Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer (raw, json)
Hash identifier: aKk2NZbTGTLEQ7ObOP0MAyUHNr7KRRCOEO4gY1wABiI=
Subject key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4CA7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Aug 2023 02:57:27 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 96.30.64.0/18
IP: 146.88.32.0/19
IP: 161.82.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 13:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19623 (0x4ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 9 02:57:27 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:4c:4e:46:17:4a:1d:44:2a:64:58:bc:65:
29:cf:6d:16:c3:b3:3d:c9:fb:3c:90:ec:25:a4:b1:
c3:c8:39:7b:78:eb:40:e8:7d:a7:b4:eb:68:f9:45:
cd:df:ec:68:43:e2:f9:1b:68:c6:50:f1:63:71:78:
78:68:6c:41:d8:e8:38:2f:29:39:ca:1b:f7:07:d0:
2c:b5:c2:19:d9:45:3b:28:9b:fc:9a:af:ec:9f:de:
42:f5:5b:0e:ac:3b:8e:58:42:16:3a:81:c3:14:8e:
bc:ac:73:f4:2c:bd:b4:59:4c:d6:90:90:48:cc:21:
28:da:b6:d1:79:f4:9b:e7:db:8b:9d:33:35:91:5e:
6d:5b:79:44:82:05:8a:e6:78:8c:1e:63:cd:a1:45:
42:62:9a:01:dd:b1:08:61:68:aa:11:1b:44:1e:37:
98:6f:3a:47:ab:86:0b:24:b3:1e:66:23:ed:42:e2:
68:a0:09:43:04:65:8e:9c:58:3d:9b:d1:24:b4:c2:
de:8d:13:8a:19:ca:38:a6:e4:c9:fa:b6:e5:8c:41:
e4:22:ef:f7:88:e4:7d:85:01:60:b5:18:5f:1e:c2:
9f:fd:84:55:bc:31:ac:cb:d6:4f:05:62:61:93:60:
6c:46:1e:bc:57:5c:49:49:f1:a5:bd:bc:2c:99:6f:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.64.0/18
146.88.32.0/19
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
66:de:c9:a1:dd:f5:9b:06:07:8f:1b:19:c2:11:8d:7f:5a:b3:
23:d7:78:81:55:10:cb:71:7e:aa:f6:0d:be:39:40:26:27:d6:
ef:f4:67:05:0c:2c:45:7a:5d:5e:92:c6:d3:d5:56:c6:b0:94:
26:be:9a:58:50:dd:5b:6b:1e:69:99:f5:55:cb:09:75:cb:8f:
8b:e6:31:87:c6:60:51:bb:49:6a:43:1f:28:f8:79:17:7a:ca:
be:41:70:48:6f:35:b3:f7:01:3c:13:06:79:c2:e8:c3:1f:f4:
3c:22:bf:e6:a9:64:37:f1:b6:20:61:11:7f:1e:74:e8:b5:65:
13:ae:37:b1:ae:69:be:c5:7f:92:4a:9f:8c:c3:3a:93:06:69:
24:cd:76:ef:43:0a:4a:7b:b6:d2:dc:28:d4:d2:18:1e:03:ba:
2b:51:fc:61:fe:77:d4:74:42:f7:72:92:74:b4:99:5c:2b:5c:
c3:d0:7f:7e:d1:fd:f2:1c:84:5b:83:8c:05:97:4e:1e:9c:57:
13:4b:7d:4e:46:4e:9f:6c:77:0b:c9:e9:ab:a2:2c:4b:61:40:
0e:48:f3:3d:00:e6:cf:b2:9e:81:13:e6:94:0e:a5:e1:53:ee:
52:fd:c4:4c:37:82:12:8b:1c:34:e6:cd:35:eb:d9:ff:ab:e2:
ab:c0:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:52:47 2024 by rpki-client on console-fra.rpki-client.org