Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
File: ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer (raw, json)
Hash identifier: UTQ3uzI18NbrT5EQtq1R3JF9uOLn3K3zEgwS/VY8TGI=
Subject key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 543A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Apr 2024 13:33:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 149.234.128.0 -- 149.234.185.255
IP: 149.234.187.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21562 (0x543a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 4 13:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:9c:8f:79:ec:ee:93:1e:e8:26:ec:1d:e5:
5a:8e:16:6f:60:87:99:e4:47:8b:5e:3e:6f:52:03:
c6:54:29:22:e8:a3:8e:d6:de:26:b8:09:06:ad:ee:
32:24:26:8e:a5:08:dd:07:ff:bc:e2:f2:26:dd:7d:
7f:41:b1:a6:6b:97:71:a5:be:a7:c7:e0:8e:19:15:
f5:2c:d0:a6:87:1e:56:51:ad:ce:65:ac:65:36:89:
db:dd:42:e4:f0:52:79:3e:bd:e0:c9:71:72:dd:69:
d8:51:7c:a0:37:9c:23:18:b3:ed:54:15:ee:72:e1:
be:38:64:e0:df:f1:60:98:57:40:a0:1e:96:b2:7a:
4e:33:83:06:6b:44:91:0a:79:b6:c5:65:44:c3:03:
e8:77:c1:55:84:6d:9a:08:6a:87:a2:47:df:0c:64:
e8:8a:17:5b:7b:e4:9c:22:8d:94:e2:c6:60:02:e3:
e1:35:b4:f8:48:a5:b6:8f:52:d3:b7:6f:fd:60:a8:
c9:db:a9:75:32:2f:88:a3:47:3d:af:61:81:da:f4:
de:fa:ca:2c:a1:c6:d9:dd:4f:7e:5b:8f:23:19:e5:
34:c0:e7:67:50:e9:11:ff:40:d0:03:ad:2d:ac:25:
97:52:02:e0:51:5a:57:05:92:b7:05:f4:c6:40:16:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.128.0-149.234.185.255
149.234.187.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d1:b7:ab:9e:d2:3b:06:6a:ad:69:56:3d:4d:cf:8b:1e:51:
16:2b:6c:c2:f2:4c:cf:d9:14:1c:cc:df:bb:6c:c0:80:fd:88:
2e:13:16:2b:19:d0:97:be:69:1a:fa:14:42:c0:75:88:93:38:
ee:c0:f8:f0:03:1d:19:1f:6e:13:fb:b1:4e:68:ea:b2:12:6b:
af:49:3c:d2:ce:3f:1f:30:a8:85:e4:0a:3f:25:07:32:e0:ac:
b6:da:42:ac:de:78:33:c7:d8:41:5f:5e:e6:98:9d:a3:e9:d8:
6b:9a:a9:4a:b7:9d:f6:10:60:d9:ba:5c:c0:ec:3f:4d:1f:ba:
9c:37:ff:c5:e9:e7:b3:02:80:d0:89:97:62:22:4d:1d:44:7e:
de:12:fa:56:d1:d5:e5:32:08:2b:5a:69:b6:80:ca:ab:8e:bb:
10:d5:00:bf:45:fc:a0:d7:c0:43:a0:9c:78:ff:ee:ef:6b:31:
63:7f:2e:f1:c8:a8:56:68:ca:81:a1:dc:5e:93:f3:f6:b7:f3:
66:33:03:64:91:35:81:0b:b7:7e:ed:7f:11:24:a2:8b:9a:7b:
c1:62:0d:22:a7:e3:ec:79:3a:9b:bc:74:90:c6:4f:13:b2:53:
95:30:5b:66:2b:74:1b:8c:c1:d9:76:c1:99:38:65:2a:9c:cc:
e7:87:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org