Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
File: peb1x0u860AJxV7qaJcDSZcf9jo.cer (raw, json)
Hash identifier: GaddJJcz+t/bwvo7ZpE0IEyBomtlWQRZO+zwdrdms74=
Subject key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5CF2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Oct 2024 14:53:27 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 149.234.186.0/24
IP: 149.234.191.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 15:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23794 (0x5cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 25 14:53:27 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:2c:aa:39:d1:47:d8:d1:f1:bb:dc:b0:58:
0a:2e:c8:9c:13:8b:e1:c5:c0:df:83:61:ff:a5:c9:
57:4c:77:92:3d:a6:22:e0:cc:1b:f3:ce:c1:d5:89:
7a:2a:27:f2:b3:36:99:13:0b:a3:bd:5f:03:9d:82:
c2:f3:17:aa:5d:d9:29:2c:38:9c:97:a3:65:8b:47:
a3:d9:f3:16:93:3e:b5:bb:9b:65:79:94:52:e4:d7:
07:11:e9:cc:3f:b7:38:55:b6:84:66:95:db:c6:b9:
ac:88:f3:89:97:bb:af:f1:ae:73:5f:de:98:81:ae:
74:97:81:53:ea:4b:a1:64:83:4c:af:a4:7d:86:46:
88:d4:ab:9a:14:dc:55:17:6f:fd:f8:ee:59:12:d2:
c5:f2:48:62:10:e9:22:1c:6b:88:f9:81:5a:e7:f1:
e4:24:ee:b9:b5:80:62:b4:f2:8c:33:ab:cd:03:91:
f5:d6:dd:b5:da:65:2d:67:e7:72:43:39:79:bb:7b:
7d:fe:6d:78:32:0a:7e:83:33:ef:2a:7d:c9:a5:0f:
db:92:2a:13:0e:52:7b:86:36:85:cb:6f:c8:28:62:
73:c0:e9:e9:d5:d4:1b:ec:76:e8:86:ab:f8:2f:a8:
e1:68:9a:2c:6b:20:13:11:38:41:c7:5b:50:1e:ec:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.186.0/24
149.234.191.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8e:c9:f8:6d:da:9f:a7:85:4c:91:a6:ef:65:4f:a1:6c:32:
12:4e:3d:47:85:1e:8f:52:e8:9f:ca:a7:e4:80:29:55:b0:e7:
46:26:83:ec:2f:ff:eb:a8:a6:44:1a:a2:43:e8:92:bd:30:be:
08:40:74:4a:3d:f3:cf:a1:45:12:d0:16:39:cc:59:ea:47:9e:
09:fe:c0:36:16:bc:70:ed:d9:dc:ae:00:3d:f5:d0:97:7a:70:
67:06:c2:96:fd:0a:e5:eb:9f:2c:45:ef:1b:64:78:bf:64:ca:
da:4d:fb:c5:fd:96:37:86:c5:5a:ea:a0:bb:52:2b:06:40:72:
7f:9a:97:96:db:5f:af:df:14:0e:f0:3c:1d:1e:35:47:f7:9d:
28:91:6a:9b:87:9a:7d:00:98:73:d0:53:17:d6:39:9d:62:eb:
09:4b:83:f6:c8:f1:96:8e:e1:86:98:3f:ad:cb:95:0d:43:d8:
63:9e:22:7b:7b:ad:20:f5:15:e3:1f:68:0b:4b:db:3a:6c:c2:
95:60:e4:0f:8a:02:16:cb:1a:e1:b2:af:11:e6:35:bc:e9:84:
97:ca:aa:eb:14:bc:88:15:1a:5f:53:f9:3d:79:a2:6c:d7:49:
63:25:98:2b:15:b3:e0:e5:2c:73:8a:ac:53:d5:ab:28:14:4f:
3b:4a:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:50:41 2024 by rpki-client on console-ams.rpki-client.org