Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer (raw, json)
Hash identifier: UrbxmMVLTdkzfF1egk7P+A40kehfXn/SA0zPedRxPvM=
Subject key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0223AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Dec 2024 20:23:42 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 45.112.60.0/22
IP: 103.74.208.0/22
IP: 202.49.41.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140205 (0x223ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 19 20:23:42 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91D4E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:3b:52:56:d8:8d:c6:50:31:4f:30:14:6f:
93:73:7d:a5:ff:64:99:d4:ff:b9:bf:d9:74:f1:9f:
21:c2:de:c2:9f:d4:6b:43:7a:db:95:11:ea:bb:34:
e3:7e:05:cb:83:06:a9:31:45:d0:38:75:68:ca:e4:
39:e6:f7:a3:4c:f1:90:3f:65:8d:03:62:2b:b2:f1:
7b:d2:1d:16:97:0b:85:c4:31:de:8e:83:94:7d:92:
4b:be:a2:e0:39:d4:31:cb:29:1a:00:46:ae:07:e1:
85:52:71:6e:f2:61:3b:fe:77:e6:ae:34:94:7f:02:
06:a9:54:79:9d:26:8d:45:ee:82:2e:2c:d5:9e:f6:
58:48:79:4d:44:54:6a:e4:e1:49:10:ae:0d:6d:5c:
6e:2e:1d:fa:ae:89:99:db:80:1b:2e:66:0e:59:94:
8d:9c:cc:93:1e:cd:62:89:95:ca:af:c4:bb:2a:3b:
e1:de:f5:de:31:26:25:9e:33:e3:cd:c3:3b:a6:da:
cb:48:c6:f0:d0:5a:b4:38:77:30:f6:cc:b0:d7:7e:
c8:99:63:b7:df:2e:9d:c2:2b:75:69:ce:7f:01:96:
e9:ed:91:01:23:b4:4b:f9:c7:79:a2:1e:4b:25:b8:
06:dd:99:57:07:93:79:a4:5c:f0:2b:09:98:06:24:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.60.0/22
103.74.208.0/22
202.49.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c5:8d:e5:1f:e9:74:49:53:a1:c3:26:ad:76:e5:7f:6c:6b:
11:26:5b:84:6b:d0:f2:36:01:d0:c3:c5:bd:11:8e:59:c4:f3:
76:99:70:15:33:bd:c4:83:89:ce:c7:b9:02:1f:9d:99:77:e4:
00:18:8a:5a:44:85:a9:e4:0b:43:1f:42:23:2f:85:a1:2f:2c:
23:fa:c8:a0:ed:e1:3d:3e:b6:dd:2e:a3:11:87:c3:2a:d6:44:
62:10:6f:44:a1:8a:00:e4:55:89:d8:dd:50:9a:59:36:20:d6:
84:6d:81:08:19:72:e2:c3:5f:c3:9f:c4:0e:ef:a1:96:68:66:
bd:9c:ef:44:67:c1:38:b0:73:1f:ee:19:0e:c9:6a:49:bc:d7:
ed:05:c8:4e:54:ef:53:c4:2f:c6:37:41:99:8c:15:f9:67:ae:
2f:21:d7:89:c4:6b:a4:31:a3:e5:15:06:75:80:0b:a9:e1:34:
2c:4b:b4:af:ca:3a:db:af:18:0d:48:52:4b:ec:2f:bb:92:14:
76:c1:5c:79:d5:aa:4d:7a:93:e4:91:f0:76:87:c1:5a:f9:ee:
08:eb:ba:47:44:71:ad:1c:3c:a7:26:0e:ae:0d:ed:c2:06:ae:
a4:16:e1:04:f1:65:f7:f6:8e:62:e5:79:98:34:18:58:80:28:
48:2c:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:28 2025 by rpki-client