
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer
File: 0DOGEJUQz9wm91V6_5mhMey1lCQ.cer (raw, json)
Hash identifier: kZgzfdMSNRn6Q6mbZtvp0ZUegEcKKYQPJoKJvd9Hldw=
Subject key identifier: D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02234F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Dec 2024 14:57:45 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 45561
IP: 103.11.72.0/23
IP: 103.251.198.0/23
IP: 202.94.87.0/24
IP: 203.170.49.0/24
IP: 2001:df4:7000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140111 (0x2234f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 18 14:57:45 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9189F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:04:ea:d8:ae:ab:5d:38:28:4b:62:a9:72:
65:8e:c0:47:a6:51:2c:cd:6c:c0:d4:76:c6:a6:6d:
90:8c:21:0d:4b:9f:ab:7c:6e:ad:57:8b:b5:1a:b5:
ec:72:b5:e6:3e:51:f1:f0:f1:72:51:d2:e4:10:3a:
84:e7:a1:e3:6f:fd:7d:ec:fa:2b:1d:b5:78:ac:dd:
ca:44:68:0c:4a:1e:36:09:00:4c:8f:48:51:79:a4:
64:bf:f7:f0:47:14:b9:4c:b9:30:7c:86:d5:97:ff:
a2:ae:4a:e0:78:cb:fd:4e:24:d0:23:72:c8:ff:a4:
98:66:4d:1b:b5:fd:cf:42:b6:99:2d:90:7d:bc:9a:
2d:9b:c6:7e:74:9b:33:f1:b4:34:9b:3e:0e:f7:52:
15:1a:ef:e2:b3:1c:1c:fb:d7:8c:7e:de:16:63:54:
5c:c8:e7:a0:12:63:03:07:09:bf:ab:6d:84:4d:30:
de:43:a2:b0:44:23:06:c9:c6:f0:3b:6d:d3:59:95:
30:2c:47:b2:c5:4d:a5:52:83:4b:25:a9:fc:09:24:
c2:d3:b5:18:c8:13:f8:25:73:9b:51:c4:60:c0:78:
3b:62:83:42:33:3f:dd:ef:12:91:68:4a:4e:15:da:
e3:58:0a:33:76:dc:d8:8c:35:88:e6:70:5d:d8:3e:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45561
sbgp-ipAddrBlock: critical
IPv4:
103.11.72.0/23
103.251.198.0/23
202.94.87.0/24
203.170.49.0/24
IPv6:
2001:df4:7000::/48
Signature Algorithm: sha256WithRSAEncryption
10:85:db:40:98:e6:47:6a:b2:8e:0b:da:b8:ed:9b:12:ff:eb:
df:30:c6:3c:f9:19:6a:b5:00:f8:07:35:d3:10:a5:fe:76:b1:
b1:3d:04:f5:1e:c2:ed:63:aa:57:94:4e:53:10:d2:a5:19:a8:
04:03:c5:b5:77:49:db:6f:f9:c4:d9:f8:21:9d:5d:bb:cd:af:
40:2d:7a:90:e3:4a:ee:52:2a:52:19:15:1c:a6:cc:b6:56:19:
a8:70:43:2f:01:fb:f5:e9:ab:1c:15:3e:86:0c:db:22:85:c6:
77:b9:e6:25:72:a5:c5:3c:50:8a:a4:5b:c5:46:f7:10:1f:2d:
5c:54:4d:40:b6:ca:f5:06:9e:c3:fe:a3:ef:12:9f:be:c5:4d:
f8:0f:c2:41:8a:91:d8:86:59:46:6e:68:bc:9d:f6:53:dc:28:
00:77:78:09:ee:5b:60:45:48:2c:71:f4:81:84:de:32:70:f6:
62:88:72:25:be:f1:65:7d:9a:db:bd:3a:82:06:8e:05:05:31:
74:d5:37:88:fb:69:3a:91:2f:08:65:98:ce:bf:b2:b7:3a:51:
82:f6:8c:85:a5:fa:44:da:dd:72:d4:ae:ac:40:27:7d:3b:13:
88:2a:d6:21:4a:08:21:15:82:85:ac:e8:1f:81:14:e2:d7:55:
cd:8d:d6:12
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgIDAiNPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIxODE0NTc0NVoXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODlGMjMxMTAvBgNVBAUTKEQwMzM4NjEwOTUxMENGREMyNkY3NTU3
QUZGOTlBMTMxRUNCNTk0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3ygTq2K6rXTgoS2KpcmWOwEemUSzNbMDUdsambZCMIQ1Ln6t8bq1Xi7Uatexy
teY+UfHw8XJR0uQQOoTnoeNv/X3s+isdtXis3cpEaAxKHjYJAEyPSFF5pGS/9/BH
FLlMuTB8htWX/6KuSuB4y/1OJNAjcsj/pJhmTRu1/c9CtpktkH28mi2bxn50mzPx
tDSbPg73UhUa7+KzHBz714x+3hZjVFzI56ASYwMHCb+rbYRNMN5DorBEIwbJxvA7
bdNZlTAsR7LFTaVSg0slqfwJJMLTtRjIE/glc5tRxGDAeDtig0IzP93vEpFoSk4V
2uNYCjN23NiMNYjmcF3YPgV7AgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQU0DOGEJUQ
z9wm91V6/5mhMey1lCQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg5RjIzL0E1RDU5OEQ2MUQ5QjExRTI5MzA1OTE4OTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4OUYyMy9BNUQ1OThENjFEOUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpV
UXo5d205MVY2XzVtaE1leTFsQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALH5MEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBZwtIAwQBZ/vG
AwQAyl5XAwQAy6oxMA8EAgACMAkDBwAgAQ30cAAwDQYJKoZIhvcNAQELBQADggEB
ABCF20CY5kdqso4L2rjtmxL/698wxjz5GWq1APgHNdMQpf52sbE9BPUewu1jqleU
TlMQ0qUZqAQDxbV3Sdtv+cTZ+CGdXbvNr0AtepDjSu5SKlIZFRymzLZWGahwQy8B
+/XpqxwVPoYM2yKFxne55iVypcU8UIqkW8VG9xAfLVxUTUC2yvUGnsP+o+8Sn77F
TfgPwkGKkdiGWUZuaLyd9lPcKAB3eAnuW2BFSCxx9IGE3jJw9mKIciW+8WV9mtu9
OoIGjgUFMXTVN4j7aTqRLwhlmM6/src6UYL2jIWl+kTa3XLUrqxAJ307E4gq1iFK
CCEVgoWs6B+BFOLXVc2N1hI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:39 2025 by rpki-client