Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
File: PuJvukvjWd6uUAeS6_940ArLdgw.cer (raw, json)
Hash identifier: 4HlmVuLyUCsnSUPVzyl18AVxVlNtDbfzNeAP8e5Pnpw=
Subject key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4EF0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 02:26:43 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 149.234.189.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20208 (0x4ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 27 02:26:43 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:9e:15:9b:6a:54:87:ec:3e:05:48:c7:91:
41:28:54:65:d1:5e:0c:94:8b:c0:90:a1:23:49:88:
47:0e:dc:25:80:a7:4b:b6:bb:99:87:b7:b8:b2:ae:
8f:76:7e:39:49:f0:e6:d2:d4:28:d8:86:27:cd:8a:
25:3c:f9:21:b3:25:6c:f0:56:bc:e8:aa:77:90:f5:
26:b0:f1:62:62:44:be:96:6d:be:c1:9b:07:22:11:
8c:36:5f:b2:0e:e5:77:b3:df:f1:33:36:d9:d8:b6:
68:e7:62:b8:bb:80:07:f7:bc:be:91:06:fe:d9:eb:
a3:26:f9:88:4c:9f:14:7c:14:22:d1:d3:78:e9:c4:
28:f1:46:21:5b:a5:96:62:82:4c:5a:0b:4a:cf:d8:
b7:ba:f8:f0:be:af:e4:93:78:29:1f:72:cc:81:47:
32:6f:3f:d3:09:7b:23:e0:51:0b:bf:dc:c5:75:a3:
f1:83:87:b8:c6:61:ce:be:04:3d:81:a1:fe:2e:69:
94:a2:fe:e4:43:b9:da:ee:f2:fb:76:77:dc:cc:f4:
40:c5:ad:c2:29:86:dc:3c:04:9c:7f:88:07:83:6d:
23:cb:41:3a:55:85:9c:b0:cb:d1:b4:c5:b7:c4:b4:
c9:ac:99:a3:ac:f7:ba:e7:f1:b4:7e:34:1d:8c:c1:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:05:b0:53:d1:09:26:31:60:8d:26:ac:b5:d4:ff:10:d3:32:
05:75:5f:5c:2b:51:c8:de:a4:e4:67:9e:21:a0:08:f9:3d:74:
01:f5:a8:db:bf:e0:0c:49:20:1c:90:eb:e8:b2:40:0b:2f:0d:
21:b3:e2:36:7d:71:50:c6:e2:e4:14:10:32:36:8e:76:bc:15:
3c:20:48:7d:6c:62:36:e9:a3:78:5d:52:db:21:af:b9:a7:a3:
9c:34:99:f5:9f:5f:7f:f8:32:70:d2:71:17:90:5b:f2:2f:2b:
bc:ee:ac:d0:5e:1f:47:9d:96:c4:78:37:82:34:b4:92:a5:ae:
f8:3e:13:d1:4c:b4:34:ab:2e:4d:3a:26:0c:66:08:c3:68:03:
61:20:b1:13:f2:43:cd:3c:e1:67:d0:af:e8:11:bb:f6:16:82:
07:95:d7:0b:4c:87:48:64:9b:5d:eb:73:0b:21:47:4c:e2:6f:
23:7a:33:78:49:49:db:2d:a9:83:03:6b:9b:58:ab:06:29:0e:
29:85:9f:2c:d9:5f:bb:39:83:9f:8e:2f:8d:a6:75:86:4c:01:
54:88:71:95:8d:b0:0d:1e:89:3c:75:76:7b:34:56:1d:2c:29:
dc:cc:cb:19:42:b3:a4:63:ad:59:0f:da:a8:e8:c3:9c:72:da:
5d:47:08:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:51:16 2024 by rpki-client on console-ams.rpki-client.org