Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
File: YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer (raw, json)
Hash identifier: AEjVge3yOo70jcmWi3nGGPiEfpMCTMe20mt1X3R/42A=
Subject key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 54B8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 19 Apr 2024 09:34:05 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 66.96.224.0/19
IP: 139.0.0.0/16
IP: 139.192.0.0/14
IP: 139.228.0.0/16
IP: 139.255.0.0 -- 140.0.255.255
IP: 140.213.0.0/16
IP: 157.10.0.0 -- 157.10.5.255
IP: 157.10.8.0/22
IP: 157.10.16.0 -- 157.10.21.255
IP: 157.10.63.0/24
IP: 157.10.66.0 -- 157.10.71.255
IP: 157.10.74.0 -- 157.10.77.255
IP: 157.10.88.0/22
IP: 157.10.94.0/23
IP: 157.10.97.0/24
IP: 157.10.102.0/23
IP: 157.10.106.0 -- 157.10.111.255
IP: 157.10.114.0 -- 157.10.117.255
IP: 157.10.148.0/23
IP: 157.10.152.0 -- 157.10.161.255
IP: 157.10.178.0 -- 157.10.185.255
IP: 157.10.190.0 -- 157.10.193.255
IP: 157.10.205.0/24
IP: 157.10.212.0/23
IP: 157.10.222.0/23
IP: 157.10.228.0/24
IP: 157.10.230.0 -- 157.10.237.255
IP: 157.10.252.0/22
IP: 157.15.0.0 -- 157.15.4.255
IP: 157.15.27.0/24
IP: 157.15.40.0 -- 157.15.49.255
IP: 157.15.51.0/24
IP: 157.15.62.0 -- 157.15.68.255
IP: 157.15.72.0/23
IP: 157.15.76.0 -- 157.15.80.255
IP: 157.15.82.0/23
IP: 157.15.96.0/23
IP: 157.15.112.0/23
IP: 157.15.116.0 -- 157.15.120.255
IP: 157.15.122.0 -- 157.15.125.255
IP: 157.15.139.0/24
IP: 157.15.144.0/23
IP: 157.15.148.0 -- 157.15.157.255
IP: 157.15.160.0 -- 157.15.166.255
IP: 157.15.168.0/21
IP: 157.15.180.0 -- 157.15.187.255
IP: 157.15.194.0/23
IP: 157.15.198.0/23
IP: 157.15.204.0 -- 157.15.212.255
IP: 157.15.214.0 -- 157.15.217.255
IP: 157.15.226.0/23
IP: 157.15.230.0 -- 157.15.233.255
IP: 157.15.236.0 -- 157.15.241.255
IP: 157.15.244.0 -- 157.15.249.255
IP: 157.15.252.0/23
IP: 157.20.0.0/21
IP: 157.20.10.0 -- 157.20.13.255
IP: 157.20.18.0 -- 157.20.25.255
IP: 157.20.30.0 -- 157.20.32.255
IP: 157.20.34.0 -- 157.20.39.255
IP: 157.20.44.0 -- 157.20.50.255
IP: 157.20.70.0 -- 157.20.73.255
IP: 157.20.78.0/23
IP: 157.20.90.0 -- 157.20.100.255
IP: 157.20.118.0 -- 157.20.128.255
IP: 157.20.130.0 -- 157.20.133.255
IP: 157.20.144.0/23
IP: 157.20.152.0/24
IP: 157.20.154.0 -- 157.20.159.255
IP: 157.20.162.0 -- 157.20.165.255
IP: 157.20.167.0/24
IP: 157.20.176.0/22
IP: 157.20.188.0/23
IP: 157.20.193.0/24
IP: 157.20.204.0 -- 157.20.210.255
IP: 157.20.212.0/23
IP: 157.20.217.0 -- 157.20.223.255
IP: 157.20.230.0 -- 157.20.239.255
