Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
File: ctH2ecltIFwtRxyUqA3vYNkRJhw.cer (raw, json)
Hash identifier: aOdB5uHAfPDWivdkplj2PmdBlaIyMDbj9SabS8MFdRw=
Subject key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 540D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Apr 2024 06:45:06 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.20.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 20:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21517 (0x540d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 1 06:45:06 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:fb:66:da:9f:5c:11:96:4b:23:5c:30:8d:
9f:69:5b:47:98:2b:4a:f7:e3:a9:b5:96:ef:73:68:
48:15:3a:ae:ea:ee:61:58:3a:b8:98:04:01:ed:51:
f2:1f:42:93:28:2b:9a:d9:71:3d:1c:21:bc:36:95:
e9:45:51:81:ac:be:6c:0c:e0:10:5b:ba:66:c7:9d:
c0:a3:26:3f:d7:56:0d:16:62:58:1d:72:0a:f0:1c:
69:da:5a:68:23:b6:11:96:70:f5:a3:b2:83:67:78:
26:4c:e3:c4:bd:a9:1a:c0:49:91:9f:e6:96:09:60:
ae:72:5f:6a:7d:5a:15:70:44:63:89:de:31:ff:0d:
18:9e:80:86:3f:7d:66:a2:c4:03:77:33:b0:d6:98:
28:63:0e:74:d4:ca:61:c2:a5:61:92:dd:b7:3a:57:
38:63:e8:8e:21:04:38:3e:44:a7:d7:ae:ac:aa:e3:
5c:e8:26:ea:e9:76:06:66:57:c2:62:58:54:71:43:
a5:56:f0:75:31:90:62:2a:52:cb:e3:38:be:2b:15:
cd:c8:a0:3a:2e:18:ab:17:3c:f5:32:3c:fb:7f:69:
40:43:37:42:8f:53:f8:24:a9:ec:01:fa:e0:22:4e:
2c:0a:10:8a:96:37:68:68:9e:0a:bb:6c:89:c7:f8:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:a5:de:15:2e:32:dc:e2:1c:14:e6:82:be:a5:56:1f:be:54:
2e:ae:11:98:4e:30:e6:0b:6f:cf:f9:aa:39:63:00:dc:e5:31:
0d:d1:57:39:43:14:2e:e0:95:d1:38:26:b5:ad:e2:97:4f:ee:
2b:63:e5:e9:4b:14:8c:f7:8e:ae:67:9f:f4:62:7f:13:13:ac:
86:7c:e5:ec:84:32:bd:47:05:f2:f3:55:ea:23:e3:1a:3d:16:
bf:66:b2:21:4e:94:45:2b:38:87:9a:44:ad:6e:46:fc:63:e3:
4b:df:ac:67:e9:f9:47:c9:84:88:16:75:18:20:c9:7a:4d:20:
f8:a8:06:e5:3b:95:dd:f7:13:0c:63:68:f0:33:73:18:9c:52:
8f:0a:4d:be:f5:66:29:90:3f:7a:e4:0c:26:ae:83:27:f7:69:
e4:ca:55:25:91:a5:df:a8:1d:1b:6b:df:ea:68:43:09:96:cf:
d5:cb:24:63:2e:a6:32:25:fe:21:58:f9:57:9c:b6:5d:80:9d:
1e:50:64:e8:3c:f5:bc:cf:a4:7e:f6:16:46:c6:8c:1b:07:27:
40:a5:66:cd:d9:f7:6d:af:2a:4d:ae:14:5b:ab:4d:02:53:6a:
11:fb:25:90:0a:2a:fe:fc:0a:fb:c4:c7:d9:9f:32:e2:d8:06:
cd:0f:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:44:28 2024 by rpki-client on console-fra.rpki-client.org