RPKI Certificate
Location: rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer (download)
Subject key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest: rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
CA Repository: rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
Notification URL: https://rrdp.apnic.net/notification.xml
Subordinate resources:
1: IP: 137.147.0.0/16
2: IP: 138.130.0.0/16
3: IP: 138.217.0.0/16
4: IP: 139.130.0.0/16
5: IP: 139.134.0.0/16
6: IP: 139.168.0.0/16
7: IP: 143.238.0.0/16
8: IP: 144.130.0.0--144.140.255.255
9: IP: 147.10.0.0/16
10: IP: 147.69.0.0/16
11: IP: 149.135.0.0/16
12: IP: 149.167.0.0/16
13: IP: 155.143.0.0/16
14: IP: 165.228.0.0/16
15: IP: 192.67.84.0/24
16: IP: 192.70.219.0/24
17: IP: 192.73.66.0/24
18: IP: 192.74.139.0--192.74.208.255
19: IP: 192.82.143.0/24
20: IP: 192.111.105.0/24
21: IP: 192.131.27.0--192.131.30.255
22: IP: 192.148.116.0--192.148.165.255
--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15321 (0x3bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 27 06:08:34 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:1d:aa:6f:69:f1:ab:bc:b0:97:d8:b3:e6:
1f:44:a2:cd:57:33:8c:d9:00:1a:ea:2b:03:26:9c:
a5:37:e6:e6:a3:09:d9:6a:bb:dc:6d:58:4c:b2:9e:
31:ec:de:88:19:6e:19:fa:dd:3d:9f:68:45:f7:9f:
fb:f8:9d:30:e4:13:0b:59:cb:5c:c5:a9:5f:94:74:
1e:cc:6a:0f:96:bd:c3:ff:19:f2:70:3c:5b:4d:d9:
9e:cf:0a:6f:5a:e8:84:64:f5:eb:2c:9f:60:ae:e0:
93:15:12:39:b5:ef:c8:ab:f2:2e:8f:61:5f:4c:0d:
d9:c4:af:89:ff:ac:fe:6f:3c:59:4a:a3:66:9a:9f:
6b:39:33:70:93:ac:ad:73:00:f5:15:1a:43:65:9a:
2e:7b:da:d7:ad:9a:f1:b2:7e:69:51:5f:44:3c:96:
2b:7d:d8:8e:fa:37:a0:a4:ea:1a:e7:6e:20:4e:e8:
98:43:74:6a:1f:62:9c:9f:3a:74:bd:db:5f:f1:4d:
6d:bb:d9:59:6f:41:4f:06:ae:be:f8:15:8b:83:8f:
28:04:e1:01:65:81:59:77:ab:48:9c:74:ff:25:52:
a6:3b:d0:cb:c3:fa:61:7f:bb:a9:5f:32:db:e3:a0:
c9:ce:6d:2c:0b:4c:bd:8b:52:54:5c:bf:9d:d3:66:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.147.0.0/16
138.130.0.0/16
138.217.0.0/16
139.130.0.0/16
139.134.0.0/16
139.168.0.0/16
143.238.0.0/16
144.130.0.0-144.140.255.255
147.10.0.0/16
147.69.0.0/16
149.135.0.0/16
149.167.0.0/16
155.143.0.0/16
165.228.0.0/16
192.67.84.0/24
192.70.219.0/24
192.73.66.0/24
192.74.139.0-192.74.208.255
192.82.143.0/24
192.111.105.0/24
192.131.27.0-192.131.30.255
192.148.116.0-192.148.165.255
Signature Algorithm: sha256WithRSAEncryption
aa:d5:11:7f:ba:82:7d:4b:a1:05:ff:ff:1d:0d:1c:4f:09:e5:
a3:3a:46:76:69:32:6c:0b:75:67:cd:f2:26:1e:5e:5a:41:86:
fa:51:f4:d4:75:1e:cd:a0:ea:2b:56:29:a9:7a:8f:1c:c1:a5:
f8:8c:b5:ce:5b:dc:63:8c:4b:3f:ec:99:ad:72:e2:51:7b:a8:
d0:c3:48:c7:4c:49:d0:54:26:db:ec:2b:44:af:a3:33:e5:ea:
d2:33:0e:df:10:44:73:a3:80:15:17:de:0a:77:90:6c:2b:77:
f4:d4:a8:31:c2:d1:a3:08:63:83:87:48:7e:f8:41:8d:2c:fc:
15:f7:8d:b2:81:ae:47:38:50:6d:6f:00:08:2b:9b:ea:6d:9e:
88:4d:35:9d:7e:5e:88:5e:81:ae:20:fb:64:31:0e:f2:e1:4a:
a5:7c:da:2d:de:27:d3:57:94:93:fc:c3:dc:5b:88:0a:d6:5a:
c7:69:b7:33:ff:e1:f9:9d:d7:80:45:d7:33:24:63:0d:a5:f5:
98:f0:d8:68:3b:a5:75:9b:90:87:45:96:49:aa:f6:0c:f5:19:
16:07:72:79:8a:b0:e1:a0:e3:72:35:df:7e:31:27:8f:c9:30:
b5:62:4d:1a:8a:4e:d0:8d:29:eb:9d:93:90:78:d4:cd:74:e6:
3d:d5:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 26 12:50:05 2021 by LibreSSL & rpki-client.