IP: 157.20.243.0 -- 157.20.245.255
IP: 157.20.252.0/22
IP: 157.66.0.0 -- 157.66.9.255
IP: 157.66.14.0 -- 157.66.21.255
IP: 157.66.29.0/24
IP: 157.66.34.0 -- 157.66.41.255
IP: 157.66.50.0 -- 157.66.63.255
IP: 157.66.66.0 -- 157.66.69.255
IP: 157.66.82.0 -- 157.66.87.255
IP: 157.66.112.0 -- 157.66.117.255
IP: 157.66.122.0 -- 157.66.133.255
IP: 157.66.136.0 -- 157.66.142.255
IP: 158.140.160.0/19
IP: 160.19.16.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Apr 2024 18:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21688 (0x54b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 19 09:34:05 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:38:1c:07:dc:bb:5a:95:89:df:cb:3e:f1:
5c:c2:62:1f:03:15:9e:93:5c:cd:53:a8:18:09:72:
e3:30:a5:d2:0d:30:18:3f:8d:3d:0d:a8:d0:f7:aa:
73:4b:a9:80:85:bd:9b:af:ba:63:b6:a5:bc:30:35:
be:66:f9:b4:9c:26:da:0e:a4:82:09:46:5a:ae:91:
81:37:0b:e3:d1:dc:d0:41:4d:41:a8:b8:84:68:39:
99:ab:f7:12:49:be:b8:80:0b:98:09:0c:70:28:3b:
e5:64:1b:96:84:d4:46:89:cc:17:68:9c:9e:b7:6d:
6a:c6:59:6b:07:62:aa:b0:cd:82:d4:29:4a:10:1c:
a3:a9:e0:0e:34:ef:9f:c5:82:82:5c:64:3c:c1:f4:
e4:a0:7d:10:14:74:2c:f7:87:dd:05:5e:1e:df:dc:
cf:90:55:f8:1b:29:46:0f:c0:53:3b:75:0e:a5:ef:
c5:a8:e2:43:b1:69:71:1a:c2:18:f4:fe:15:d6:30:
3c:f0:b5:07:8b:79:82:37:cb:c2:82:d7:80:c6:a3:
6b:b7:8f:8c:61:0f:f3:8f:ce:59:70:99:ad:1a:c8:
88:43:af:b2:95:11:94:e1:23:de:54:3b:b3:f5:34:
59:c7:4c:ba:13:5f:7a:cd:91:00:c7:35:dc:cd:63:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.96.224.0/19
139.0.0.0/16
139.192.0.0/14
139.228.0.0/16
139.255.0.0-140.0.255.255
140.213.0.0/16
157.10.0.0-157.10.5.255
157.10.8.0/22
157.10.16.0-157.10.21.255
157.10.63.0/24
157.10.66.0-157.10.71.255
157.10.74.0-157.10.77.255
157.10.88.0/22
157.10.94.0/23
157.10.97.0/24
157.10.102.0/23
157.10.106.0-157.10.111.255
157.10.114.0-157.10.117.255
157.10.148.0/23
157.10.152.0-157.10.161.255
157.10.178.0-157.10.185.255
157.10.190.0-157.10.193.255
157.10.205.0/24
157.10.212.0/23
157.10.222.0/23
157.10.228.0/24
157.10.230.0-157.10.237.255
157.10.252.0/22
157.15.0.0-157.15.4.255
157.15.27.0/24
157.15.40.0-157.15.49.255
157.15.51.0/24
157.15.62.0-157.15.68.255
157.15.72.0/23
157.15.76.0-157.15.80.255
157.15.82.0/23
157.15.96.0/23
157.15.112.0/23
157.15.116.0-157.15.120.255
157.15.122.0-157.15.125.255
157.15.139.0/24
157.15.144.0/23
157.15.148.0-157.15.157.255
157.15.160.0-157.15.166.255
157.15.168.0/21
157.15.180.0-157.15.187.255
157.15.194.0/23
157.15.198.0/23
