Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer
File: qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer (raw, json)
Hash identifier: QxZAi8vWH1M78vOTtUpQIkbyRoTuNq5LsnqlItOJUYc=
Subject key identifier: A8:9D:0F:D4:F4:8A:BF:69:4F:D9:DF:77:04:E5:96:46:4D:ED:21:79
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 63AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 03:11:06 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 160.20.118.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 17:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25516 (0x63ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Apr 2 03:11:06 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91E6CCA, serialNumber=A89D0FD4F48ABF694FD9DF7704E596464DED2179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:7c:3a:f4:ac:90:9f:ca:33:07:79:48:ed:
be:a0:f1:83:3c:35:f0:fd:2f:37:58:8f:93:3c:5f:
1c:ba:82:5f:bd:21:b5:61:3a:dc:21:1b:a1:f8:90:
7c:52:39:68:9f:c0:10:db:ba:9b:28:dc:45:bb:5f:
43:0a:b0:60:14:00:62:3b:5e:2b:a9:f6:0e:b5:39:
14:52:f7:db:27:4d:88:df:14:b1:f7:cb:68:cc:7b:
65:7a:15:27:ce:72:9c:d4:d1:dd:d5:0b:79:15:69:
66:f0:d7:15:dc:ed:68:c3:58:c3:88:6c:64:df:5b:
23:0f:58:4d:15:61:22:59:83:b9:01:ed:01:62:40:
5b:83:fb:f8:0e:4c:f1:92:61:c0:bb:99:ed:18:fb:
15:4e:0a:0c:b2:da:83:e6:39:73:51:38:82:2f:f9:
fd:14:7b:73:d1:bd:e8:1a:2a:38:b4:56:b8:cb:8f:
6c:21:2f:eb:08:95:8f:55:b1:f4:6a:56:51:bd:2c:
c6:5c:01:76:5c:43:10:3e:76:63:6d:1b:56:c1:dc:
c8:d4:ce:72:c1:e2:0f:0d:f1:b8:63:4c:69:eb:2f:
6e:3a:27:e5:c4:51:8c:60:c1:7a:f1:18:cf:e1:06:
97:4d:f3:2e:22:6d:a2:d7:47:02:e6:65:7e:48:30:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:0F:D4:F4:8A:BF:69:4F:D9:DF:77:04:E5:96:46:4D:ED:21:79
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.118.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:2d:9c:1c:99:3f:b2:ad:79:11:5e:a9:a8:4d:e0:dc:e0:af:
a5:13:59:a8:e7:de:03:16:97:36:bb:bd:c1:84:43:ce:5f:fc:
b0:cd:2e:12:ec:28:60:25:ae:26:27:60:0f:7e:1d:2e:07:52:
57:15:86:8c:97:74:bc:00:1b:a8:03:1e:c6:45:07:a0:32:58:
a1:38:62:74:81:a2:f2:4b:49:e8:1d:55:63:61:d7:bd:b0:be:
91:45:37:a1:f6:9e:d0:9b:45:af:a6:df:80:ad:51:e6:f2:a1:
ed:33:16:cf:d4:16:62:ea:71:e9:e8:96:8d:33:19:d3:93:28:
2d:ac:33:ae:7c:cf:32:75:60:6e:e8:1f:cc:36:a7:d5:23:4b:
d0:62:0f:22:a3:11:15:d7:3f:91:b7:b6:ef:03:c6:99:8a:4b:
89:e3:63:97:6e:52:84:59:00:f3:42:22:d6:e2:0e:dc:fc:25:
3b:d4:2c:c6:ff:2c:3a:1f:a0:2b:83:ae:4c:51:7c:03:e6:15:
12:3e:00:5b:74:fc:05:70:be:9f:a2:ac:77:76:e5:1d:8b:3e:
bd:e8:96:cb:52:2a:4c:43:d3:35:33:d8:c6:88:13:c0:3e:0e:
93:1a:e1:78:8f:75:fa:11:05:c0:15:ee:b1:0b:6d:8c:60:12:
da:16:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:29 2025 by rpki-client on console.sobornost.net