Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer
File: D4D0DTKGhSybn240W-HVvS-VSDI.cer (raw, json)
Hash identifier: JkvJHglXFgiYzbCnT/7XvnyE7WiDe9ZIw8P+2Gd8ims=
Subject key identifier: 0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4545
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 Mar 2024 12:47:17 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 185.203.36.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Apr 2024 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17733 (0x4545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Mar 2 12:47:17 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:df:6d:7f:cf:09:de:bb:3c:bb:6e:01:2d:
86:e6:a2:e4:3c:94:d5:e1:c2:0a:3e:f8:2d:d9:b4:
5f:07:52:91:e2:57:b6:69:24:03:59:2b:bd:41:00:
62:61:75:82:29:71:7c:fe:b6:17:9d:88:55:10:56:
3e:dc:48:4a:20:ac:d9:4f:2e:dd:21:f2:04:ab:57:
5f:c4:f0:1f:6d:34:1a:73:78:ea:18:bb:ac:bf:c4:
05:a2:b8:e3:08:de:42:58:60:78:58:c4:10:17:0b:
21:f5:ab:04:1c:db:9f:ce:11:7e:35:dc:bc:23:f7:
ac:fb:0e:35:a0:cf:bf:6b:a9:27:f1:ff:fc:ef:f9:
8f:86:06:55:a6:bb:2a:2c:2c:af:71:7e:1d:be:4d:
20:94:62:3c:22:5f:e5:b0:db:d4:15:6b:fa:36:f9:
b4:6d:e3:97:c1:4c:6e:2a:0d:fe:a7:9e:e4:ff:a3:
00:22:de:e9:33:97:dd:6d:39:71:c7:33:c6:2a:26:
ce:bf:a9:c8:da:b5:a1:b1:78:8c:e5:e8:20:43:73:
86:20:1f:a8:0a:1a:70:5b:58:51:86:54:65:9e:eb:
e6:8b:7e:86:3c:83:ab:6b:43:8c:ea:d4:a3:f5:8f:
59:2b:2d:29:a5:3d:fa:f5:de:0f:f2:10:1d:87:2c:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.203.36.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:5e:8b:1b:07:1b:b3:70:a8:57:37:a0:07:fb:97:38:a3:0f:
69:87:cc:13:a6:8b:e1:ae:ae:8f:30:85:4b:d4:74:b2:d1:2b:
92:62:53:26:cf:72:c8:0e:eb:ef:4f:45:59:8a:97:3c:f3:9a:
8b:7e:dd:ef:1f:de:f1:1b:8d:93:0f:8b:db:d2:61:42:b2:9c:
15:f2:1a:c9:3a:42:cc:92:84:30:f5:35:29:8c:bc:01:9f:0e:
c5:d7:d8:e6:bd:19:e5:d8:a8:3a:cc:4a:78:5d:2d:7f:5a:d6:
d4:22:e7:e3:2e:b9:ad:29:f7:5b:6a:6f:38:00:94:27:4b:b7:
ab:fd:c7:cb:dc:6a:ca:3b:76:ac:5d:a7:15:10:26:3d:a6:31:
dc:7b:de:cf:47:f2:0e:b6:9a:45:ea:ae:b2:6d:aa:d4:b2:69:
c5:22:84:bd:87:8b:76:9c:e8:bd:aa:eb:97:e3:dc:6f:56:dc:
d9:1a:a2:e1:93:c8:65:9a:33:94:a4:0c:a8:44:9a:74:05:51:
fa:e7:11:b4:fc:c0:d6:ce:8f:23:cb:6e:a4:2d:25:22:6e:25:
89:9d:bf:8f:7f:3b:43:5a:a7:bf:7e:3a:6e:d4:6b:18:2d:81:
1e:ab:f7:6f:8c:a4:9c:5f:a9:0b:98:b5:31:59:0c:c1:65:ad:
d8:92:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 03:15:48 2024 by rpki-client on console-fra.rpki-client.org