Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer
File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer (raw, json)
Hash identifier: 1TCsrt8qubivNgv5cDFttLFelo5R+YCjYFPG11ZLRmo=
Subject key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020977
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 Aug 2024 14:52:20 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: IP: 202.44.128.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133495 (0x20977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 28 14:52:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:45:61:7e:86:52:a4:6d:ae:bf:98:7e:89:
a0:82:5e:a1:b0:14:33:11:d1:22:6e:7d:34:d3:a9:
0d:ca:6f:a5:79:97:48:2f:9e:1d:54:90:80:37:7f:
da:90:a3:49:97:bd:ec:3e:3b:e8:62:eb:34:76:38:
b4:8f:48:b5:c4:5e:4d:97:7c:72:0f:c6:33:d2:fe:
1e:f2:f6:83:bf:65:79:67:d9:53:8c:d5:97:6f:35:
74:bc:25:12:94:ff:4e:c5:78:ec:d2:d6:47:3a:dd:
03:3a:a2:e9:27:64:27:8a:79:77:56:2d:e4:4c:29:
05:be:c8:63:d2:a6:e6:77:95:f6:08:68:fd:e3:36:
ea:98:d1:4c:75:a3:72:3b:d3:8e:5d:97:b1:cb:4b:
dd:55:bd:4a:ce:f5:72:a3:06:cf:2f:b4:ff:35:c1:
9e:c6:84:e4:6a:ed:9c:d4:c8:eb:71:8a:9f:4b:8f:
e2:f3:b7:11:b2:25:0c:aa:f3:8c:8d:cc:9f:0f:84:
a9:7e:71:a7:97:dd:73:46:0a:d4:19:f9:38:10:62:
e6:7b:5f:61:b5:1a:ef:51:06:1e:14:52:7a:4b:f3:
d2:e6:40:c2:72:2d:93:cd:8a:62:0e:82:4b:d6:ea:
67:f2:4a:a4:41:c8:f6:82:cf:7f:fa:44:42:43:30:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.128.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9a:89:ed:5d:bc:1e:7d:95:59:75:9f:07:9d:68:a6:c8:59:
d2:8b:80:52:3b:4d:a9:0d:70:85:d3:ce:b2:bc:61:4e:41:d4:
70:46:e3:7d:63:c5:e2:c5:e0:b6:68:91:2a:30:34:1c:62:bb:
35:a5:2b:cb:27:1c:d6:41:f1:e5:1d:9c:7f:2b:d1:62:b1:92:
e5:d5:b5:b3:8d:65:ee:5e:e4:78:a3:6c:70:31:38:6c:c1:94:
2a:55:b1:cc:12:67:c9:c1:10:5b:35:60:89:c7:2e:48:37:fc:
fb:30:d0:56:f0:e7:6c:72:ad:fc:3f:d7:a5:5c:86:3c:1c:f7:
b1:3e:a9:84:01:54:44:22:63:24:7f:34:eb:8b:23:62:7f:59:
51:ec:0c:02:9b:67:52:a2:3d:93:73:8a:a3:16:5b:0d:85:e0:
ce:0f:e3:b9:30:6a:51:d9:73:55:01:c8:64:fa:b1:7f:75:05:
93:6a:7a:89:c7:ec:1e:6b:9f:5f:b8:a9:b7:aa:dc:3f:c8:00:
ec:ca:63:72:74:c0:60:b4:3a:b6:30:52:ac:c9:b8:67:2b:e2:
bc:e9:f6:5f:0d:45:49:42:ea:6b:38:da:cc:8c:6f:95:fe:53:
4d:a9:3a:69:a2:da:a4:e9:6e:20:00:c4:75:df:5a:05:b4:62:
0b:13:bc:cb
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAgl3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDgyODE0NTIyMFoXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzNDQ0ExMTAvBgNVBAUTKDZGRDVCNzQzMUU3MTUwRUQ2NTBGN0Yy
N0EzRENGOEM1Q0VBQzc3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmR0VhfoZSpG2uv5h+iaCCXqGwFDMR0SJufTTTqQ3Kb6V5l0gvnh1UkIA3f9qQ
o0mXvew+O+hi6zR2OLSPSLXEXk2XfHIPxjPS/h7y9oO/ZXln2VOM1ZdvNXS8JRKU
/07FeOzS1kc63QM6ouknZCeKeXdWLeRMKQW+yGPSpuZ3lfYIaP3jNuqY0Ux1o3I7
045dl7HLS91VvUrO9XKjBs8vtP81wZ7GhORq7ZzUyOtxip9Lj+LztxGyJQyq84yN
zJ8PhKl+caeX3XNGCtQZ+TgQYuZ7X2G1Gu9RBh4UUnpL89LmQMJyLZPNimIOgkvW
6mfySqRByPaCz3/6REJDMNMhAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUb9W3Qx5x
UO1lD38no9z4xc6sd2QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTczQ0NBLzFDQTlCODI0NjU0RDExRUZCNDRCN0I1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3M0NDQS8xQ0E5QjgyNDY1NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi9iOVczUXg1
eFVPMWxEMzhubzl6NHhjNnNkMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADKLIAwDQYJKoZIhvcNAQELBQADggEBAJKaie1dvB59lVl1nwed
aKbIWdKLgFI7TakNcIXTzrK8YU5B1HBG431jxeLF4LZokSowNBxiuzWlK8snHNZB
8eUdnH8r0WKxkuXVtbONZe5e5HijbHAxOGzBlCpVscwSZ8nBEFs1YInHLkg3/Psw
0Fbw52xyrfw/16Vchjwc97E+qYQBVEQiYyR/NOuLI2J/WVHsDAKbZ1KiPZNziqMW
Ww2F4M4P47kwalHZc1UByGT6sX91BZNqeonH7B5rn1+4qbeq3D/IAOzKY3J0wGC0
OrYwUqzJuGcr4rzp9l8NRUlC6ms42syMb5X+U02pOmmi2qTpbiAAxHXfWgW0YgsT
vMs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:38 2024 by rpki-client on console-fra.rpki-client.org