Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
File: fBlP7bilyMl2697IST3zw_CMyOI.cer (raw, json)
Hash identifier: p5bOczL47IXlLVUKIwaiCjosxpxY3IXn/lqfFCmcruc=
Subject key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5A7E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Sep 2024 21:06:47 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 157.20.142.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23166 (0x5a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 3 21:06:47 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:09:0c:23:6f:5f:14:c8:85:6d:b1:2f:c6:
d2:67:fa:87:e7:fd:76:03:6d:42:e6:4d:82:8b:df:
80:ed:b5:16:bb:ad:ae:13:89:c4:e8:2e:67:ab:ad:
b8:74:0f:f8:8e:28:e4:27:9c:ee:d2:53:ce:96:27:
eb:09:de:c5:a8:7d:f0:1e:ef:76:88:c5:fc:11:b0:
e1:f6:4e:ee:6d:ef:35:6a:4b:bb:68:98:94:80:f6:
32:6a:93:b0:d3:f3:9e:70:e6:92:15:96:d8:64:ae:
a4:2f:0d:3f:2d:04:f0:81:9c:fd:1e:df:00:5b:ea:
48:6a:b2:a5:71:82:09:81:1d:13:12:be:4f:a4:2d:
dc:96:88:ed:99:0e:26:9b:25:cc:4f:08:eb:f7:cb:
80:ea:1a:8b:31:f9:94:12:c1:f4:11:d1:9b:e8:a0:
d5:6f:b0:d9:6b:94:a7:b4:96:e7:d7:ed:62:c7:d8:
3a:87:a0:b3:ef:8f:54:6d:80:05:db:01:9d:03:d3:
d2:42:4a:7d:5d:6d:5f:fb:69:b8:70:23:6f:f5:a0:
bc:88:d1:ad:ca:73:88:85:3b:39:f5:fb:ae:06:6a:
7f:20:f5:4a:ed:8d:e5:ac:42:a1:15:49:4c:fb:5e:
a2:8c:e9:f8:8e:4a:f8:a5:67:56:38:79:5b:ec:bf:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a4:76:3d:f1:fd:c8:33:81:b9:c6:86:6a:ca:71:d7:5d:e5:
6b:1d:e9:40:40:73:76:0d:b0:54:a9:3f:de:30:8a:5e:a9:df:
f9:4c:6f:fb:cf:54:76:d0:c5:4b:27:d2:38:61:5c:16:f1:d2:
4d:de:7a:44:7b:22:51:0e:d1:87:93:d8:d0:b3:73:ff:60:97:
7c:9b:99:70:e5:28:0e:69:6b:19:c5:2c:8d:40:f3:21:d6:e7:
45:01:13:25:90:81:4f:e0:92:62:66:a1:17:98:43:1d:3e:e0:
80:3b:14:da:48:e3:7d:a0:75:91:1e:87:e5:3a:47:3e:ec:db:
c8:e5:10:f5:c3:c7:e3:91:48:6c:4a:ce:92:f8:be:2b:06:53:
db:f8:05:f5:f3:7a:82:5b:37:8c:7b:35:d2:77:d8:44:be:63:
0c:c6:84:de:6a:e5:06:89:2a:ff:59:e5:70:be:3c:9e:ce:76:
a7:51:21:3e:14:f6:95:1b:1c:8c:fb:72:b7:74:a1:f9:2a:bd:
ce:df:b9:a2:d4:97:65:6e:ea:e8:92:0d:4d:b3:6a:b8:3f:0d:
4b:fd:09:a1:c3:cf:2d:16:e3:00:2a:b1:8a:67:05:86:14:88:
6f:71:00:e8:5f:0b:13:3c:0e:97:69:00:0f:64:3c:45:37:d5:
97:7c:62:81
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICWn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwOTAzMjEwNjQ3WhcNMjUxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFCRTA1NjExMC8GA1UEBRMoN0MxOTRGRURCOEE1QzhDOTc2RUJERUM4
NDkzREYzQzNGMDhDQzhFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKGTCQwjb18UyIVtsS/G0mf6h+f9dgNtQuZNgovfgO21FrutrhOJxOguZ6utuHQP
+I4o5Cec7tJTzpYn6wnexah98B7vdojF/BGw4fZO7m3vNWpLu2iYlID2MmqTsNPz
nnDmkhWW2GSupC8NPy0E8IGc/R7fAFvqSGqypXGCCYEdExK+T6Qt3JaI7ZkOJpsl
zE8I6/fLgOoaizH5lBLB9BHRm+ig1W+w2WuUp7SW59ftYsfYOoegs++PVG2ABdsB
nQPT0kJKfV1tX/tpuHAjb/WgvIjRrcpziIU7OfX7rgZqfyD1Su2N5axCoRVJTPte
oozp+I5K+KVnVjh5W+y/o+kCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR8GU/tuKXI
yXbr3shJPfPD8IzI4jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkUwNTYvMDAzRTExNThENzhCMTFFRUEyRUJENzEyQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJFMDU2LzAwM0UxMTU4RDc4QjExRUVBMkVCRDcxMkM0RjlBRTAyL2ZCbFA3Ymls
eU1sMjY5N0lTVDN6d19DTXlPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJ0UjjANBgkqhkiG9w0BAQsFAAOCAQEAU6R2PfH9yDOBucaGaspx
113lax3pQEBzdg2wVKk/3jCKXqnf+Uxv+89UdtDFSyfSOGFcFvHSTd56RHsiUQ7R
h5PY0LNz/2CXfJuZcOUoDmlrGcUsjUDzIdbnRQETJZCBT+CSYmahF5hDHT7ggDsU
2kjjfaB1kR6H5TpHPuzbyOUQ9cPH45FIbErOkvi+KwZT2/gF9fN6gls3jHs10nfY
RL5jDMaE3mrlBokq/1nlcL48ns52p1EhPhT2lRscjPtyt3Sh+Sq9zt+5otSXZW7q
6JINTbNquD8NS/0JocPPLRbjACqximcFhhSIb3EA6F8LEzwOl2kAD2Q8RTfVl3xi
gQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org