Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.cer (raw, json)
Hash identifier: q0yNB3JyY1c7kLJnhWz4723tpP18UAa6p4wDN1u5elg=
Subject key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4E03
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Oct 2023 19:36:30 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 146.88.24.0/22
IP: 164.52.192.0/19
IP: 205.147.96.0/21
IP: 205.147.108.0/22
IP: 216.48.176.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19971 (0x4e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 9 19:36:30 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:ee:18:05:09:02:51:be:f7:6a:c3:7c:d7:
2f:c9:36:a6:30:03:a8:34:7d:2f:a6:d6:db:13:43:
e0:c6:53:0a:7a:26:4a:f0:b0:28:74:71:67:3f:5f:
6b:a0:19:1b:0e:ba:97:09:35:d8:fb:18:70:fd:f6:
72:9c:99:19:2a:fc:8e:f5:b9:2a:d3:db:26:26:b9:
89:48:e7:5c:dd:6c:76:07:ea:70:09:72:5e:5f:15:
fc:d8:b9:81:e0:c2:2e:04:f2:20:09:21:d9:d2:82:
98:7e:ec:96:69:df:71:fb:66:8e:63:a0:2a:38:e2:
76:9a:7b:8e:81:65:67:d2:e0:a5:5b:cf:30:69:82:
89:85:c0:9e:e8:d9:85:55:7a:08:41:ff:e2:fe:86:
5b:36:a5:3e:41:75:3c:d9:47:4e:ad:b7:b3:f5:26:
4a:f8:27:f6:13:e6:71:46:9c:02:f3:90:26:ba:40:
c3:97:90:4f:28:2e:f1:fc:65:95:ef:2c:79:c6:2e:
93:aa:c6:d1:e5:01:41:9e:92:cc:41:c7:97:74:aa:
b6:b9:a7:7c:f4:f8:d2:bf:7f:b7:4a:2f:d5:f0:db:
9a:6b:f6:0a:e4:a4:e9:63:7a:0e:b5:9a:24:60:7b:
07:ec:b6:61:c3:86:3c:ae:85:11:16:27:f6:ec:df:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.24.0/22
164.52.192.0/19
205.147.96.0/21
205.147.108.0/22
216.48.176.0/20
Signature Algorithm: sha256WithRSAEncryption
30:93:93:e1:80:dc:af:d2:dd:3f:e2:31:13:ae:4b:ac:7e:d7:
67:e5:57:71:3c:30:81:18:93:88:8e:93:62:d3:84:8f:7c:62:
f3:37:fd:d0:ba:ae:33:90:c4:00:da:b3:dc:28:4f:f5:e6:53:
5f:49:cb:ae:57:92:32:f9:ed:ee:3a:44:2e:0d:f4:d9:db:37:
3e:29:15:bb:6e:87:67:1e:87:8c:6d:a0:e4:36:02:e8:99:7b:
f6:2c:65:64:a7:08:1c:f2:3f:1f:61:a8:83:27:70:27:3c:e1:
d6:45:13:bf:7e:c1:84:1e:dc:b3:18:db:a0:99:1c:e3:ed:33:
54:38:be:06:7d:3a:f8:09:5c:e1:f3:3d:c9:e7:dc:a7:16:40:
b8:9f:e4:a5:b9:78:57:50:4a:90:8c:3c:95:b5:74:9f:67:8d:
61:9c:6f:14:b8:19:a7:d5:f9:58:54:f0:74:c0:01:e8:06:3a:
ee:14:1b:06:b9:1d:e5:13:fc:0b:b0:3e:45:21:b2:bf:52:a6:
e2:32:f3:f1:5a:7e:39:45:fa:a2:0a:5d:ee:6e:48:84:ff:33:
89:72:d3:3b:54:33:62:cc:83:82:44:8a:28:1f:c7:3c:66:f3:
2a:8b:a2:64:70:d6:07:d1:20:51:d9:bf:53:a5:81:0e:7b:b6:
46:57:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:38 2024 by rpki-client on console-ams.rpki-client.org