Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer
File: rNBOSci3K74B41N1Wc9MlHMO1d8.cer (raw, json)
Hash identifier: 14T83Z5cG1uxxo6tfpzZaTGCYv7eIY0wPqBxZ19xIrw=
Subject key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C88
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 15:51:25 +0000
Certificate not after: Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources: IP: 2404:1c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142472 (0x22c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 15:51:25 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:02:6a:fd:fc:e4:ff:34:01:a4:3d:ee:8a:
25:a4:f7:94:22:99:23:39:3f:04:9a:b9:5b:c9:cb:
0c:38:99:31:90:5e:70:b7:3a:ea:40:1e:7b:a8:6a:
37:f2:30:cd:32:f9:29:92:1a:11:9b:b8:88:28:83:
62:ff:24:c7:80:db:ac:21:73:ab:50:7d:0b:84:aa:
6e:1d:32:73:05:cb:b4:47:80:66:31:88:95:31:fa:
00:95:3d:e1:dc:e0:12:36:71:5c:57:b0:2c:93:a6:
66:1c:56:dc:50:73:ba:1b:d5:2f:4b:33:68:59:18:
59:48:9f:b3:de:1b:9b:1c:57:6b:1a:ab:8d:18:a8:
1d:8e:ca:93:16:c3:bb:70:d3:80:6e:61:31:c0:5e:
30:1e:d0:3e:06:0c:96:a0:80:99:e7:dd:8d:f8:49:
c5:65:83:b9:9d:1c:46:50:05:ec:39:63:b6:6c:26:
47:cd:5f:bf:b4:ff:c5:0d:ef:e3:48:fb:ea:d4:50:
d3:9b:85:e6:20:e7:a2:0b:dc:f4:6e:25:ba:eb:50:
da:4a:93:ef:cd:92:bf:ef:d7:87:ed:5a:54:7f:80:
cd:bb:c2:96:81:8a:c2:90:c2:68:88:ac:3f:aa:18:
21:fb:c2:dc:cc:b1:8f:b9:c4:7c:bc:55:91:93:f5:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:1c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:ba:a4:3c:30:52:9a:e2:4f:4a:be:00:7d:18:16:8a:4b:d9:
24:29:78:ee:51:88:51:36:c2:8a:ec:26:24:0d:3f:b7:ce:77:
89:88:3b:86:e1:76:5e:2d:c6:cc:c1:8e:18:73:f2:6f:65:c5:
3b:60:c7:33:4a:59:24:45:f5:95:2e:6c:f6:07:03:24:66:af:
01:c4:4d:0a:9b:88:b3:1a:ea:b0:44:fb:ce:e8:b8:12:85:c2:
15:6c:2d:cd:1e:50:fe:9f:4b:57:e9:f7:d2:15:c9:02:28:40:
95:a4:a3:62:1e:a0:bf:77:13:6c:25:a6:ad:ce:ee:86:e8:c1:
9c:04:16:1e:2f:9b:07:53:ab:1b:79:a1:f5:bf:be:9d:4d:6c:
c9:c5:62:28:3a:a2:0a:a2:de:81:2f:29:22:4c:f1:43:8e:e8:
64:d1:cf:7e:79:e0:38:3b:62:9a:46:56:ec:53:27:da:ce:f9:
cc:b8:ef:49:12:13:fc:12:05:dc:b6:a7:3e:97:f3:ba:a5:40:
13:86:82:8f:56:d5:1d:f5:13:d3:35:be:06:49:b8:b5:39:28:
78:52:c6:08:97:b4:94:d2:11:fc:ff:66:5e:0c:a3:63:7d:f2:
7b:f6:7c:6f:3c:57:fb:b5:93:0d:55:1c:ea:2e:e8:f6:0f:67:
11:d2:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:57 2025 by rpki-client