Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
File: gOknW25uvGrXWF12r7akALUULD8.cer (raw, json)
Hash identifier: N1FS2s5ms9k/kKHXArHZN1hzfG7RKcTgDi6pIXvoh2g=
Subject key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 58C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 22 Jul 2024 03:38:10 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 157.10.136.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22720 (0x58c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 22 03:38:10 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:5e:0a:55:9c:f9:f6:10:12:66:aa:b0:36:
5e:72:7c:07:b6:5b:c5:45:c4:f0:18:7f:d6:9f:0f:
96:e4:1e:e7:0a:94:d7:d3:d0:e6:66:44:a7:c1:a4:
d5:b0:a9:b6:be:8f:9f:aa:f4:86:5e:e9:74:4a:5d:
8a:58:06:b3:83:96:c5:56:28:c8:69:3e:d8:a2:32:
6b:e2:32:84:8e:ee:55:ea:c7:60:2b:ce:bb:e3:04:
d6:e4:9e:8f:7b:c2:c0:51:80:d9:0f:b9:65:a9:02:
fa:de:64:d2:7c:24:07:60:05:5c:7d:54:9b:49:92:
e4:ae:f8:42:b0:3a:8f:ae:01:d8:2d:b8:12:42:d7:
54:7e:e9:14:fd:4c:0a:fe:06:75:62:fe:a8:8a:ea:
45:80:b2:2d:70:55:06:a0:e0:f7:cb:e4:6c:3a:c4:
a9:23:f9:a0:46:46:5f:8b:5f:e5:5f:2f:56:1e:39:
06:ab:a8:96:24:eb:6e:5f:82:1f:84:19:be:de:55:
c8:d8:ab:ba:89:4d:ae:ad:9a:c2:4a:a9:de:1f:3d:
3c:ba:30:9d:4d:87:48:af:c9:ef:fc:08:a6:b6:38:
48:14:ad:be:c6:65:be:b4:ff:76:08:39:88:2d:1c:
31:76:81:af:02:9a:26:7b:b8:5b:96:af:5e:a9:a9:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.136.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:d3:7b:85:5c:78:c3:9e:c5:2e:ec:75:4b:3c:e7:54:31:c4:
ee:a9:49:01:54:ab:2f:7d:c3:e3:29:25:83:4b:b3:54:11:9a:
b7:d5:f9:a9:2a:72:cf:61:0a:55:23:18:60:a0:33:c9:76:23:
e6:25:be:af:65:1b:ff:43:21:46:76:e4:17:39:d2:4a:07:b0:
6f:23:59:25:fe:48:e6:7a:eb:05:ab:b8:3c:71:1e:72:b5:ea:
8d:c3:af:a9:c8:ff:c6:0d:fa:ec:dd:b0:62:96:c1:06:a6:53:
60:8c:15:98:19:8a:b1:54:a0:42:3c:8d:3c:d5:5f:99:d2:3f:
dd:0a:dd:c5:cf:44:ea:a2:88:e4:36:b3:20:d5:f8:80:c6:76:
20:d8:32:db:40:87:b6:7a:b6:53:4b:1e:18:f1:a8:5f:3d:bb:
32:34:c6:fa:da:e6:1c:29:d3:dd:8b:e8:a3:5d:a7:88:44:73:
d4:ab:d1:44:fc:eb:cc:7c:4c:dc:13:53:98:d9:07:c9:e0:b6:
61:20:19:85:80:f6:92:ed:ac:19:dd:58:4c:3a:50:fc:db:37:
8f:82:be:10:e5:b1:4b:09:88:a6:40:8b:64:5a:77:d0:7e:1e:
30:cb:8f:4b:8a:30:b0:8b:a7:e3:1c:d1:19:43:64:97:6a:19:
ef:18:01:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:41:13 2024 by rpki-client on console-fra.rpki-client.org