Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
File: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer (raw, json)
Hash identifier: dK5MsqWB/VJGxLsH03zrJf26NXRzSn7Z679tVyyzwdo=
Subject key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 020B77
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Sep 2024 03:16:42 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 202.44.130.0/23
IP: 203.158.96.0 -- 203.158.255.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134007 (0x20b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 3 03:16:42 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:df:f6:c8:40:c7:63:5c:12:e7:21:3c:c8:
ae:5d:75:a1:96:fc:cd:5c:e6:cf:4d:e3:a4:e6:40:
7d:53:a0:1a:3a:5f:37:eb:de:a1:cf:81:a8:c7:3e:
cd:da:79:57:46:66:cd:37:2a:ea:da:b6:b9:e4:20:
90:34:2a:04:f8:66:52:49:21:45:e7:c2:94:ff:76:
9c:2d:b6:50:e6:1e:34:cd:47:67:a6:9c:e9:21:2b:
1b:1e:40:8f:78:03:c8:06:1f:46:ae:77:11:4c:72:
08:20:47:b3:a8:53:84:7c:d3:93:cf:07:9d:e0:dd:
24:84:1d:17:95:d7:80:66:6c:58:45:5c:b6:f3:e8:
e9:68:30:04:8c:16:b7:cc:87:f7:80:f4:16:ae:28:
35:01:b6:00:b4:ef:09:e1:c6:58:a6:be:10:0f:9d:
9b:c8:11:c1:7b:dd:51:81:c8:f9:d3:c6:f7:df:d0:
5d:4a:12:be:3d:76:68:90:75:17:0b:d5:3f:5c:be:
c4:e9:df:d7:f8:7c:c3:57:c5:4c:5e:df:29:a7:93:
38:ac:37:08:ea:78:7c:06:e6:07:5e:cf:ef:a9:d2:
f3:9f:38:1c:b3:a5:0d:c2:ca:12:c3:23:da:60:45:
bb:24:f7:09:93:fd:ec:ee:a7:aa:3b:fd:8c:f8:74:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.130.0/23
203.158.96.0-203.158.255.255
Signature Algorithm: sha256WithRSAEncryption
d7:9b:84:03:93:ae:43:d5:ab:7e:e0:07:5d:2f:f4:00:64:65:
b1:02:6c:40:2b:65:99:0b:2f:37:29:1e:4f:c2:93:0f:32:d1:
93:80:12:66:60:e6:1d:29:db:a7:0b:34:71:68:1c:6b:20:7f:
9c:88:ea:91:83:21:86:04:3f:f0:1f:42:af:a2:b2:b5:4a:78:
13:34:b2:f2:20:04:3f:19:c5:a8:c0:b0:ff:0c:0c:5a:c3:46:
27:92:c3:e1:85:71:f9:70:d2:40:dd:72:4f:05:a5:fd:3e:91:
cf:e4:e1:37:c6:15:63:a3:05:92:ec:3e:8c:1f:e6:2e:f3:c6:
98:76:45:60:69:3b:5d:85:03:6d:f5:01:ae:fa:ab:99:0b:df:
90:71:96:92:8a:2d:e0:29:71:ff:cb:54:f6:f2:a6:6f:b6:4f:
32:ad:fa:3a:31:05:08:07:cf:16:d0:5e:7d:26:4a:7e:d5:f5:
66:fa:1f:c6:d2:42:dd:79:1c:e3:e5:d2:25:a3:05:05:53:f6:
b9:5b:cc:6f:e9:16:41:36:86:6b:e1:85:eb:fa:64:fe:58:00:
bd:a4:ba:b5:e8:df:52:a1:ff:0f:42:41:1c:67:e8:80:7e:ff:
d3:d3:4a:e7:ad:ad:ee:30:a3:8e:1a:c8:8b:e2:7a:e5:17:42:
32:1e:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:56 2024 by rpki-client on console-fra.rpki-client.org