Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer (raw, json)
Hash identifier: lXcoriBxqxTHiA7055jiLtXuH+w9VAzmNcx3TDoxNqU=
Subject key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 52FE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 04 Mar 2024 17:36:41 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.5.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 20:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21246 (0x52fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 4 17:36:41 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:50:2a:9e:7e:c5:b6:7e:8b:8a:22:db:c0:
6c:a5:57:ee:10:6b:ae:c8:9f:c7:c2:45:1e:29:77:
50:d6:48:64:7e:a3:02:2c:c0:bd:eb:f1:d7:a9:c1:
98:d4:38:68:52:58:01:18:bc:e0:e6:5c:2a:fc:75:
16:58:40:9f:c1:5e:15:b2:7a:f5:ca:1c:e8:62:6f:
11:91:60:ea:db:de:75:cd:23:38:82:42:da:2f:10:
31:e9:ca:2c:66:a7:07:e0:3e:7f:01:78:0f:6b:10:
37:92:8e:60:ec:77:a5:0e:26:94:52:9e:b8:9d:22:
e4:fb:6a:69:92:3f:bd:4e:8e:75:70:71:37:27:a3:
b7:5a:77:55:a0:b3:ab:c8:55:65:a8:7e:58:32:f0:
ba:45:c1:7d:48:49:31:75:b9:94:79:7c:22:d3:c3:
6f:fa:38:4a:c8:75:7d:f8:67:98:36:d6:e2:c5:20:
93:bc:ec:8d:03:0c:21:6b:36:16:12:e7:6f:77:36:
96:9a:02:1c:dc:3d:eb:8b:6c:5b:04:48:06:80:b0:
30:28:b9:89:55:d9:bc:ce:f7:7c:d3:b6:7a:ec:5e:
2b:5b:84:62:21:ac:7e:ba:5b:01:55:68:9f:3c:aa:
7d:0a:6a:c1:a4:74:30:51:d6:44:7f:c9:8b:05:f3:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.5.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9c:77:81:a2:da:05:14:24:c9:3e:60:cf:37:39:a4:65:73:
4a:37:28:84:6c:d6:94:07:6d:ca:bf:a7:98:b8:ac:6c:f2:90:
50:24:9c:e8:b0:59:36:96:9d:0c:aa:97:35:dc:e2:9b:b6:fd:
df:55:aa:01:26:2a:da:f7:21:90:32:1f:1e:ca:d6:84:e1:43:
88:4b:8a:3b:15:65:6f:ca:f8:b0:23:0f:d8:1b:6a:19:87:91:
f3:96:6a:88:3e:56:15:f1:81:43:cf:05:4a:4d:d2:09:ff:15:
e1:04:34:65:2f:41:8f:97:ff:cd:4d:fb:6c:07:46:32:bb:74:
63:38:90:3f:94:43:36:9a:50:36:6e:08:56:fd:64:9d:aa:29:
e5:06:7f:c7:ba:2f:e4:d8:5d:dd:b4:62:74:44:a5:72:6a:f6:
39:af:97:50:36:55:ea:44:f8:d6:53:e2:07:b9:66:18:72:81:
71:96:ae:90:2c:05:ba:c0:1f:f7:86:74:90:c0:2e:1f:16:ba:
2e:ba:8c:cb:88:3d:33:84:ee:70:47:5b:57:eb:5b:6d:93:be:
e9:0e:b5:92:ea:2a:a8:9a:95:7d:7b:d5:17:69:12:fc:60:14:
55:0d:ad:9f:a1:2b:4f:93:db:40:e4:72:0e:16:42:57:4b:9f:
9d:18:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:32:39 2024 by rpki-client on console-ams.rpki-client.org