Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer
File: xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer (raw, json)
Hash identifier: FWv1v6C8PosgeLUObRqJpojsTfYTEoL0cfZdd0y2OF8=
Subject key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5900
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 27 Jul 2024 17:30:27 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: IP: 160.30.25.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Oct 2024 17:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22784 (0x5900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 27 17:30:27 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:5d:4f:82:3a:f4:d4:8b:17:86:81:55:11:
8f:3e:31:46:95:8d:1d:36:14:b6:ef:84:f7:21:ab:
b0:d5:51:2a:2c:49:6e:1d:b7:6e:ec:7f:d9:33:d2:
d7:16:e0:84:81:91:f2:3e:b3:b6:df:a0:8f:0f:e1:
17:99:c6:67:3a:66:9c:c3:ed:f5:79:80:80:96:ce:
d2:05:0c:b4:b6:fb:d6:a2:46:6b:13:c7:9b:b8:fe:
df:26:ab:ee:83:e0:88:b1:6c:24:22:a7:d4:8c:c8:
a9:7f:35:dd:8e:7c:51:cc:58:4a:6a:55:bb:42:af:
ab:a3:5c:7c:fe:c9:17:3e:a2:8c:18:40:77:54:88:
b4:75:67:8c:a3:10:6a:a0:0f:dc:1c:36:a3:a3:85:
11:03:84:d7:e2:0d:15:8e:89:8e:de:be:8a:63:a4:
01:43:e6:b5:97:4a:b5:99:1a:34:f3:37:d4:74:55:
0f:87:f2:34:2a:3d:78:94:6f:2e:3d:9d:3b:9c:1c:
19:77:c3:a9:12:53:32:24:fc:e1:ef:4d:19:42:af:
a9:ea:fa:50:cb:e0:b8:1f:03:ac:d8:17:c9:0b:96:
80:8f:a4:87:0f:70:e8:71:9a:79:4c:9d:46:09:38:
e1:91:fa:d9:2b:85:a0:1f:0e:0f:db:e5:d7:a4:a1:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:46:a4:55:14:a1:0d:e4:4a:d9:01:48:17:9c:af:d2:9e:99:
92:c7:49:dc:3a:cf:f7:0e:47:69:62:18:80:89:c0:ac:cc:7f:
59:fc:9a:58:8c:37:c1:59:5d:3a:3d:8b:6b:8a:53:70:07:d8:
26:89:50:89:5d:53:60:2a:fe:ff:89:0a:e1:3c:d6:40:a8:b8:
56:57:ae:f7:6a:f9:6a:00:ba:bb:0d:c2:8d:6f:ae:12:eb:ec:
23:b5:9d:bc:38:ec:fc:1a:d0:10:28:d6:8c:c5:1b:4c:10:9d:
e2:06:08:a2:7d:e8:35:ce:ed:39:4f:09:bc:ad:ad:01:db:1c:
01:8f:71:68:a1:0c:cf:9c:35:be:21:a3:94:9d:bf:86:4f:2b:
4c:de:73:5b:3b:06:8b:5b:48:83:4e:ce:b4:53:cb:8e:c3:8d:
be:83:51:1d:d0:19:1e:1d:5f:a2:5d:df:5c:96:3d:f1:55:14:
f7:d3:2d:18:5f:19:5b:24:90:06:d2:be:f6:45:1c:4c:6e:99:
9a:22:e1:f8:b4:7c:2b:3a:9d:d9:ef:9a:f6:89:53:c9:a7:e6:
d5:5d:ba:92:b9:26:36:9c:c4:c6:72:97:61:03:a7:d8:18:f7:
2d:61:34:c4:c9:d7:83:1a:e1:4c:c7:d8:71:23:20:e1:92:e2:
64:a6:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:17 2024 by rpki-client on console-fra.rpki-client.org