Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer (raw, json)
Hash identifier: eFrPbakC+2hZlypzOvPLpLs/eSVv+Sq8BCt9IQwqtFk=
Subject key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A57
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 31 Aug 2024 15:07:02 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.100.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23127 (0x5a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 31 15:07:02 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:6c:64:8e:46:83:10:29:e6:9e:d8:2d:ce:
a6:80:a5:55:25:16:e6:f3:2e:dd:1b:e6:57:3e:cb:
34:d5:7a:80:56:e1:62:45:4e:f2:76:77:5b:19:86:
ef:b6:41:3f:b5:c3:15:05:5f:90:08:47:a7:a6:60:
9d:95:e2:cd:ee:79:42:be:5f:40:49:b2:23:e5:f9:
5b:b5:a2:03:5c:7b:fb:36:d4:0d:04:69:d1:d9:1d:
ea:ea:f7:88:a6:11:b4:b6:71:35:21:b6:c8:80:df:
57:86:97:0b:4c:e4:e4:7e:da:54:d6:1d:e6:b6:d2:
60:b8:9c:6a:dd:d5:8b:ed:d8:70:91:47:73:7a:fb:
d9:c7:24:98:8d:5f:db:32:86:b3:c3:55:80:c0:3c:
96:8b:0b:6e:0f:02:13:ee:4a:03:0b:d2:0e:32:76:
88:42:48:4e:43:bc:38:e6:4f:0f:ef:07:c5:c6:56:
3a:6e:6f:a6:ed:e6:d5:fa:b9:11:3c:f8:9f:a3:94:
a2:8d:e0:de:bd:f8:13:39:e7:c9:18:a3:eb:6d:5e:
11:ee:9f:2c:77:bd:db:16:82:4e:dd:48:2f:ff:d3:
25:89:25:4a:1f:7d:b3:5b:c2:6d:b4:2b:50:b3:6d:
6b:a6:d8:73:12:87:11:29:fe:ae:ca:a4:76:b2:ab:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.100.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:32:8a:6c:5e:25:bb:5b:70:44:0e:37:c7:18:64:bc:a3:4b:
9e:32:4d:ab:98:91:4e:c9:31:a7:61:7e:05:65:10:92:74:44:
29:28:fd:d1:6c:92:7d:72:9d:07:7f:a8:61:d8:3e:38:1c:f5:
85:66:64:ba:5f:51:8e:d5:ac:99:ab:77:83:27:43:d8:f2:60:
b6:f5:6a:83:22:24:de:3a:46:43:43:f8:05:31:af:c8:38:3c:
1e:ee:9e:37:3a:30:cc:ec:cd:1c:ec:f2:7e:d3:26:b7:5c:9d:
49:2f:0f:c1:9a:3e:39:ea:d2:d4:88:63:e8:22:d6:09:65:3d:
1e:de:09:a7:cf:f2:50:27:f3:83:97:8d:46:3a:82:fb:67:98:
1a:c7:68:72:26:47:d7:70:aa:6f:d0:11:05:28:aa:9e:0c:c7:
5e:9c:1d:d0:7f:22:15:17:9d:b0:40:ac:e7:b8:18:aa:09:89:
70:2e:a2:15:d6:25:de:53:27:64:7f:67:40:d0:8a:3e:bf:e6:
32:86:b9:8a:ac:a8:9c:e0:54:30:79:60:f8:5e:e5:9f:f4:56:
94:70:c2:9b:62:73:97:56:df:98:bd:e0:9d:ef:af:15:fb:3f:
5b:80:ce:dd:ba:74:1f:37:46:f8:3e:e2:ad:8c:42:35:e3:72:
5f:e3:ae:1e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICWlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwODMxMTUwNzAyWhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFBRjJEOTExMC8GA1UEBRMoNTBEMjQwNDJBNEE2NUVFRTY3QTdFQTRE
M0ZDNDg5NDQzQTM5QUE3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL9LbGSORoMQKeae2C3OpoClVSUW5vMu3RvmVz7LNNV6gFbhYkVO8nZ3WxmG77ZB
P7XDFQVfkAhHp6ZgnZXize55Qr5fQEmyI+X5W7WiA1x7+zbUDQRp0dkd6ur3iKYR
tLZxNSG2yIDfV4aXC0zk5H7aVNYd5rbSYLicat3Vi+3YcJFHc3r72cckmI1f2zKG
s8NVgMA8losLbg8CE+5KAwvSDjJ2iEJITkO8OOZPD+8HxcZWOm5vpu3m1fq5ETz4
n6OUoo3g3r34EznnyRij621eEe6fLHe92xaCTt1IL//TJYklSh99s1vCbbQrULNt
a6bYcxKHESn+rsqkdrKrCwUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRQ0kBCpKZe
7men6k0/xIlEOjmqdDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUYyRDkvQTk5QzE2Mjg2N0FBMTFFRjhGNDk4QTI3QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFGMkQ5L0E5OUMxNjI4NjdBQTExRUY4RjQ5OEEyN0M0RjlBRTAyL1VOSkFRcVNt
WHU1bnAtcE5QOFNKUkRvNXFuUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAeZDANBgkqhkiG9w0BAQsFAAOCAQEAfDKKbF4lu1twRA43xxhk
vKNLnjJNq5iRTskxp2F+BWUQknREKSj90WySfXKdB3+oYdg+OBz1hWZkul9RjtWs
mat3gydD2PJgtvVqgyIk3jpGQ0P4BTGvyDg8Hu6eNzowzOzNHOzyftMmt1ydSS8P
wZo+OerS1Ihj6CLWCWU9Ht4Jp8/yUCfzg5eNRjqC+2eYGsdociZH13Cqb9ARBSiq
ngzHXpwd0H8iFRedsECs57gYqgmJcC6iFdYl3lMnZH9nQNCKPr/mMoa5iqyonOBU
MHlg+F7ln/RWlHDCm2Jzl1bfmL3gne+vFfs/W4DO3bp0HzdG+D7irYxCNeNyX+Ou
Hg==
-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:00 2024 by rpki-client on console-ams.rpki-client.org