Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
File: 1j3oKnWfllf48HOyUSUarme6S6Y.cer (raw, json)
Hash identifier: ySDe2oBowSjCdIDxONgYM8KbZAKY2qedKNDuoHQcxkQ=
Subject key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5922
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Aug 2024 13:07:09 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 147.50.0.0 -- 147.50.32.255
IP: 147.50.34.0 -- 147.50.62.255
IP: 147.50.64.0 -- 147.50.78.255
IP: 147.50.128.0 -- 147.50.175.255
IP: 147.50.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22818 (0x5922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 1 13:07:09 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:52:6f:ad:2e:28:53:91:ec:1f:b7:34:dd:
b9:e0:8d:2e:0f:f5:2d:2b:1f:a4:44:64:f7:c5:46:
91:47:0a:e5:23:06:19:5b:d6:c4:49:0a:46:41:bd:
72:d9:e2:aa:d9:c5:fc:fd:a3:ac:61:3d:01:34:ca:
d3:c1:75:03:b2:b9:5b:1a:da:f9:32:69:1e:dd:7a:
05:47:27:a8:1e:b1:76:56:79:cf:68:61:17:3e:96:
49:6d:65:84:3e:2e:67:dd:96:00:9c:e3:4f:bd:66:
e0:b0:5d:ad:39:ea:ca:12:14:5f:33:e4:16:9a:3a:
1d:fe:71:fb:0c:b7:7a:27:31:6e:0a:9b:d5:f5:ad:
3d:ab:7f:fa:81:cb:4c:53:fd:d4:a5:f0:a6:b7:e0:
5c:b5:a1:e8:c6:b9:b6:8c:f3:f2:8a:77:29:30:1f:
41:ae:6e:41:68:d1:41:df:42:c2:79:37:26:ca:3f:
a0:80:f3:0d:a7:18:0b:82:98:a4:cb:60:d4:cc:e5:
84:8c:cc:1b:36:3a:23:7f:d1:6e:b4:3d:38:5a:6c:
ca:45:c1:29:47:4c:13:51:db:90:6b:c3:a3:54:03:
ca:01:02:7c:aa:34:8b:2e:17:23:9e:77:30:9a:2d:
98:81:fc:84:99:d5:91:81:1a:16:ff:a0:5a:e7:5f:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.0.0-147.50.32.255
147.50.34.0-147.50.62.255
147.50.64.0-147.50.78.255
147.50.128.0-147.50.175.255
147.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:6e:aa:97:f4:e7:6f:19:c9:9a:f7:e3:aa:c9:ff:d5:36:6b:
e8:41:ed:8b:12:32:55:2b:c0:3f:05:8c:9d:87:e6:c6:94:0d:
13:ed:67:65:c6:d6:b9:b9:1c:bf:87:5a:76:83:8f:5f:06:b7:
14:54:c9:40:a1:5c:79:cb:70:86:9f:75:a2:76:a9:2d:3d:49:
8c:58:5d:5a:8c:ab:a1:45:85:b0:b2:01:98:4f:e4:b1:dc:c8:
e6:75:8c:8f:f3:8d:07:e2:0b:2e:31:3a:90:36:07:47:68:4b:
a8:87:20:8c:fa:d6:fd:15:d9:91:68:1e:18:bd:d7:65:73:f0:
8b:09:c5:6d:2e:e9:dc:6b:ed:a1:f6:45:e3:7b:aa:87:d6:c0:
e6:74:74:96:37:fc:2c:7b:83:27:c3:bc:80:19:73:3c:9a:1e:
e2:73:2d:98:0b:05:c5:6c:3b:31:94:3a:e5:54:1f:29:a5:a4:
2f:da:2c:e8:bc:c4:dd:8a:74:89:b2:11:f3:f7:ee:1a:ae:39:
78:0b:ca:3f:6c:06:17:fb:db:8f:99:a4:4b:2a:06:6e:52:5e:
63:33:60:3f:d7:84:8c:10:64:0f:84:41:0d:69:4f:fb:a3:35:
39:6e:67:51:9e:79:e1:41:c1:ee:7a:07:68:84:6f:43:ca:6e:
d5:59:90:a5
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgICWSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwODAxMTMwNzA5WhcNMjUwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyNjJDQTExMC8GA1UEBRMoRDYzREU4MkE3NTlGOTY1N0Y4RjA3M0Iy
NTEyNTFBQUU2N0JBNEJBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALgJUm+tLihTkewftzTdueCNLg/1LSsfpERk98VGkUcK5SMGGVvWxEkKRkG9ctni
qtnF/P2jrGE9ATTK08F1A7K5Wxra+TJpHt16BUcnqB6xdlZ5z2hhFz6WSW1lhD4u
Z92WAJzjT71m4LBdrTnqyhIUXzPkFpo6Hf5x+wy3eicxbgqb1fWtPat/+oHLTFP9
1KXwprfgXLWh6Ma5tozz8op3KTAfQa5uQWjRQd9Cwnk3Jso/oIDzDacYC4KYpMtg
1MzlhIzMGzY6I3/RbrQ9OFpsykXBKUdME1HbkGvDo1QDygECfKo0iy4XI553MJot
mIH8hJnVkYEaFv+gWudfV/8CAwEAAaOCAyowggMmMB0GA1UdDgQWBBTWPegqdZ+W
V/jwc7JRJRquZ7pLpjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI2MkNBL0VDMUVFNjUyOEE1NzExRUM5NkVCQzAxNEM0RjlBRTAyLzFqM29Lbldm
bGxmNDhIT3lVU1Vhcm1lNlM2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBWBggrBgEFBQcBBwEB/wRHMEUw
QwQCAAEwPTALAwMBkzIDBACTMiAwDAMEAZMyIgMEAJMyPjAMAwQGkzJAAwQAkzJO
MAwDBAeTMoADBASTMqADBAWTMuAwDQYJKoZIhvcNAQELBQADggEBALxuqpf0528Z
yZr346rJ/9U2a+hB7YsSMlUrwD8FjJ2H5saUDRPtZ2XG1rm5HL+HWnaDj18GtxRU
yUChXHnLcIafdaJ2qS09SYxYXVqMq6FFhbCyAZhP5LHcyOZ1jI/zjQfiCy4xOpA2
B0doS6iHIIz61v0V2ZFoHhi912Vz8IsJxW0u6dxr7aH2ReN7qofWwOZ0dJY3/Cx7
gyfDvIAZczyaHuJzLZgLBcVsOzGUOuVUHymlpC/aLOi8xN2KdImyEfP37hquOXgL
yj9sBhf724+ZpEsqBm5SXmMzYD/XhIwQZA+EQQ1pT/ujNTluZ1GeeeFBwe56B2iE
b0PKbtVZkKU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org