Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
File: xzON8bdowFB0za7Q_bGkwUrfuLU.cer (raw, json)
Hash identifier: oBto/k2Ytrd5jQnhALMBQjk9uazWavx66KB23Ljm5OA=
Subject key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 51AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 05 Feb 2024 23:21:36 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.15.134.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 May 2024 18:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20910 (0x51ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 5 23:21:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:70:05:f9:f3:7f:7e:b1:e6:01:24:f5:ad:6d:
74:a1:c0:10:99:22:e3:80:5d:d0:33:24:22:f2:60:
80:e3:fb:73:78:24:c0:18:5d:6f:87:49:c5:99:da:
33:2e:bd:e8:57:34:b6:9a:37:6b:30:2e:1e:99:5f:
c7:98:61:49:a4:c9:32:2b:81:22:58:3c:72:1b:b5:
da:69:f9:76:35:41:44:49:2f:36:05:d6:ea:24:47:
39:5b:3b:79:54:1e:2f:32:a5:9a:47:d7:cf:7a:56:
2d:19:5f:05:b0:e6:20:ba:5f:60:41:9d:26:f3:85:
5b:5b:ea:cc:3c:ff:36:4d:37:4e:c7:bf:0b:64:b6:
50:41:18:c5:4e:23:8a:9d:1e:c9:eb:1a:d4:94:f8:
4a:46:d2:80:92:db:76:96:52:6d:14:cc:19:1d:d0:
4b:58:bc:5f:2c:a3:fd:7c:a0:b7:4f:c7:08:0c:f2:
bb:5d:75:cc:02:3f:3e:1d:1a:e6:a8:82:ee:15:3e:
44:29:c4:ab:c6:10:d5:c8:4c:06:09:40:8d:62:20:
26:ba:5a:37:2b:b9:fc:5f:45:54:03:aa:be:cd:a5:
b2:ad:aa:a9:fe:0b:92:ae:aa:43:a9:e0:78:ee:da:
a4:39:2c:0d:61:74:3d:14:12:e5:28:d9:6a:78:e4:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.134.0/23
Signature Algorithm: sha256WithRSAEncryption
60:34:d8:29:f7:b3:a7:cf:4e:ac:15:41:e9:8f:84:6b:bb:3e:
0d:b9:94:67:68:8d:a6:73:5a:19:92:7e:2f:82:e5:c9:80:ac:
23:17:7e:7f:c0:37:e9:1f:a7:eb:5d:f3:79:60:60:b9:fc:f4:
14:45:16:7b:99:3e:24:ce:52:77:f0:ba:50:20:d8:0c:f3:bb:
4b:54:99:1f:2c:fd:cd:40:f0:5c:59:5c:83:a8:79:3b:37:1d:
09:a3:5c:63:b4:71:bb:04:5b:30:6a:92:d8:2d:5c:56:1d:4a:
bc:ca:53:18:7a:5c:2b:ad:e4:28:5c:8f:a8:9f:87:2d:74:aa:
22:2d:b4:ca:f0:e8:b9:fb:99:f8:f5:20:fc:8b:de:d8:7d:37:
1d:fb:e6:de:f4:83:cf:19:25:5f:88:2f:61:85:d9:9f:50:76:
00:37:b3:ce:a6:1f:a2:0d:f1:c2:6e:fb:80:df:ab:69:bd:3f:
c1:76:cf:e4:03:1f:9d:4a:39:42:74:0c:a3:61:ee:96:14:86:
3f:fa:20:0a:7c:4e:b3:18:9c:af:fc:8e:9d:93:3f:e6:b7:13:
af:8e:a1:1c:a4:39:34:18:09:c0:b9:c2:e7:0f:72:65:60:ca:
9d:1d:8d:d7:65:ed:a4:4b:ae:dc:8b:4e:1e:58:0f:32:8c:75:
43:f5:03:d2
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwMjA1MjMyMTM2WhcNMjUwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDMTY3RjExMC8GA1UEBRMoQzczMzhERjFCNzY4QzA1MDc0Q0RBRUQw
RkRCMUE0QzE0QURGQjhCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APRwBfnzf36x5gEk9a1tdKHAEJki44Bd0DMkIvJggOP7c3gkwBhdb4dJxZnaMy69
6Fc0tpo3azAuHplfx5hhSaTJMiuBIlg8chu12mn5djVBREkvNgXW6iRHOVs7eVQe
LzKlmkfXz3pWLRlfBbDmILpfYEGdJvOFW1vqzDz/Nk03Tse/C2S2UEEYxU4jip0e
yesa1JT4SkbSgJLbdpZSbRTMGR3QS1i8Xyyj/Xygt0/HCAzyu111zAI/Ph0a5qiC
7hU+RCnEq8YQ1chMBglAjWIgJrpaNyu5/F9FVAOqvs2lsq2qqf4Lkq6qQ6ngeO7a
pDksDWF0PRQS5SjZanjkX10CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTHM43xt2jA
UHTNrtD9saTBSt+4tTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE2N0YvNEFBQjdCQ0FDNDdEMTFFRTlGQzdDODBGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMxNjdGLzRBQUI3QkNBQzQ3RDExRUU5RkM3QzgwRkM0RjlBRTAyL3h6T044YmRv
d0ZCMHphN1FfYkdrd1VyZnVMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZ0PhjANBgkqhkiG9w0BAQsFAAOCAQEAYDTYKfezp89OrBVB6Y+E
a7s+DbmUZ2iNpnNaGZJ+L4LlyYCsIxd+f8A36R+n613zeWBgufz0FEUWe5k+JM5S
d/C6UCDYDPO7S1SZHyz9zUDwXFlcg6h5OzcdCaNcY7RxuwRbMGqS2C1cVh1KvMpT
GHpcK63kKFyPqJ+HLXSqIi20yvDoufuZ+PUg/Ive2H03Hfvm3vSDzxklX4gvYYXZ
n1B2ADezzqYfog3xwm77gN+rab0/wXbP5AMfnUo5QnQMo2HulhSGP/ogCnxOsxic
r/yOnZM/5rcTr46hHKQ5NBgJwLnC5w9yZWDKnR2N12XtpEuu3ItOHlgPMox1Q/UD
0g==
-----END CERTIFICATE-----
Generated at Fri May 3 20:13:53 2024 by rpki-client on console-ams.rpki-client.org