Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer (raw, json)
Hash identifier: vZFQRqSzVJiJCvDGVd1yolowXE5Dy24och0QSnBgB6U=
Subject key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021213
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Oct 2024 00:48:47 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 45.112.60.0/22
IP: 103.74.208.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135699 (0x21213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 4 00:48:47 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:3b:52:56:d8:8d:c6:50:31:4f:30:14:6f:
93:73:7d:a5:ff:64:99:d4:ff:b9:bf:d9:74:f1:9f:
21:c2:de:c2:9f:d4:6b:43:7a:db:95:11:ea:bb:34:
e3:7e:05:cb:83:06:a9:31:45:d0:38:75:68:ca:e4:
39:e6:f7:a3:4c:f1:90:3f:65:8d:03:62:2b:b2:f1:
7b:d2:1d:16:97:0b:85:c4:31:de:8e:83:94:7d:92:
4b:be:a2:e0:39:d4:31:cb:29:1a:00:46:ae:07:e1:
85:52:71:6e:f2:61:3b:fe:77:e6:ae:34:94:7f:02:
06:a9:54:79:9d:26:8d:45:ee:82:2e:2c:d5:9e:f6:
58:48:79:4d:44:54:6a:e4:e1:49:10:ae:0d:6d:5c:
6e:2e:1d:fa:ae:89:99:db:80:1b:2e:66:0e:59:94:
8d:9c:cc:93:1e:cd:62:89:95:ca:af:c4:bb:2a:3b:
e1:de:f5:de:31:26:25:9e:33:e3:cd:c3:3b:a6:da:
cb:48:c6:f0:d0:5a:b4:38:77:30:f6:cc:b0:d7:7e:
c8:99:63:b7:df:2e:9d:c2:2b:75:69:ce:7f:01:96:
e9:ed:91:01:23:b4:4b:f9:c7:79:a2:1e:4b:25:b8:
06:dd:99:57:07:93:79:a4:5c:f0:2b:09:98:06:24:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.60.0/22
103.74.208.0/22
Signature Algorithm: sha256WithRSAEncryption
18:06:4b:85:8c:86:50:e2:e6:cc:c1:9e:fd:2a:90:b9:95:1c:
88:17:e5:74:9e:7e:e0:9a:11:0f:33:1c:9e:21:53:4a:d6:3c:
b2:0c:2e:16:11:5e:4e:c5:76:f0:ed:c5:cd:b3:e1:e2:93:2b:
41:1f:9e:e3:d3:b9:87:fa:5e:ac:c3:be:0f:b4:4c:cd:7d:2b:
aa:72:96:38:af:60:35:a0:3f:bc:f3:e0:ee:77:f1:ec:ea:47:
b5:e2:5b:d6:c7:f7:0f:e4:1c:b1:23:a2:27:e1:c9:9b:06:fa:
2a:c3:fb:18:4e:b5:98:ec:14:41:4e:81:58:2d:be:93:ed:0c:
0a:e4:02:b0:da:72:52:6d:2f:48:5c:96:db:ed:98:5b:f7:08:
3b:01:2c:18:49:d4:19:28:f9:72:8b:f9:9b:bb:90:54:1a:d1:
31:61:a6:80:9a:25:ef:17:95:c7:ff:9c:cc:94:f3:0c:4d:45:
e3:3e:3f:75:47:e0:49:a8:41:47:ce:53:31:29:49:0b:c1:6a:
81:12:bd:9d:4b:24:ce:af:f1:a6:66:6f:e3:81:80:c5:f5:2d:
1c:8a:a1:9b:8e:fc:00:c4:32:11:b1:40:1d:15:fa:f7:65:08:
58:04:25:3b:a8:53:73:5b:ef:f7:a3:d4:d8:bf:44:9c:94:f4:
8e:db:b7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:57 2024 by rpki-client on console.sobornost.net