Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer (raw, json)
Hash identifier: kEiOq46IqzCg0GqQoQcfhDtleOVglToL+9eP0pDB0dI=
Subject key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023314
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Feb 2025 08:23:25 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 202.44.128.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144148 (0x23314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 25 08:23:25 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9173CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:45:61:7e:86:52:a4:6d:ae:bf:98:7e:89:
a0:82:5e:a1:b0:14:33:11:d1:22:6e:7d:34:d3:a9:
0d:ca:6f:a5:79:97:48:2f:9e:1d:54:90:80:37:7f:
da:90:a3:49:97:bd:ec:3e:3b:e8:62:eb:34:76:38:
b4:8f:48:b5:c4:5e:4d:97:7c:72:0f:c6:33:d2:fe:
1e:f2:f6:83:bf:65:79:67:d9:53:8c:d5:97:6f:35:
74:bc:25:12:94:ff:4e:c5:78:ec:d2:d6:47:3a:dd:
03:3a:a2:e9:27:64:27:8a:79:77:56:2d:e4:4c:29:
05:be:c8:63:d2:a6:e6:77:95:f6:08:68:fd:e3:36:
ea:98:d1:4c:75:a3:72:3b:d3:8e:5d:97:b1:cb:4b:
dd:55:bd:4a:ce:f5:72:a3:06:cf:2f:b4:ff:35:c1:
9e:c6:84:e4:6a:ed:9c:d4:c8:eb:71:8a:9f:4b:8f:
e2:f3:b7:11:b2:25:0c:aa:f3:8c:8d:cc:9f:0f:84:
a9:7e:71:a7:97:dd:73:46:0a:d4:19:f9:38:10:62:
e6:7b:5f:61:b5:1a:ef:51:06:1e:14:52:7a:4b:f3:
d2:e6:40:c2:72:2d:93:cd:8a:62:0e:82:4b:d6:ea:
67:f2:4a:a4:41:c8:f6:82:cf:7f:fa:44:42:43:30:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e3:3f:d0:76:56:d4:f4:86:20:cc:b4:b8:80:33:ae:9f:23:
38:65:74:e6:be:6f:06:3c:1b:88:e2:7f:f4:da:71:81:07:4f:
fb:d7:71:57:2a:05:d1:9d:74:e6:bd:aa:56:0d:e5:44:8e:51:
8e:d0:9a:1b:8a:00:c5:e3:a9:e8:20:48:be:ca:00:49:d6:40:
23:58:91:5c:f3:ae:35:e7:19:29:73:fa:87:80:74:7d:c8:fc:
6b:cb:61:9f:95:04:a4:d3:6b:a4:17:a4:2a:1f:4c:f7:97:4e:
4d:c4:c2:02:40:21:3a:90:62:f0:a0:75:bf:39:a0:8b:e6:c4:
35:ae:fe:1f:aa:39:0f:6d:71:b0:5a:71:35:d6:2f:bc:e3:e5:
73:63:6b:7b:a4:62:18:e9:d2:b9:39:16:af:95:76:dc:e7:9b:
55:07:d5:15:f7:8c:93:ec:cc:85:9d:a0:e4:9a:08:f6:be:f1:
32:2b:04:b9:93:4c:6f:34:78:4b:11:d2:1f:61:bc:67:d5:d9:
17:a9:67:46:3e:a5:97:ac:0b:45:33:d9:60:ea:1d:36:e1:ba:
64:95:fa:a4:4e:19:1d:a0:a2:f2:1c:10:03:a3:59:be:ea:31:
9b:7d:13:df:06:27:88:ae:cd:a1:20:9b:3c:9d:3d:9b:85:82:
80:e4:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:43 2025 by rpki-client