Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
File: uoXZHSSsqengMR5VLb83WXY6Yro.cer (raw, json)
Hash identifier: Kn+vGCRe0CuSMjKuzaWfctYxBczFd2ooq0mTx1lCRjU=
Subject key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 589D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 19 Jul 2024 01:43:42 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 160.25.230.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Sep 2024 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22685 (0x589d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 19 01:43:42 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:35:be:84:96:f8:b8:40:83:71:95:0f:2d:
82:03:c6:b9:be:5b:84:da:80:9b:3d:31:19:c6:4a:
ae:2f:76:0b:eb:ca:0a:6f:66:7e:9b:e9:69:ed:75:
81:79:87:04:56:07:f7:89:d7:ef:60:d2:80:bb:54:
65:ae:53:06:84:81:e5:20:d5:70:51:3d:b1:7a:e8:
4d:1a:d8:d8:3e:cc:b2:e6:55:e5:af:b2:fe:39:c1:
0e:21:6b:aa:af:dd:4f:37:f9:85:00:06:00:a1:6f:
e6:7e:c9:50:1c:89:cd:6b:b7:c3:d6:b1:63:c8:41:
0e:aa:0b:5d:62:71:ae:cd:9d:fb:08:99:10:51:b6:
e4:1b:ec:90:77:a3:f9:32:94:1b:62:cb:28:8a:5b:
ff:ca:eb:aa:8d:58:7e:9a:56:a1:12:8c:6b:ce:f7:
07:a7:de:51:9f:b4:ed:14:d1:3d:e0:b7:1d:f1:3e:
a8:fc:f2:93:44:69:b1:87:60:cf:c7:b8:b4:83:c3:
46:64:36:5d:a3:86:22:72:c2:0f:69:7a:47:5e:5f:
e1:45:9d:c0:ce:c2:18:40:ac:e9:ec:55:df:cd:1a:
0f:c2:38:c8:05:59:77:c2:27:3d:2a:13:24:c4:b9:
09:66:bd:d3:94:1b:fb:83:19:95:99:0d:75:c9:c3:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.230.0/23
Signature Algorithm: sha256WithRSAEncryption
57:0b:61:a8:4a:5f:39:b0:99:6d:fa:b7:ff:9b:57:c9:76:7e:
64:a6:f1:2f:f5:7d:98:d3:68:ed:f2:20:93:34:82:20:50:51:
8e:3a:39:c1:dc:b2:83:26:dd:27:cb:ea:9e:ae:01:d4:30:e4:
27:db:fe:d9:dd:d5:9a:25:d6:5f:cb:07:56:43:13:55:e2:6e:
33:71:e7:76:4d:7b:09:73:ec:01:a2:ab:a7:07:04:b6:56:aa:
69:1e:88:79:60:53:38:18:ba:74:d0:e6:f9:e7:f4:e8:a7:e6:
ae:42:fa:b3:92:29:7b:67:a3:ac:7c:fb:4e:0b:6e:75:3f:d2:
03:43:55:d1:e8:63:a6:e8:3b:a2:12:9e:3a:ff:95:b6:d7:a8:
4f:25:1d:3e:72:22:c7:b7:3b:25:93:d2:25:c5:5c:68:34:65:
d0:7d:9a:d5:a0:b6:47:0d:59:7a:db:7b:d2:6b:20:ab:7d:7f:
55:fc:7c:f4:3b:3c:a3:2e:16:0d:a9:f9:15:6a:ef:08:1c:04:
85:f2:27:b1:94:9a:db:e0:ee:ed:3d:b6:08:f7:4e:a1:ec:e9:
04:55:1c:ab:9f:da:66:8e:6b:42:b1:8d:8c:86:d0:ef:23:71:
bd:83:05:47:82:82:ac:f9:38:fa:90:99:2b:74:9f:6c:84:62:
b3:d0:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:41:13 2024 by rpki-client on console-fra.rpki-client.org