Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
File: YLrcBCw3e4bA3J7riVEnJc4-IzY.cer (raw, json)
Hash identifier: iNTgGPoS+9VO5FsHIb8TYV4eYRZEd+wCsWIR0bjfDSg=
Subject key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 56EF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Jun 2024 04:59:13 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 137.109.0.0/16
IP: 152.91.0.0/16
IP: 192.58.133.0 -- 192.58.136.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22255 (0x56ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 19 04:59:13 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:a5:65:cc:35:cc:2a:46:27:29:02:d5:0d:
85:e7:7a:a4:09:02:71:7e:ee:a5:d0:be:c3:12:1c:
92:3e:c9:f0:83:cb:cb:4a:e0:e0:bf:4f:14:ac:4c:
a4:2a:f9:42:b0:09:1f:d8:53:00:83:87:8f:ab:f4:
a6:8a:44:01:d7:ba:00:09:25:f1:4f:a2:93:2d:e4:
a4:74:eb:ed:1a:fa:5b:84:16:df:3b:6f:78:68:86:
75:14:c2:ad:5b:c8:59:a7:4f:5c:ad:fc:22:bd:c2:
01:1c:c4:72:37:1a:f5:18:12:5a:c2:4a:c9:ed:10:
fe:5c:53:8c:e6:55:a5:68:02:4f:24:8c:5f:8a:54:
da:cb:eb:c5:8f:b7:36:7e:a6:fb:24:54:de:82:73:
c0:c0:c0:65:c5:b7:18:03:44:5d:e7:be:05:29:31:
17:bc:9b:3c:20:60:8c:00:49:b7:7e:43:bd:75:34:
60:be:ff:24:f3:cb:e9:b7:77:8f:45:70:8d:71:57:
95:f7:3e:ba:76:7f:7d:e9:7a:49:8a:8c:20:50:94:
e2:36:c9:86:29:4a:17:75:2b:c0:90:1c:cb:5b:8a:
ec:ec:b4:0f:86:c2:3a:be:3b:e5:b0:d2:e7:85:df:
25:bd:33:fd:eb:a7:9c:f2:3c:7b:ca:3f:bc:c7:f2:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.109.0.0/16
152.91.0.0/16
192.58.133.0-192.58.136.255
Signature Algorithm: sha256WithRSAEncryption
c6:38:89:ff:92:40:a6:1e:8a:4d:dd:5c:b7:e8:c0:da:a3:64:
4f:b2:b3:d3:ba:48:c0:dd:b9:fa:ea:59:30:4a:89:ad:17:4c:
e1:33:2a:92:2d:d4:25:ac:79:c1:01:e5:8c:26:7c:6e:bc:40:
d0:90:83:44:d4:13:42:37:55:dd:a9:dc:20:bc:a1:29:1b:c0:
45:6a:39:ea:ee:b2:2f:af:3d:e1:89:cd:24:2f:f0:06:3a:82:
51:50:31:65:71:0e:b8:3a:8b:8e:07:45:bf:e8:67:20:94:6a:
cb:c7:1f:8a:8e:e6:01:e2:df:8d:ff:5b:a3:0e:68:71:a9:5a:
61:a3:84:72:5b:60:7c:d4:f1:a7:58:44:d6:c6:e4:9b:f3:79:
80:aa:eb:1f:59:37:43:b3:94:e6:35:6a:c1:c1:45:db:d6:f0:
15:46:0f:79:c7:21:7a:77:0c:0a:5d:cf:ab:82:65:b1:fa:c6:
15:eb:02:fa:a5:21:e1:f6:4f:db:97:16:d4:1a:62:f8:22:3d:
48:c1:06:f3:00:c3:3a:41:e5:fd:5d:14:6f:12:35:f7:45:2d:
ec:e5:92:47:07:1c:21:fb:12:24:9f:54:96:27:2b:3a:0d:99:
05:4c:e1:35:a6:d7:d0:81:ec:9a:2d:b6:87:b0:7e:4b:cd:00:
09:0f:e8:73
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgICVu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNjE5MDQ1OTEzWhcNMjUwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RDBBQTExMC8GA1UEBRMoNjBCQURDMDQyQzM3N0I4NkMwREM5RUVC
ODk1MTI3MjVDRTNFMjMzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL7gpWXMNcwqRicpAtUNhed6pAkCcX7updC+wxIckj7J8IPLy0rg4L9PFKxMpCr5
QrAJH9hTAIOHj6v0popEAde6AAkl8U+iky3kpHTr7Rr6W4QW3ztveGiGdRTCrVvI
WadPXK38Ir3CARzEcjca9RgSWsJKye0Q/lxTjOZVpWgCTySMX4pU2svrxY+3Nn6m
+yRU3oJzwMDAZcW3GANEXee+BSkxF7ybPCBgjABJt35DvXU0YL7/JPPL6bd3j0Vw
jXFXlfc+unZ/fel6SYqMIFCU4jbJhilKF3UrwJAcy1uK7Oy0D4bCOr475bDS54Xf
Jb0z/eunnPI8e8o/vMfyUAMCAwEAAaOCAwUwggMBMB0GA1UdDgQWBBRgutwELDd7
hsDcnuuJUSclzj4jNjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQwQUEvMkM3NUZFQzg3QTNDMTFFRDg2MUIyOTMzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThEMEFBLzJDNzVGRUM4N0EzQzExRUQ4NjFCMjkzM0M0RjlBRTAyL1lMcmNCQ3cz
ZTRiQTNKN3JpVkVuSmM0LUl6WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQiMCAw
HgQCAAEwGAMDAIltAwMAmFswDAMEAMA6hQMEAMA6iDANBgkqhkiG9w0BAQsFAAOC
AQEAxjiJ/5JAph6KTd1ct+jA2qNkT7Kz07pIwN25+upZMEqJrRdM4TMqki3UJax5
wQHljCZ8brxA0JCDRNQTQjdV3ancILyhKRvARWo56u6yL6894YnNJC/wBjqCUVAx
ZXEOuDqLjgdFv+hnIJRqy8cfio7mAeLfjf9bow5ocalaYaOEcltgfNTxp1hE1sbk
m/N5gKrrH1k3Q7OU5jVqwcFF29bwFUYPecchencMCl3Pq4JlsfrGFesC+qUh4fZP
25cW1Bpi+CI9SMEG8wDDOkHl/V0UbxI190Ut7OWSRwccIfsSJJ9UlicrOg2ZBUzh
NabX0IHsmi22h7B+S80ACQ/ocw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:40 2024 by rpki-client on console-ams.rpki-client.org