Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
File: 0PiwBllsfAN8tUkwWzlpAACq6KQ.cer (raw, json)
Hash identifier: 0tctkIrm+vcduhB3Q6j4tO2PPwehfXnAcBrPAo4Nshk=
Subject key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 524D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 Feb 2024 11:10:37 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.20.56.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 17:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21069 (0x524d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 16 11:10:37 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:6f:b6:56:22:0c:00:22:a5:e5:a9:cc:b7:
a5:84:24:41:24:52:27:82:d1:f5:79:f7:82:0a:73:
84:55:cf:5f:58:73:ef:02:ae:f6:7c:79:e3:2c:17:
03:38:d1:33:26:d4:e2:9f:35:c9:60:5e:64:a6:d7:
de:c3:63:30:2e:f3:4f:42:b7:24:d4:15:ce:6e:1c:
f5:5e:8f:ed:5f:ed:d2:6b:27:90:3b:d2:f6:ca:13:
56:c3:b4:d5:95:87:f8:b5:e0:1f:48:52:7c:a0:51:
81:4c:f3:92:9c:cb:40:25:85:c5:72:4b:ed:36:d5:
a5:dc:f0:6a:e3:0e:6d:95:5f:d5:61:b4:e5:7c:e6:
36:06:39:ed:4e:3d:b7:a5:84:91:3b:64:ed:37:c0:
fd:bf:0a:5b:6a:b1:83:d1:07:8c:3c:9a:48:fb:40:
66:90:95:18:22:33:d9:62:b8:ed:2d:0e:cd:fb:e1:
70:5d:d8:6e:7f:27:56:e2:10:10:b9:49:2d:f5:73:
65:1a:ff:4a:74:a7:fd:65:c9:8e:0b:16:77:3f:39:
86:e2:27:e9:1d:34:22:c2:58:54:50:d8:bf:f9:b5:
19:1e:48:d5:01:cb:99:b9:56:e0:72:ec:c5:c7:6e:
04:fc:4b:f4:6d:10:db:aa:1f:10:4f:24:38:1c:9b:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.56.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:87:4b:8b:66:3c:f6:7f:f6:61:6a:66:2c:c2:82:25:12:6a:
db:1e:f5:3b:f6:8b:90:c9:ae:83:8e:4b:77:80:f6:65:00:44:
a3:4a:ff:bc:c9:6d:32:de:91:cf:42:2f:3c:7b:55:b6:c4:3c:
a6:52:0e:22:67:16:c5:dd:13:fc:ed:7d:35:da:ef:35:32:1a:
f1:08:d9:8f:27:32:7b:63:41:ee:fc:b7:79:10:fe:c1:0c:d0:
03:fb:74:48:17:b3:84:99:5d:64:48:e1:aa:ff:51:af:3b:36:
e3:bf:72:42:d0:56:91:35:c2:64:ff:a3:5c:86:60:ae:f4:3a:
9f:9c:5f:6a:95:82:2a:bb:dd:72:56:20:d8:2f:a7:e4:08:f5:
9f:df:21:81:f7:9e:86:7e:29:5f:92:23:78:8a:ed:b6:e3:19:
15:a4:59:c7:8e:b3:9b:a5:76:2f:6a:b4:f3:fe:96:ad:26:dc:
ca:85:5a:90:ed:44:37:b3:88:0c:eb:cb:b3:c5:6a:f0:b8:e3:
7a:9e:cc:e4:9e:bd:a0:a8:8c:af:29:63:cd:74:8a:f0:ff:95:
89:55:49:5d:22:a7:97:51:2e:fb:82:ba:d2:51:22:db:49:07:
10:7a:e3:c7:86:bf:86:38:0d:e5:84:a6:4d:1b:f5:d2:53:6c:
19:b0:08:18
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwMjE2MTExMDM3WhcNMjUwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3NTRDMDExMC8GA1UEBRMoRDBGOEIwMDY1OTZDN0MwMzdDQjU0OTMw
NUIzOTY5MDAwMEFBRThBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM/Kb7ZWIgwAIqXlqcy3pYQkQSRSJ4LR9Xn3ggpzhFXPX1hz7wKu9nx54ywXAzjR
MybU4p81yWBeZKbX3sNjMC7zT0K3JNQVzm4c9V6P7V/t0msnkDvS9soTVsO01ZWH
+LXgH0hSfKBRgUzzkpzLQCWFxXJL7TbVpdzwauMObZVf1WG05XzmNgY57U49t6WE
kTtk7TfA/b8KW2qxg9EHjDyaSPtAZpCVGCIz2WK47S0OzfvhcF3Ybn8nVuIQELlJ
LfVzZRr/SnSn/WXJjgsWdz85huIn6R00IsJYVFDYv/m1GR5I1QHLmblW4HLsxcdu
BPxL9G0Q26ofEE8kOBybUekCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTQ+LAGWWx8
A3y1STBbOWkAAKropDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU0QzAvRkVERjU3MkVDQ0JCMTFFRThBMEY3NzQ4QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc1NEMwL0ZFREY1NzJFQ0NCQjExRUU4QTBGNzc0OEM0RjlBRTAyLzBQaXdCbGxz
ZkFOOHRVa3dXemxwQUFDcTZLUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0UODANBgkqhkiG9w0BAQsFAAOCAQEAvIdLi2Y89n/2YWpmLMKC
JRJq2x71O/aLkMmug45Ld4D2ZQBEo0r/vMltMt6Rz0IvPHtVtsQ8plIOImcWxd0T
/O19NdrvNTIa8QjZjycye2NB7vy3eRD+wQzQA/t0SBezhJldZEjhqv9Rrzs2479y
QtBWkTXCZP+jXIZgrvQ6n5xfapWCKrvdclYg2C+n5Aj1n98hgfeehn4pX5IjeIrt
tuMZFaRZx46zm6V2L2q08/6WrSbcyoVakO1EN7OIDOvLs8Vq8Ljjep7M5J69oKiM
ryljzXSK8P+ViVVJXSKnl1Eu+4K60lEi20kHEHrjx4a/hjgN5YSmTRv10lNsGbAI
GA==
-----END CERTIFICATE-----
Generated at Fri May 3 17:55:00 2024 by rpki-client on console-fra.rpki-client.org