Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer (raw, json)
Hash identifier: /nqLnz5QNq4W+MUssYjcFuTtslRfJLm3jLMw1Vn9e7Y=
Subject key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CA52
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Nov 2023 20:03:37 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 203.6.250.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 17:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117330 (0x1ca52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 10 20:03:37 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:47:f8:7b:18:2b:96:7b:10:b6:f5:22:ec:
cd:80:5c:b5:21:8a:9a:06:57:ec:6e:4b:c4:c3:8a:
05:50:45:ab:a0:a6:d0:4b:f7:82:7b:27:fd:40:f3:
c4:e4:28:44:5d:75:74:be:39:6c:4a:d7:ae:c0:85:
34:ac:0d:7d:e6:f7:82:d3:66:06:e3:ef:ba:de:33:
a3:b1:f9:5d:41:89:6e:c5:f7:d8:aa:f8:07:dc:93:
e0:b6:60:ec:23:ef:3e:cf:82:1a:5f:d2:24:cd:26:
79:18:94:6d:e6:2a:a8:c5:aa:ee:2e:6b:36:da:17:
af:49:70:1d:59:66:51:97:0b:2f:1e:08:70:5c:dd:
a1:62:3f:5d:4f:92:19:ea:88:e6:d9:af:04:e0:df:
42:4e:68:76:87:f9:f2:09:d1:4e:9b:71:6a:b1:56:
58:16:1c:e8:45:78:8d:36:df:b9:e7:db:9b:30:a0:
4f:cb:42:e7:fd:37:72:4e:ef:3b:3c:7a:82:9e:6d:
12:1a:82:8b:8d:89:bb:1b:ed:bf:a7:b1:ee:26:5c:
f4:43:6c:87:31:9b:66:9f:22:55:26:07:b7:3a:d6:
50:e3:1d:66:c0:e9:59:9a:6f:67:6d:00:62:88:77:
fb:07:f8:ba:dd:79:eb:d2:44:e4:a3:ee:4c:33:5e:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.6.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:4f:eb:cc:50:c8:fb:47:5e:3f:2c:f0:09:ec:b7:b6:82:f2:
87:62:f0:d9:ec:90:76:06:78:23:73:7f:bc:01:16:f6:88:b1:
a5:8e:e6:f1:f6:39:7a:a5:42:5b:79:78:88:a1:7e:77:55:59:
b1:94:3f:18:7a:72:81:9d:31:e0:92:1f:a7:8d:d9:52:00:37:
7b:bf:20:20:4a:41:ef:73:37:1c:c4:77:93:4e:26:6a:64:f5:
fd:dd:44:d4:b1:28:95:5e:d0:e4:e2:f7:be:0e:bb:ff:53:84:
46:e8:c7:96:35:a6:db:e5:dc:b6:29:c2:f3:b3:72:24:30:bb:
5e:26:32:f0:52:9e:95:28:81:5e:db:bb:b3:d0:8a:81:57:d8:
c9:5c:8e:05:d1:23:f7:3b:d1:f2:54:fb:0d:6c:32:7c:ff:9a:
eb:39:28:6d:9a:34:4b:bf:87:3f:9c:78:e6:52:11:f9:b9:73:
6d:e8:bc:b6:af:f3:6d:8f:7b:91:0a:34:30:e6:d5:7c:22:39:
48:29:2c:69:8b:ba:26:29:2d:ac:6b:12:7f:5c:06:87:98:66:
dc:8b:15:30:aa:cb:10:e3:be:e2:8c:55:de:06:e0:67:80:c8:
09:d3:98:37:e3:12:00:8f:79:d4:e9:4e:89:e3:33:5c:e9:4a:
fd:e8:b6:86
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAcpSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTExMDIwMDMzN1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNC
ODdCMkU4QzhBRkQxQzYwNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvEUf4exgrlnsQtvUi7M2AXLUhipoGV+xuS8TDigVQRaugptBL94J7J/1A88Tk
KERddXS+OWxK167AhTSsDX3m94LTZgbj77reM6Ox+V1BiW7F99iq+Afck+C2YOwj
7z7Pghpf0iTNJnkYlG3mKqjFqu4uazbaF69JcB1ZZlGXCy8eCHBc3aFiP11Pkhnq
iObZrwTg30JOaHaH+fIJ0U6bcWqxVlgWHOhFeI0237nn25swoE/LQuf9N3JO7zs8
eoKebRIagouNibsb7b+nse4mXPRDbIcxm2afIlUmB7c61lDjHWbA6Vmab2dtAGKI
d/sH+LrdeevSROSj7kwzXs3ZAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQURBbomFja
Z3sM2jO4ey6Miv0cYHgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU1QzQ5LzhBODdFRkMyMUE0ODExRUI4RjE0MzI0NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFNUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZq
YVozc00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADLBvowDQYJKoZIhvcNAQELBQADggEBAMNP68xQyPtHXj8s8Ans
t7aC8odi8NnskHYGeCNzf7wBFvaIsaWO5vH2OXqlQlt5eIihfndVWbGUPxh6coGd
MeCSH6eN2VIAN3u/ICBKQe9zNxzEd5NOJmpk9f3dRNSxKJVe0OTi974Ou/9ThEbo
x5Y1ptvl3LYpwvOzciQwu14mMvBSnpUogV7bu7PQioFX2MlcjgXRI/c70fJU+w1s
Mnz/mus5KG2aNEu/hz+ceOZSEfm5c23ovLav822Pe5EKNDDm1XwiOUgpLGmLuiYp
LaxrEn9cBoeYZtyLFTCqyxDjvuKMVd4G4GeAyAnTmDfjEgCPedTpTonjM1zpSv3o
toY=
-----END CERTIFICATE-----
Generated at Wed Apr 24 18:37:11 2024 by rpki-client on console-ams.rpki-client.org