Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
File: tsp04BddZ-Guvoa_44xciY8mK4w.cer (raw, json)
Hash identifier: TrCUSIItRsM7lZnFr7054BHWSDtDKX3HmvPEDFUMCAY=
Subject key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4F86
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 21 Dec 2023 04:57:03 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 192.94.208.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20358 (0x4f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 21 04:57:03 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:1e:20:c4:e9:86:1b:b8:2d:3f:c5:80:d7:
3f:ca:35:16:ae:b5:cd:1d:94:b0:89:ff:ed:62:41:
87:90:c4:9f:98:22:4a:a9:a8:b2:8f:12:15:69:23:
50:09:7f:7f:08:f3:5a:eb:bd:92:92:49:a0:67:49:
7f:6b:3e:a1:54:b6:a0:8e:9e:cd:d1:da:31:b7:8d:
33:90:d0:fc:a8:cf:86:b2:36:43:5e:f5:79:e2:ef:
8b:b5:46:69:45:b4:75:11:71:fc:2a:f8:15:29:d5:
5a:70:45:4f:45:a3:58:92:c1:23:e1:c3:c3:5c:b3:
9f:d5:c7:b5:b1:40:44:2c:8d:8f:76:28:b7:a2:24:
6d:40:4b:e1:87:8b:36:15:d5:3a:02:9b:86:0e:10:
39:6c:4d:e5:b8:3f:1f:80:ec:08:8a:3f:de:30:49:
12:5f:66:81:58:1a:67:c8:f2:5b:2e:e8:4e:61:2d:
bf:02:7d:57:8d:47:d3:c5:7c:dc:ef:12:80:2e:cd:
db:ca:4a:b9:5e:c5:2a:ce:7f:ad:10:d2:91:88:5d:
3f:f3:a0:f8:1e:8b:ed:3b:96:7b:df:6e:55:7c:03:
06:ed:9f:4a:36:5f:90:dc:1a:49:10:e5:70:d2:81:
24:77:52:a9:57:3d:55:bf:a3:bf:d3:fb:39:84:24:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.94.208.0/24
Signature Algorithm: sha256WithRSAEncryption
57:dc:d8:25:57:f6:c2:5d:63:d7:79:c4:ba:0d:d6:8c:1d:ef:
69:f8:23:61:92:73:40:06:d2:a5:1f:71:f3:ec:18:83:ce:a5:
c5:e5:36:53:28:21:ff:0d:ec:39:c5:f3:09:f9:8d:6b:4c:e9:
8c:a6:ac:bf:4a:fa:4f:ca:c6:32:71:7b:8b:7b:f2:bc:45:b0:
ce:71:cd:ef:9e:5f:07:94:04:a6:9f:74:b8:c9:d7:43:22:e3:
5a:56:fb:e2:3a:ce:e0:3b:3a:32:43:fc:ee:a3:9c:c7:a9:73:
e2:b7:6b:1f:03:d8:15:77:38:5a:f9:f6:4d:26:cf:47:f7:8e:
8c:ac:8c:ce:e5:2e:99:b9:55:93:74:19:01:32:f0:44:40:a2:
a7:2a:bb:e9:2d:4e:99:4e:98:bd:9e:99:77:88:f5:61:d1:40:
ef:0e:95:2c:91:c0:9d:ab:84:ba:87:84:ee:71:72:98:3f:91:
6a:3e:50:11:7a:3e:51:85:f5:2c:01:66:10:f0:6a:66:b0:6e:
7a:e6:9f:c3:b6:7f:3b:b0:09:e4:c5:32:02:2e:70:ad:ad:e5:
b5:1b:6b:02:4f:0d:0e:a0:da:2d:0a:19:0e:02:cf:1a:38:0a:
ea:5f:7e:ef:cd:94:80:06:aa:ee:7b:6b:ff:91:5a:96:e3:0d:
a8:fc:aa:6e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICT4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMxMjIxMDQ1NzAzWhcNMjUwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5RUE0MDExMC8GA1UEBRMoQjZDQTc0RTAxNzVENjdFMUFFQkU4NkJG
RTM4QzVDODk4RjI2MkI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKiKHiDE6YYbuC0/xYDXP8o1Fq61zR2UsIn/7WJBh5DEn5giSqmoso8SFWkjUAl/
fwjzWuu9kpJJoGdJf2s+oVS2oI6ezdHaMbeNM5DQ/KjPhrI2Q171eeLvi7VGaUW0
dRFx/Cr4FSnVWnBFT0WjWJLBI+HDw1yzn9XHtbFARCyNj3Yot6IkbUBL4YeLNhXV
OgKbhg4QOWxN5bg/H4DsCIo/3jBJEl9mgVgaZ8jyWy7oTmEtvwJ9V41H08V83O8S
gC7N28pKuV7FKs5/rRDSkYhdP/Og+B6L7TuWe99uVXwDBu2fSjZfkNwaSRDlcNKB
JHdSqVc9Vb+jv9P7OYQkVwcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS2ynTgF11n
4a6+hr/jjFyJjyYrjDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVBNDAvNDkwNkYyQTg4MEYwMTFFREFBRTQ4RjdCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlFQTQwLzQ5MDZGMkE4ODBGMDExRURBQUU0OEY3QkM0RjlBRTAyL3RzcDA0QmRk
Wi1HdXZvYV80NHhjaVk4bUs0dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMBe0DANBgkqhkiG9w0BAQsFAAOCAQEAV9zYJVf2wl1j13nEug3W
jB3vafgjYZJzQAbSpR9x8+wYg86lxeU2Uygh/w3sOcXzCfmNa0zpjKasv0r6T8rG
MnF7i3vyvEWwznHN755fB5QEpp90uMnXQyLjWlb74jrO4Ds6MkP87qOcx6lz4rdr
HwPYFXc4Wvn2TSbPR/eOjKyMzuUumblVk3QZATLwRECipyq76S1OmU6YvZ6Zd4j1
YdFA7w6VLJHAnauEuoeE7nFymD+Raj5QEXo+UYX1LAFmEPBqZrBueuafw7Z/O7AJ
5MUyAi5wra3ltRtrAk8NDqDaLQoZDgLPGjgK6l9+782UgAaq7ntr/5FaluMNqPyq
bg==
-----END CERTIFICATE-----
Generated at Thu May 9 03:29:32 2024 by rpki-client on console-fra.rpki-client.org