Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
File: ry1FO-u_318ptjrBZ1THjRsPy4g.cer (raw, json)
Hash identifier: mrvnvtjeGNdRFM7UsGBQCbHsGc6htZhrtfkeICFNycA=
Subject key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 58F7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 26 Jul 2024 15:33:06 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 128.250.0.0/16
IP: 192.43.207.0 -- 192.43.209.255
IP: 192.101.254.0/24
IP: 192.231.127.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22775 (0x58f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 26 15:33:06 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:87:0b:7e:46:c7:cd:f3:00:ac:84:55:1d:
85:48:3f:3e:11:cb:4d:8e:3c:26:d0:ac:87:17:67:
9c:5f:88:fb:dd:80:9c:fb:9f:05:0a:7b:ce:81:61:
e1:2a:66:44:7f:fa:84:91:c8:5f:99:0d:9c:67:d0:
66:d9:52:00:a6:4f:fd:d8:5d:da:fb:f0:14:cc:bf:
57:39:cf:54:20:9e:f3:81:44:f5:c4:93:42:52:f6:
30:d0:c5:09:b4:ee:cb:6f:45:1c:1d:ae:83:1d:60:
96:c1:9a:b2:34:90:ac:9b:4d:2b:17:bf:18:34:54:
db:5e:44:4f:19:ad:48:ba:83:cb:aa:e1:a4:a6:6d:
e9:56:8d:25:9a:70:1c:31:29:f2:66:63:b8:ea:ba:
5c:23:97:31:f4:44:d1:9b:64:84:bf:75:a2:80:77:
0b:9c:8f:2a:2b:51:69:1c:ec:1e:f9:d7:e9:3d:3e:
1e:75:a6:ce:66:60:36:d2:8e:4b:44:65:d5:95:17:
0a:fa:5f:8b:d1:93:68:4b:6e:86:c9:e9:2c:0c:fe:
10:8c:40:47:64:5e:07:75:34:fe:c9:62:fc:91:c3:
2c:48:14:21:ce:e6:61:44:df:e4:52:c7:33:49:7f:
83:e3:77:cc:f3:4d:b7:4c:2b:12:2f:ed:9d:44:36:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.250.0.0/16
192.43.207.0-192.43.209.255
192.101.254.0/24
192.231.127.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bd:f8:84:00:4c:dc:9f:af:92:ef:c5:d2:e9:42:2f:0a:5c:
77:22:2e:c7:ce:60:7a:ae:39:56:40:f9:31:74:5d:2e:10:f6:
2c:7f:d1:6f:09:33:4a:8c:6d:15:4f:1c:bb:20:88:af:03:21:
2b:1c:95:46:a9:43:2d:ae:e1:ca:2c:34:bb:60:36:e0:e4:16:
bb:c4:08:aa:c8:84:73:ef:94:d8:07:0d:28:9b:0d:63:cf:ed:
28:eb:a2:d9:23:0e:c1:c3:09:24:f4:95:5d:c1:2a:ff:2c:17:
77:82:32:ec:5c:2d:4a:5e:c4:9a:a9:fd:89:23:17:ea:e5:6f:
e8:a0:8d:da:39:23:72:f3:dc:da:55:ef:94:30:89:10:71:7b:
91:eb:41:e8:04:ad:30:fd:2b:dd:29:27:60:8f:47:e2:d6:55:
3f:38:5d:39:ba:c5:bf:4b:d4:6f:7e:61:65:c0:26:02:81:d0:
ea:bc:f6:3a:5e:87:ea:31:5d:6a:e6:dc:6d:ce:4f:c5:b1:3e:
40:75:ec:04:59:03:69:8e:5a:84:6c:73:74:c2:c2:1e:55:9c:
72:7c:95:53:d7:73:42:4e:e8:d6:4e:3d:43:06:3c:b5:06:73:
57:34:d1:1e:39:36:47:0f:f3:0e:82:12:2f:2a:11:9a:d7:dd:
a8:0d:13:18
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICWPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNzI2MTUzMzA2WhcNMjUwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE1NTdCQTExMC8GA1UEBRMoQUYyRDQ1M0JFQkJGREY1RjI5QjYzQUMx
Njc1NEM3OEQxQjBGQ0I4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMpMhwt+RsfN8wCshFUdhUg/PhHLTY48JtCshxdnnF+I+92AnPufBQp7zoFh4Spm
RH/6hJHIX5kNnGfQZtlSAKZP/dhd2vvwFMy/VznPVCCe84FE9cSTQlL2MNDFCbTu
y29FHB2ugx1glsGasjSQrJtNKxe/GDRU215ETxmtSLqDy6rhpKZt6VaNJZpwHDEp
8mZjuOq6XCOXMfRE0ZtkhL91ooB3C5yPKitRaRzsHvnX6T0+HnWmzmZgNtKOS0Rl
1ZUXCvpfi9GTaEtuhsnpLAz+EIxAR2ReB3U0/sli/JHDLEgUIc7mYUTf5FLHM0l/
g+N3zPNNt0wrEi/tnUQ2BrMCAwEAAaOCAwwwggMIMB0GA1UdDgQWBBSvLUU767/f
Xym2OsFnVMeNGw/LiDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU3QkEvNjgxMkRGOTIwNEVCMTFFQUE3MkZBMzYzQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU1N0JBLzY4MTJERjkyMDRFQjExRUFBNzJGQTM2M0M0RjlBRTAyL3J5MUZPLXVf
MzE4cHRqckJaMVRIalJzUHk0Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA4BggrBgEFBQcBBwEB/wQpMCcw
JQQCAAEwHwMDAID6MAwDBADAK88DBAHAK9ADBADAZf4DBADA538wDQYJKoZIhvcN
AQELBQADggEBAJG9+IQATNyfr5LvxdLpQi8KXHciLsfOYHquOVZA+TF0XS4Q9ix/
0W8JM0qMbRVPHLsgiK8DISsclUapQy2u4cosNLtgNuDkFrvECKrIhHPvlNgHDSib
DWPP7SjrotkjDsHDCST0lV3BKv8sF3eCMuxcLUpexJqp/YkjF+rlb+igjdo5I3Lz
3NpV75QwiRBxe5HrQegErTD9K90pJ2CPR+LWVT84XTm6xb9L1G9+YWXAJgKB0Oq8
9jpeh+oxXWrm3G3OT8WxPkB17ARZA2mOWoRsc3TCwh5VnHJ8lVPXc0JO6NZOPUMG
PLUGc1c00R45NkcP8w6CEi8qEZrX3agNExg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org