Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
File: PuJvukvjWd6uUAeS6_940ArLdgw.cer (raw, json)
Hash identifier: Fn3BOIVpeclVf0pCkgYXftVnc3JGqq5WZpIlbS2UYpg=
Subject key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5CA7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Oct 2024 00:39:58 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 149.234.189.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23719 (0x5ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 21 00:39:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:9e:15:9b:6a:54:87:ec:3e:05:48:c7:91:
41:28:54:65:d1:5e:0c:94:8b:c0:90:a1:23:49:88:
47:0e:dc:25:80:a7:4b:b6:bb:99:87:b7:b8:b2:ae:
8f:76:7e:39:49:f0:e6:d2:d4:28:d8:86:27:cd:8a:
25:3c:f9:21:b3:25:6c:f0:56:bc:e8:aa:77:90:f5:
26:b0:f1:62:62:44:be:96:6d:be:c1:9b:07:22:11:
8c:36:5f:b2:0e:e5:77:b3:df:f1:33:36:d9:d8:b6:
68:e7:62:b8:bb:80:07:f7:bc:be:91:06:fe:d9:eb:
a3:26:f9:88:4c:9f:14:7c:14:22:d1:d3:78:e9:c4:
28:f1:46:21:5b:a5:96:62:82:4c:5a:0b:4a:cf:d8:
b7:ba:f8:f0:be:af:e4:93:78:29:1f:72:cc:81:47:
32:6f:3f:d3:09:7b:23:e0:51:0b:bf:dc:c5:75:a3:
f1:83:87:b8:c6:61:ce:be:04:3d:81:a1:fe:2e:69:
94:a2:fe:e4:43:b9:da:ee:f2:fb:76:77:dc:cc:f4:
40:c5:ad:c2:29:86:dc:3c:04:9c:7f:88:07:83:6d:
23:cb:41:3a:55:85:9c:b0:cb:d1:b4:c5:b7:c4:b4:
c9:ac:99:a3:ac:f7:ba:e7:f1:b4:7e:34:1d:8c:c1:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.189.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0a:20:ed:f6:5f:35:b8:bb:8a:05:af:43:23:7e:2e:09:49:
4f:2b:f5:d8:c1:bc:40:f6:1d:33:09:29:87:8d:0b:34:ef:29:
e8:0e:24:d8:74:75:90:d6:62:5c:50:09:c2:7d:ed:24:bf:36:
eb:5d:60:76:f9:80:f1:e9:d2:ea:7a:be:02:7b:80:3e:14:de:
87:e6:da:2a:b3:ee:87:f4:6c:44:bc:6c:a5:2a:ea:33:45:68:
ec:1b:8e:fe:e2:a5:3b:2d:59:18:bc:2a:40:c9:65:2d:88:82:
d5:d5:ea:77:79:7a:0d:81:a4:63:80:ed:0b:5f:92:9a:98:82:
aa:cf:e8:a0:61:98:74:e5:fe:06:64:92:c8:2c:0b:f8:7e:12:
f8:32:bc:74:dd:21:ce:4a:a4:5d:ac:88:9b:f4:22:44:b3:c9:
7a:47:02:77:6f:f9:bc:c8:3f:28:58:93:93:cb:85:18:02:9c:
e2:5b:58:eb:cd:3c:97:1b:b8:85:e7:b6:81:ad:ef:7f:ba:20:
46:ed:c1:c1:20:74:a3:21:d8:01:56:5c:84:31:d1:28:93:98:
22:26:9b:86:27:9a:c1:2e:ec:2e:24:09:09:3e:b2:c2:b1:c3:
46:2a:a5:4b:aa:c1:1f:02:74:90:49:6b:57:e1:f7:d8:b6:c0:
f5:0e:93:5f
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMDIxMDAzOTU4WhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1OTZDNDExMC8GA1UEBRMoM0VFMjZGQkE0QkUzNTlERUFFNTAwNzky
RUJGRjc4RDAwQUNCNzYwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMefnhWbalSH7D4FSMeRQShUZdFeDJSLwJChI0mIRw7cJYCnS7a7mYe3uLKuj3Z+
OUnw5tLUKNiGJ82KJTz5IbMlbPBWvOiqd5D1JrDxYmJEvpZtvsGbByIRjDZfsg7l
d7Pf8TM22di2aOdiuLuAB/e8vpEG/tnroyb5iEyfFHwUItHTeOnEKPFGIVullmKC
TFoLSs/Yt7r48L6v5JN4KR9yzIFHMm8/0wl7I+BRC7/cxXWj8YOHuMZhzr4EPYGh
/i5plKL+5EO52u7y+3Z33Mz0QMWtwimG3DwEnH+IB4NtI8tBOlWFnLDL0bTFt8S0
yayZo6z3uufxtH40HYzBiSsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ+4m+6S+NZ
3q5QB5Lr/3jQCst2DDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTk2QzQvRjNEREVFREU4MzMwMTFFQzhGRjM5MzgzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU5NkM0L0YzRERFRURFODMzMDExRUM4RkYzOTM4M0M0RjlBRTAyL1B1SnZ1a3Zq
V2Q2dVVBZVM2Xzk0MEFyTGRndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJXqvTANBgkqhkiG9w0BAQsFAAOCAQEAQwog7fZfNbi7igWvQyN+
LglJTyv12MG8QPYdMwkph40LNO8p6A4k2HR1kNZiXFAJwn3tJL82611gdvmA8enS
6nq+AnuAPhTeh+baKrPuh/RsRLxspSrqM0Vo7BuO/uKlOy1ZGLwqQMllLYiC1dXq
d3l6DYGkY4DtC1+SmpiCqs/ooGGYdOX+BmSSyCwL+H4S+DK8dN0hzkqkXayIm/Qi
RLPJekcCd2/5vMg/KFiTk8uFGAKc4ltY6808lxu4hee2ga3vf7ogRu3BwSB0oyHY
AVZchDHRKJOYIiabhieawS7sLiQJCT6ywrHDRiqlS6rBHwJ0kElrV+H32LbA9Q6T
Xw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org