157.15.204.0-157.15.212.255
157.15.214.0-157.15.217.255
157.15.226.0/23
157.15.230.0-157.15.233.255
157.15.236.0-157.15.241.255
157.15.244.0-157.15.249.255
157.15.252.0/23
157.20.0.0/21
157.20.10.0-157.20.13.255
157.20.18.0-157.20.25.255
157.20.30.0-157.20.32.255
157.20.34.0-157.20.39.255
157.20.44.0-157.20.50.255
157.20.70.0-157.20.73.255
157.20.78.0/23
157.20.90.0-157.20.100.255
157.20.118.0-157.20.128.255
157.20.130.0-157.20.133.255
157.20.144.0/23
157.20.152.0/24
157.20.154.0-157.20.159.255
157.20.162.0-157.20.165.255
157.20.167.0/24
157.20.176.0/22
157.20.188.0/23
157.20.193.0/24
157.20.204.0-157.20.210.255
157.20.212.0/23
157.20.217.0-157.20.223.255
157.20.230.0-157.20.239.255
157.20.243.0-157.20.245.255
157.20.252.0/22
157.66.0.0-157.66.9.255
157.66.14.0-157.66.21.255
157.66.29.0/24
157.66.34.0-157.66.41.255
157.66.50.0-157.66.63.255
157.66.66.0-157.66.69.255
157.66.82.0-157.66.87.255
157.66.112.0-157.66.117.255
157.66.122.0-157.66.133.255
157.66.136.0-157.66.142.255
158.140.160.0/19
160.19.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:cf:88:22:75:42:b5:3a:1e:cf:fc:31:3e:1b:28:5f:a0:72:
12:10:d6:bf:fe:ef:41:18:5a:7c:87:01:f0:44:ab:ea:2e:40:
b3:95:71:19:6d:82:ba:dd:51:f3:5f:dd:fd:59:e2:ff:da:ec:
f2:1e:3f:fe:bc:f7:d1:1e:ff:90:fc:f1:4f:c9:a7:70:13:c6:
67:e3:2b:e7:19:4d:a3:e6:12:4a:d3:75:fc:3c:c2:49:5b:68:
d7:4e:ed:b5:6e:50:6d:e3:78:c8:36:a9:7b:0a:f2:6b:f7:ed:
2e:b2:1c:2e:31:64:9b:60:4f:2e:71:a2:a0:35:fa:50:85:b5:
19:69:d1:76:20:6a:2b:03:14:04:58:be:88:e0:d0:e9:a7:cf:
7c:d0:a9:36:12:f1:24:83:3e:f2:5a:e3:ef:c3:04:23:57:aa:
ca:a0:aa:bb:86:e8:6d:97:9c:94:1f:7e:f3:22:67:3b:d4:9a:
cd:30:00:eb:37:56:d4:2f:8a:86:f2:68:84:18:c4:4e:6c:68:
5f:79:75:b3:7a:67:99:c5:c1:59:39:15:12:af:3f:12:ba:ea:
36:6b:0a:21:a9:58:4e:d7:e3:96:48:51:98:1a:bc:f9:65:b8:
04:d9:16:8d:89:30:ce:c2:05:9d:7d:4a:d4:4e:8f:a2:03:d8:
b8:ec:d6:02
-----BEGIN CERTIFICATE-----
MIIJcTCCCFmgAwIBAgICVLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNDE5MDkzNDA1WhcNMjQwODMxMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDYwRjhCRTlDMTY2MjVDNDI0QjI2
OUVFMDZDNjRBODNCQUI4NTA2RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCakDgcB9y7WpWJ38s+8VzCYh8DFZ6TXM1TqBgJcuMwpdINMBg/jT0NqND3
qnNLqYCFvZuvumO2pbwwNb5m+bScJtoOpIIJRlqukYE3C+PR3NBBTUGouIRoOZmr
9xJJvriAC5gJDHAoO+VkG5aE1EaJzBdonJ63bWrGWWsHYqqwzYLUKUoQHKOp4A40
75/FgoJcZDzB9OSgfRAUdCz3h90FXh7f3M+QVfgbKUYPwFM7dQ6l78Wo4kOxaXEa
whj0/hXWMDzwtQeLeYI3y8KC14DGo2u3j4xhD/OPzllwma0ayIhDr7KVEZThI95U
