Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
File: peb1x0u860AJxV7qaJcDSZcf9jo.cer (raw, json)
Hash identifier: 9zOX5052fycgs3xPhawIUDGzeKcSPxiB4kZAp2LBF7I=
Subject key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4DE4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Oct 2023 16:56:54 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 149.234.186.0/24
IP: 149.234.191.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 17:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19940 (0x4de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 4 16:56:54 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:2c:aa:39:d1:47:d8:d1:f1:bb:dc:b0:58:
0a:2e:c8:9c:13:8b:e1:c5:c0:df:83:61:ff:a5:c9:
57:4c:77:92:3d:a6:22:e0:cc:1b:f3:ce:c1:d5:89:
7a:2a:27:f2:b3:36:99:13:0b:a3:bd:5f:03:9d:82:
c2:f3:17:aa:5d:d9:29:2c:38:9c:97:a3:65:8b:47:
a3:d9:f3:16:93:3e:b5:bb:9b:65:79:94:52:e4:d7:
07:11:e9:cc:3f:b7:38:55:b6:84:66:95:db:c6:b9:
ac:88:f3:89:97:bb:af:f1:ae:73:5f:de:98:81:ae:
74:97:81:53:ea:4b:a1:64:83:4c:af:a4:7d:86:46:
88:d4:ab:9a:14:dc:55:17:6f:fd:f8:ee:59:12:d2:
c5:f2:48:62:10:e9:22:1c:6b:88:f9:81:5a:e7:f1:
e4:24:ee:b9:b5:80:62:b4:f2:8c:33:ab:cd:03:91:
f5:d6:dd:b5:da:65:2d:67:e7:72:43:39:79:bb:7b:
7d:fe:6d:78:32:0a:7e:83:33:ef:2a:7d:c9:a5:0f:
db:92:2a:13:0e:52:7b:86:36:85:cb:6f:c8:28:62:
73:c0:e9:e9:d5:d4:1b:ec:76:e8:86:ab:f8:2f:a8:
e1:68:9a:2c:6b:20:13:11:38:41:c7:5b:50:1e:ec:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.186.0/24
149.234.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a5:c5:59:4d:cb:22:f0:63:26:51:f9:c1:a2:96:22:d6:2f:
e2:02:74:95:60:ca:57:2d:4e:9e:c2:e7:87:d8:9f:f6:0e:4e:
2b:c2:77:4f:13:f7:cc:ce:9b:d8:d0:f9:90:ad:d9:ba:f8:0f:
bc:f6:54:94:12:76:81:81:1d:7a:c8:79:a4:27:45:b4:1b:cc:
e8:35:a0:b5:2c:8e:48:f5:bb:71:ac:59:cc:3f:1c:63:0a:15:
58:49:f6:35:d6:a1:47:63:a3:e5:c6:1f:fd:c2:2c:c1:be:14:
8d:9d:22:bd:c4:ba:97:42:d6:51:2e:2c:e1:f4:7f:81:2e:20:
df:2f:66:f4:ad:8b:74:8f:4c:90:48:50:ff:6b:2c:c4:57:2b:
6f:10:25:26:a9:c6:77:2b:37:29:3f:d1:93:cb:27:77:38:03:
f0:07:4c:c6:90:32:c1:4e:53:99:57:22:37:ca:c3:09:89:5e:
57:64:61:87:e3:78:5f:21:b6:93:61:93:d4:17:c7:ce:3c:1b:
a6:56:c0:a6:6c:a4:85:7e:f1:da:13:4c:d2:64:47:2a:27:3a:
66:38:e2:c6:a3:bd:58:5d:6b:88:a5:ee:88:3b:ff:c0:62:53:
4d:8c:cc:87:53:f1:52:c5:9e:47:d6:6b:cc:c2:39:29:b6:fd:
ef:a5:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:08 2024 by rpki-client on console-fra.rpki-client.org