Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
File: Kz24XvlSI40ZLc8XDua-scjbA6k.cer (raw, json)
Hash identifier: 2FFWGIIUNbWnosHDh87xSqaEWI9aExDDObSru9Cpom4=
Subject key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5BDE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Oct 2024 20:51:14 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 192.111.102.0/24
IP: 192.150.218.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23518 (0x5bde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 7 20:51:14 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:27:f2:d4:8d:c7:53:2e:bd:ce:c3:e9:63:
83:a9:ec:dd:af:50:70:7b:6d:36:0c:a6:96:37:3d:
4f:95:41:5d:5c:48:74:0c:86:be:2b:cf:ab:79:1a:
32:fb:35:a9:a8:a1:d9:d4:82:e4:c6:f8:0f:17:62:
e1:74:9c:b9:c0:d0:5a:63:41:06:4f:2d:36:e1:30:
c4:d7:69:c7:01:b0:0a:62:d8:7e:fd:6b:4b:8c:db:
fa:a3:a4:f5:50:1e:4a:da:ca:87:fa:dd:f5:08:f0:
ac:db:7e:c7:3b:d5:40:4d:cf:4d:6e:ff:0c:a2:7c:
94:28:bf:fd:af:c5:88:08:33:20:c3:5f:e6:06:81:
55:7d:38:fe:64:33:8b:75:bb:1d:bd:ca:2d:b6:ac:
fb:ac:af:e7:30:38:9b:4e:71:88:f5:4e:69:c3:81:
e6:61:61:a4:79:77:4e:8a:2a:03:e5:b2:dd:59:f0:
e4:ae:43:af:3d:db:05:52:92:9c:ba:a7:37:d0:5c:
88:b6:f9:bf:a5:91:e8:a7:13:06:d5:db:69:31:8e:
2e:50:40:3d:31:32:9e:17:21:a0:52:fb:f1:f3:be:
86:f3:7e:0b:60:8b:e4:c0:18:99:ec:6b:38:14:3f:
41:39:60:a5:c2:65:0c:e5:e2:a7:3d:29:5b:55:72:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.111.102.0/24
192.150.218.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:0d:97:38:fe:3d:58:70:9e:2e:72:3e:e8:1c:27:6f:0b:92:
62:c7:16:38:bc:0d:05:f0:a7:71:ea:18:69:00:cb:7a:f2:7d:
6a:b8:22:e0:54:75:ff:00:fb:85:69:20:b2:a6:54:ed:b7:a2:
3a:0e:e5:8b:3b:47:25:2e:b7:fc:20:b7:a9:82:29:10:4b:e4:
6a:e0:e8:91:00:cd:78:6f:a4:c8:6c:6d:da:c1:14:06:6b:2f:
8a:fb:19:dc:b6:70:93:60:c3:49:aa:19:7d:b1:43:e4:68:43:
2e:bf:bf:e6:ef:b2:a7:9e:ac:39:5e:0c:a1:5b:08:c7:c6:f6:
83:45:3b:d4:6b:12:67:67:63:1c:08:1e:26:74:a4:93:c1:ee:
2d:37:14:b2:81:fb:6b:63:58:6e:cd:5d:5f:de:fe:04:d0:dc:
d9:0e:21:40:e3:f0:13:ae:a9:75:aa:19:c0:90:16:91:a7:17:
35:9e:8e:b0:c8:2b:f8:fb:77:33:0b:b2:db:c6:89:ff:2c:12:
6b:8a:0b:2b:24:b4:2c:00:7e:84:4d:af:c7:33:07:ed:db:57:
f1:a9:a7:99:03:01:97:a0:43:6c:90:72:7d:36:5c:4e:c4:2d:
e0:d1:29:66:0e:00:16:01:f4:70:b8:c6:75:d5:3e:36:12:aa:
79:8c:7a:06
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICW94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMDA3MjA1MTE0WhcNMjUwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5RjUyNTExMC8GA1UEBRMoMkIzREI4NUVGOTUyMjM4RDE5MkRDRjE3
MEVFNkJFQjFDOERCMDNBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJxLJ/LUjcdTLr3Ow+ljg6ns3a9QcHttNgymljc9T5VBXVxIdAyGvivPq3kaMvs1
qaih2dSC5Mb4Dxdi4XScucDQWmNBBk8tNuEwxNdpxwGwCmLYfv1rS4zb+qOk9VAe
StrKh/rd9QjwrNt+xzvVQE3PTW7/DKJ8lCi//a/FiAgzIMNf5gaBVX04/mQzi3W7
Hb3KLbas+6yv5zA4m05xiPVOacOB5mFhpHl3TooqA+Wy3Vnw5K5Drz3bBVKSnLqn
N9BciLb5v6WR6KcTBtXbaTGOLlBAPTEynhchoFL78fO+hvN+C2CL5MAYmexrOBQ/
QTlgpcJlDOXipz0pW1Vynz8CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQrPbhe+VIj
jRktzxcO5r6xyNsDqTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUY1MjUvRTE4NzE3NzY4NEVEMTFFRkI5RkYyRDVBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlGNTI1L0UxODcxNzc2ODRFRDExRUZCOUZGMkQ1QUM0RjlBRTAyL0t6MjRYdmxT
STQwWkxjOFhEdWEtc2NqYkE2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAMBvZgMEAcCW2jANBgkqhkiG9w0BAQsFAAOCAQEAXA2XOP49WHCe
LnI+6BwnbwuSYscWOLwNBfCnceoYaQDLevJ9argi4FR1/wD7hWkgsqZU7beiOg7l
iztHJS63/CC3qYIpEEvkauDokQDNeG+kyGxt2sEUBmsvivsZ3LZwk2DDSaoZfbFD
5GhDLr+/5u+yp56sOV4MoVsIx8b2g0U71GsSZ2djHAgeJnSkk8HuLTcUsoH7a2NY
bs1dX97+BNDc2Q4hQOPwE66pdaoZwJAWkacXNZ6OsMgr+Pt3Mwuy28aJ/ywSa4oL
KyS0LAB+hE2vxzMH7dtX8amnmQMBl6BDbJByfTZcTsQt4NEpZg4AFgH0cLjGddU+
NhKqeYx6Bg==
-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:15 2024 by rpki-client on console-fra.rpki-client.org