Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer (raw, json)
Hash identifier: 4+6ARHP2Ra8jBv+kGsMlDUQdmBk+U1rCwPaNVwhG+fE=
Subject key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 573C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Jun 2024 05:47:25 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 96.30.64.0/18
IP: 146.88.32.0/19
IP: 161.82.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22332 (0x573c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 25 05:47:25 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:4c:4e:46:17:4a:1d:44:2a:64:58:bc:65:
29:cf:6d:16:c3:b3:3d:c9:fb:3c:90:ec:25:a4:b1:
c3:c8:39:7b:78:eb:40:e8:7d:a7:b4:eb:68:f9:45:
cd:df:ec:68:43:e2:f9:1b:68:c6:50:f1:63:71:78:
78:68:6c:41:d8:e8:38:2f:29:39:ca:1b:f7:07:d0:
2c:b5:c2:19:d9:45:3b:28:9b:fc:9a:af:ec:9f:de:
42:f5:5b:0e:ac:3b:8e:58:42:16:3a:81:c3:14:8e:
bc:ac:73:f4:2c:bd:b4:59:4c:d6:90:90:48:cc:21:
28:da:b6:d1:79:f4:9b:e7:db:8b:9d:33:35:91:5e:
6d:5b:79:44:82:05:8a:e6:78:8c:1e:63:cd:a1:45:
42:62:9a:01:dd:b1:08:61:68:aa:11:1b:44:1e:37:
98:6f:3a:47:ab:86:0b:24:b3:1e:66:23:ed:42:e2:
68:a0:09:43:04:65:8e:9c:58:3d:9b:d1:24:b4:c2:
de:8d:13:8a:19:ca:38:a6:e4:c9:fa:b6:e5:8c:41:
e4:22:ef:f7:88:e4:7d:85:01:60:b5:18:5f:1e:c2:
9f:fd:84:55:bc:31:ac:cb:d6:4f:05:62:61:93:60:
6c:46:1e:bc:57:5c:49:49:f1:a5:bd:bc:2c:99:6f:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.64.0/18
146.88.32.0/19
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
39:6c:27:9a:e9:c1:87:35:dc:0d:63:a7:71:a8:7b:52:d3:1d:
4e:3a:6b:db:76:e7:fa:c3:ff:c2:e5:af:86:38:4e:7d:d9:76:
a3:66:79:3e:9c:13:05:2c:b2:74:d4:06:a7:7d:e9:8d:1a:7a:
6d:91:df:2b:2c:0f:95:c6:e7:3a:02:b5:f9:e3:da:a3:e4:50:
f6:e3:40:00:16:14:c4:d5:35:de:24:ff:2c:b6:96:6b:8e:8f:
ed:10:1f:92:05:ad:01:be:8b:e6:a5:9d:87:17:38:9c:10:1e:
16:65:8a:e5:59:06:06:50:12:4a:9f:ef:25:c3:44:72:82:64:
72:96:b6:27:54:77:7c:db:c3:37:b8:85:26:b2:cf:72:5f:b9:
78:dc:48:c4:12:77:ef:06:bc:f6:0d:9e:81:d6:fd:8f:45:12:
dd:29:0b:3b:57:e2:c1:bd:7e:51:c3:2f:43:37:68:28:e3:25:
22:14:fd:4b:08:f5:36:89:ea:86:dc:0c:33:e3:1e:66:00:73:
f9:71:1e:a4:99:fc:b3:ef:af:dd:fa:0a:d6:19:2c:2a:da:e7:
0b:6e:13:4e:1f:48:4b:8f:9d:a5:16:82:df:58:02:a3:2d:b2:
aa:37:f5:ac:e5:1c:0d:b7:0e:dd:ac:50:99:3d:2a:f7:c8:ed:
71:2d:dc:da
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgICVzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNjI1MDU0NzI1WhcNMjUwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5NTM2QzExMC8GA1UEBRMoQTA5MEU1MjBCRjlENTFGMkZEQ0VFRDQx
M0FGMjdBQzc1OEY2QUUxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM9QTE5GF0odRCpkWLxlKc9tFsOzPcn7PJDsJaSxw8g5e3jrQOh9p7TraPlFzd/s
aEPi+RtoxlDxY3F4eGhsQdjoOC8pOcob9wfQLLXCGdlFOyib/Jqv7J/eQvVbDqw7
jlhCFjqBwxSOvKxz9Cy9tFlM1pCQSMwhKNq20Xn0m+fbi50zNZFebVt5RIIFiuZ4
jB5jzaFFQmKaAd2xCGFoqhEbRB43mG86R6uGCySzHmYj7ULiaKAJQwRljpxYPZvR
JLTC3o0TihnKOKbkyfq25YxB5CLv94jkfYUBYLUYXx7Cn/2EVbwxrMvWTwViYZNg
bEYevFdcSUnxpb28LJlvSd8CAwEAAaOCAv8wggL7MB0GA1UdDgQWBBSgkOUgv51R
8v3O7UE68nrHWPauHTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk1MzZDLzc1Qjk4QkYwMzY2MDExRUU4OEUwRjUzMEM0RjlBRTAyL29KRGxJTC1k
VWZMOXp1MUJPdko2eDFqMnJoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQcMBow
GAQCAAEwEgMEBmAeQAMEBZJYIAMEB6FSgDANBgkqhkiG9w0BAQsFAAOCAQEAOWwn
munBhzXcDWOncah7UtMdTjpr23bn+sP/wuWvhjhOfdl2o2Z5PpwTBSyydNQGp33p
jRp6bZHfKywPlcbnOgK1+ePao+RQ9uNAABYUxNU13iT/LLaWa46P7RAfkgWtAb6L
5qWdhxc4nBAeFmWK5VkGBlASSp/vJcNEcoJkcpa2J1R3fNvDN7iFJrLPcl+5eNxI
xBJ37wa89g2egdb9j0US3SkLO1fiwb1+UcMvQzdoKOMlIhT9Swj1NonqhtwMM+Me
ZgBz+XEepJn8s++v3foK1hksKtrnC24TTh9IS4+dpRaC31gCoy2yqjf1rOUcDbcO
3axQmT0q98jtcS3c2g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org