:04:47:b1:cb:50:c6:
d7:ee:b4:ce:97:1e:21:05:9d:b4:c2:3a:06:4d:2b:
7f:d2:9a:e5:11:a0:5e:94:da:c7:14:f3:e5:c2:4d:
b3:a1:70:be:27:4d:ae:49:55:f1:2f:fc:3e:2c:20:
1f:08:60:62:3c:ac:25:64:b0:e5:20:cf:5a:d7:be:
65:33:d8:b5:12:fd:63:99:46:a5:f8:6d:d4:33:d6:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
72.35.248.0/22
74.114.48.0/22
135.84.232.0/21
146.88.152.0/21
159.117.132.0-159.117.143.255
159.117.201.0/24
159.117.223.0/24
165.84.232.0/21
208.66.232.0/21
208.71.212.0/22
208.81.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:cc:3c:a6:0a:07:fa:56:f6:1a:3d:28:3e:02:b8:78:6b:ea:
4b:5a:6a:ec:08:22:0b:63:7e:a4:01:3f:fc:f5:e3:7c:ae:e8:
7a:fd:f9:00:d6:5d:39:ee:eb:0a:1d:57:b0:0e:34:71:18:2f:
1d:db:50:b3:60:94:db:d3:ff:03:79:16:48:ea:e4:cb:bb:8d:
4b:2f:cf:19:ad:a2:5a:4c:2f:11:62:fd:4b:c3:b1:1b:b6:bf:
77:60:f5:5a:d2:cc:4d:81:84:37:f7:3c:18:3f:eb:75:89:ba:
59:6d:e4:b5:2d:db:d3:43:a7:1a:63:e5:65:c9:6a:1d:3f:f4:
26:d1:5c:26:b4:a4:e1:6e:c6:0f:df:83:1a:35:96:d0:ca:af:
a1:46:ce:a2:87:cf:05:59:53:33:47:af:4b:60:46:07:99:60:
7f:52:d0:1b:17:06:69:d6:36:05:5e:64:1d:27:99:eb:d6:77:
df:9d:f9:20:26:b2:92:f3:0d:83:16:51:82:e7:f6:fd:05:8f:
e1:d7:b7:b8:fb:a1:86:bb:30:5b:f8:1c:d0:a2:b8:01:17:72:
62:33:74:ea:47:08:ff:46:1c:2d:53:52:63:81:ed:fc:9a:df:
a0:0a:9a:7b:d8:cf:64:00:b7:b0:de:52:9a:cf:6d:69:18:60:
b7:d2:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:11 2024 by rpki-client on console-ams.rpki-client.org