Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
File: s-lBocVdFIOrV5HZSYdQ492t7cw.cer (raw, json)
Hash identifier: tvf/Jy2L+TlPfInPvxcCwwJ4OB8u/pQt+G08TPhMD9k=
Subject key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 51C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 07 Feb 2024 20:19:33 +0000
Certificate not after: Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 157.10.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 09:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20937 (0x51c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 7 20:19:33 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:24:e4:7e:16:b2:a7:e0:3f:09:45:cb:61:
c3:4d:33:54:0e:09:bb:47:02:4b:10:56:f1:c6:40:
5a:ab:a8:7d:9f:30:bb:4a:15:50:22:4a:01:53:20:
71:f3:5a:e3:46:04:af:ab:0c:c9:86:aa:89:16:1f:
a6:07:b5:a2:ff:5a:a3:95:2c:09:70:e5:51:2e:2d:
b5:2b:7d:09:5c:35:ad:15:c8:21:d9:81:14:36:83:
72:97:6e:45:1c:b0:0a:ae:1f:d9:99:fb:9a:d4:ea:
47:d3:81:06:ce:16:37:9a:df:7b:2d:d2:e5:e9:3f:
97:49:f5:47:32:72:8d:76:31:7c:a5:b1:10:08:d7:
ee:91:45:eb:de:e2:f5:98:48:ef:33:ea:ca:18:01:
0b:71:4e:d3:50:d4:e8:51:53:e8:c3:0d:6d:fe:b1:
26:3f:51:e6:f9:4d:50:3a:86:69:4e:7e:8c:10:2b:
b4:9e:f5:7b:6b:26:31:8c:cf:10:ee:29:64:c5:8f:
95:84:90:c7:3e:74:46:05:31:a6:f1:a2:48:14:37:
d5:39:b9:87:43:f0:f9:5c:cc:eb:93:38:22:9b:eb:
81:c7:a7:7c:f2:f9:01:32:02:bf:97:59:64:b2:8a:
2a:c6:e8:ca:5e:25:92:9a:02:2f:be:54:1b:74:fa:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.32.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:81:ad:36:11:36:2c:9a:42:f7:ef:2c:fa:3e:54:bb:05:54:
f1:f0:58:35:48:26:cc:25:97:b0:3c:9c:c7:28:9b:af:ff:52:
ca:98:46:7c:d4:db:b0:b2:7b:8a:e2:67:13:40:71:f4:76:bc:
fd:83:49:83:b6:ad:3c:bc:47:e0:c6:c5:65:26:4c:5e:ce:43:
a6:ca:a8:cc:5d:44:c5:0e:22:8d:ac:bd:cd:7e:f3:ba:5a:ba:
08:d9:8d:29:3d:f7:c3:c2:61:a8:d3:71:35:7d:83:97:fc:2c:
1b:f6:87:29:06:1b:37:ef:02:90:75:7d:4f:f5:1c:00:79:c2:
87:cb:86:20:ea:d4:d8:b0:94:8f:c0:1d:a4:e7:75:ae:c7:0c:
7f:ca:33:27:a2:5a:4c:7b:78:5b:e9:cb:f0:13:54:29:52:ff:
5c:dd:0a:3a:62:e3:ba:80:c4:39:cb:41:14:41:d6:7c:88:41:
1c:8d:4f:25:23:28:44:7e:82:40:11:b5:82:56:10:16:12:03:
8a:aa:5a:ea:a2:3f:3c:32:b9:36:44:c6:7b:f2:1d:9b:64:e3:
3b:25:d9:8f:38:46:00:d3:6b:9b:26:1d:62:14:a1:b5:af:d4:
da:3c:8e:09:f0:83:6f:94:74:cc:75:0d:03:ce:03:79:10:eb:
e5:36:dd:58
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwMjA3MjAxOTMzWhcNMjUwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzQjAxODExMC8GA1UEBRMoQjNFOTQxQTFDNTVEMTQ4M0FCNTc5MUQ5
NDk4NzUwRTNEREFERURDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APAtJOR+FrKn4D8JRcthw00zVA4Ju0cCSxBW8cZAWquofZ8wu0oVUCJKAVMgcfNa
40YEr6sMyYaqiRYfpge1ov9ao5UsCXDlUS4ttSt9CVw1rRXIIdmBFDaDcpduRRyw
Cq4f2Zn7mtTqR9OBBs4WN5rfey3S5ek/l0n1RzJyjXYxfKWxEAjX7pFF697i9ZhI
7zPqyhgBC3FO01DU6FFT6MMNbf6xJj9R5vlNUDqGaU5+jBArtJ71e2smMYzPEO4p
ZMWPlYSQxz50RgUxpvGiSBQ31Tm5h0Pw+VzM65M4IpvrgcenfPL5ATICv5dZZLKK
Ksboyl4lkpoCL75UG3T63jsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSz6UGhxV0U
g6tXkdlJh1Dj3a3tzDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0IwMTgvMzA3OUQ4MTJDNUY2MTFFRUJFMEI3OTYwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNCMDE4LzMwNzlEODEyQzVGNjExRUVCRTBCNzk2MEM0RjlBRTAyL3MtbEJvY1Zk
RklPclY1SFpTWWRRNDkydDdjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0KIDANBgkqhkiG9w0BAQsFAAOCAQEAtYGtNhE2LJpC9+8s+j5U
uwVU8fBYNUgmzCWXsDycxyibr/9SyphGfNTbsLJ7iuJnE0Bx9Ha8/YNJg7atPLxH
4MbFZSZMXs5DpsqozF1ExQ4ijay9zX7zulq6CNmNKT33w8JhqNNxNX2Dl/wsG/aH
KQYbN+8CkHV9T/UcAHnCh8uGIOrU2LCUj8AdpOd1rscMf8ozJ6JaTHt4W+nL8BNU
KVL/XN0KOmLjuoDEOctBFEHWfIhBHI1PJSMoRH6CQBG1glYQFhIDiqpa6qI/PDK5
NkTGe/Idm2TjOyXZjzhGANNrmyYdYhShta/U2jyOCfCDb5R0zHUNA84DeRDr5Tbd
WA==
-----END CERTIFICATE-----
Generated at Fri May 3 10:34:16 2024 by rpki-client on console-ams.rpki-client.org