Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
File: 44pe3hloyTdeUVUfrpiIigu1RJA.cer (raw, json)
Hash identifier: 7rw5wxBk+G7PU8xwhyB9b8fYM0wZl0BEOdqmtUOVqDs=
Subject key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 606A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jan 2025 05:03:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.53.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24682 (0x606a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 8 05:03:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91AAC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:df:87:bf:f3:fa:ec:2d:30:46:66:b2:bf:
01:52:cc:07:42:0e:bf:f1:57:43:53:9f:7e:cf:08:
25:42:87:96:32:05:c0:89:1e:79:8e:cb:19:97:a3:
83:e5:3a:13:c8:c6:0c:92:ca:72:8b:2a:b6:28:11:
94:e1:30:2c:7c:87:8f:37:05:b3:f4:88:f6:0d:bb:
36:ed:b9:bf:d1:ad:07:70:98:14:ac:d3:44:3a:6e:
4d:4a:d1:03:04:9c:29:09:2f:8c:77:df:b1:88:b5:
8d:fb:ba:4b:a6:06:c1:b7:4b:2d:0e:f3:51:81:74:
28:1b:dc:e8:09:6d:8c:b7:2f:59:a3:d2:69:17:a8:
6b:f0:db:4c:9c:d4:b6:5b:5b:fa:03:c3:63:a8:2a:
4d:23:d1:76:a5:55:3c:6f:27:7c:81:97:08:af:59:
91:90:4d:08:15:53:55:61:58:bc:dd:18:e2:87:0f:
44:c5:fc:af:0e:f0:cb:c3:e7:05:69:17:53:f3:4b:
9c:a5:23:1d:e6:e4:68:98:93:15:54:d3:bf:ab:47:
a7:5e:ec:46:2d:14:e4:0c:63:ae:da:bc:0f:a3:77:
54:62:d3:3e:56:d9:12:42:90:52:0d:16:64:9b:98:
9e:fe:3a:75:f5:a0:87:7d:c9:27:43:4a:e0:10:c6:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.53.0/24
Signature Algorithm: sha256WithRSAEncryption
47:43:8a:85:4a:b6:80:4f:d3:a2:3e:ab:20:8b:c1:c1:d0:7e:
5e:80:c6:5e:ed:3c:29:dd:fa:b6:b9:a0:56:1a:11:86:5f:95:
72:c1:f0:81:5d:0e:e2:7c:59:fb:09:af:97:c8:e3:ee:79:cb:
a2:b6:f0:d0:6b:9b:c2:cc:6a:c7:9c:cf:ee:9e:1e:5b:1d:05:
d6:69:a7:6a:6e:e3:a9:e0:58:0d:37:d7:7a:dc:57:2e:2f:f9:
41:aa:d5:f8:34:f8:94:9d:2d:5d:a6:b7:d2:61:3a:0f:ce:54:
f6:95:82:95:4a:32:41:ed:9b:ef:13:96:39:44:04:f3:26:7b:
59:eb:64:8f:97:06:47:93:2a:40:c4:70:f6:0e:fa:14:73:d3:
64:fd:50:d3:41:75:42:fb:52:01:0b:68:6b:6a:03:ce:22:6c:
aa:a7:f2:33:36:f8:44:5a:9b:2c:7b:24:5e:94:da:16:fe:4f:
b1:61:83:f5:ec:01:cc:26:45:84:d9:ad:23:a8:55:69:cb:43:
e1:d7:96:04:8e:8b:8a:56:3a:0d:d7:55:74:29:7b:ba:7c:5f:
92:14:82:3d:c3:57:eb:8b:c7:26:c1:90:6f:01:7a:db:f5:13:
6d:02:35:04:f8:3b:b8:25:cd:6a:6e:48:4c:50:dd:1d:7c:41:
5a:cc:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:57:27 2025 by rpki-client