O7P1NFnHTLoTX3rNkQDHNdzNY+MHAgMBAAGjggZjMIIGXzAdBgNVHQ4EFgQUYPi+
nBZiXEJLJp7gbGSoO6uFBtQwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwd
bg4wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIw
MUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3
ZGJnNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwge4GCCsGAQUFBwELBIHhMIHeMDcGCCsGAQUF
BzAFhityc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x
MGQGCCsGAQUFBzAKhlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9J
RE5JQy1JRC8xLzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2
RDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczovL3JlcG8tcnBraS5pZG5pYy5uZXQv
cnJkcC9ub3RpZmljYXRpb24ueG1sMIIDyAYIKwYBBQUHAQcBAf8EggO3MIIDszCC
A68EAgABMIIDpwMEBUJg4AMDAIsAAwMCi8ADAwCL5DAKAwMAi/8DAwCMAAMDAIzV
MAsDAwGdCgMEAZ0KBAMEAp0KCDAMAwQEnQoQAwQBnQoUAwQAnQo/MAwDBAGdCkID
BAOdCkAwDAMEAZ0KSgMEAZ0KTAMEAp0KWAMEAZ0KXgMEAJ0KYQMEAZ0KZjAMAwQB
nQpqAwQEnQpgMAwDBAGdCnIDBAGdCnQDBAGdCpQwDAMEA50KmAMEAZ0KoDAMAwQB
nQqyAwQBnQq4MAwDBAGdCr4DBAGdCsADBACdCs0DBAGdCtQDBAGdCt4DBACdCuQw
DAMEAZ0K5gMEAZ0K7AMEAp0K/DALAwMAnQ8DBACdDwQDBACdDxswDAMEA50PKAME
AZ0PMAMEAJ0PMzAMAwQBnQ8+AwQAnQ9EAwQBnQ9IMAwDBAKdD0wDBACdD1ADBAGd
D1IDBAGdD2ADBAGdD3AwDAMEAp0PdAMEAJ0PeDAMAwQBnQ96AwQBnQ98AwQAnQ+L
AwQBnQ+QMAwDBAKdD5QDBAGdD5wwDAMEBZ0PoAMEAJ0PpgMEA50PqDAMAwQCnQ+0
AwQCnQ+4AwQBnQ/CAwQBnQ/GMAwDBAKdD8wDBACdD9QwDAMEAZ0P1gMEAZ0P2AME
AZ0P4jAMAwQBnQ/mAwQBnQ/oMAwDBAKdD+wDBAGdD/AwDAMEAp0P9AMEAZ0P+AME
AZ0P/AMEA50UADAMAwQBnRQKAwQBnRQMMAwDBAGdFBIDBAGdFBgwDAMEAZ0UHgME
AJ0UIDAMAwQBnRQiAwQDnRQgMAwDBAKdFCwDBACdFDIwDAMEAZ0URgMEAZ0USAME
AZ0UTjAMAwQBnRRaAwQAnRRkMAwDBAGdFHYDBACdFIAwDAMEAZ0UggMEAZ0UhAME
AZ0UkAMEAJ0UmDAMAwQBnRSaAwQFnRSAMAwDBAGdFKIDBAGdFKQDBACdFKcDBAKd
FLADBAGdFLwDBACdFMEwDAMEAp0UzAMEAJ0U0gMEAZ0U1DAMAwQAnRTZAwQFnRTA
MAwDBAGdFOYDBASdFOAwDAMEAJ0U8wMEAZ0U9AMEAp0U/DALAwMBnUIDBAGdQggw
DAMEAZ1CDgMEAZ1CFAMEAJ1CHTAMAwQBnUIiAwQBnUIoMAwDBAGdQjIDBAadQgAw
DAMEAZ1CQgMEAZ1CRDAMAwQBnUJSAwQDnUJQMAwDBASdQnADBAGdQnQwDAMEAZ1C
egMEAZ1ChDAMAwQDnUKIAwQAnUKOAwQFnoygAwQCoBMQMA0GCSqGSIb3DQEBCwUA
A4IBAQC2z4gidUK1Oh7P/DE+GyhfoHISENa//u9BGFp8hwHwRKvqLkCzlXEZbYK6
3VHzX939WeL/2uzyHj/+vPfRHv+Q/PFPyadwE8Zn4yvnGU2j5hJK03X8PMJJW2jX
Tu21blBt43jINql7CvJr9+0ushwuMWSbYE8ucaKgNfpQhbUZadF2IGorAxQEWL6I
4NDpp8980Kk2EvEkgz7yWuPvwwQjV6rKoKq7huhtl5yUH37zImc71JrNMADrN1bU
L4qG8miEGMRObGhfeXWzemeZxcFZORUSrz8Suuo2awohqVhO1+OWSFGYGrz5ZbgE
2RaNiTDOwgWdfUrUTo+iA9i47NYC
-----END CERTIFICATE-----
Generated at Tue Apr 23 20:38:34 2024 by rpki-client on console-fra.rpki-client.org