Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer
File: 0Iw24m8k-51RTztAqON6mgS1gCU.cer (raw, json)
Hash identifier: kal8jjsNAFlFTvXl6BtGV5zq4cvEIcSt1fPF/3EdmZs=
Subject key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F87
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 14:55:57 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 45500
IP: 123.108.104.0/22
IP: 203.89.156.0/22
IP: 203.118.243.0/24
IP: 203.217.141.0/24
IP: 2402:ee00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139143 (0x21f87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 14:55:57 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A913E03C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:a9:72:59:fb:a3:93:83:54:f9:25:65:1b:
5b:34:7a:63:f2:7b:b4:6e:e1:75:78:e5:c2:ac:de:
03:67:83:42:f4:3b:bf:77:07:67:d8:45:26:19:21:
e2:b2:a3:85:b4:48:45:d5:2d:e1:fd:a0:4d:af:a0:
f8:84:88:c4:4a:3d:5d:de:96:57:70:ca:d8:48:91:
42:79:8d:1c:f8:6e:2c:3d:05:af:fc:fb:10:df:75:
e4:20:1f:f0:bf:be:b6:6f:f3:c1:29:f2:7d:74:15:
ce:a1:15:01:a2:1e:bb:57:e1:2e:68:e4:86:e6:f3:
ec:4b:14:e3:4a:88:9b:9d:69:be:37:b5:c1:68:f9:
47:d8:56:ab:51:9a:92:92:ac:c2:29:7d:7f:45:f2:
b4:99:6e:64:97:27:c6:22:5f:56:f1:03:0d:5b:ca:
b0:b7:62:e4:32:7c:e1:8e:92:3e:de:1f:ea:82:6c:
f5:44:64:95:0e:86:ec:e4:9f:03:c1:91:c9:63:f4:
7f:78:60:1f:09:4d:6b:76:d7:97:11:95:f3:dd:70:
ac:9a:7b:78:12:67:75:23:8e:57:fd:5f:cf:42:55:
61:93:e1:23:44:24:18:ec:f2:9c:bb:89:49:34:da:
d7:74:51:6c:b5:2b:f0:17:0f:20:ce:55:7e:eb:97:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45500
sbgp-ipAddrBlock: critical
IPv4:
123.108.104.0/22
203.89.156.0/22
203.118.243.0/24
203.217.141.0/24
IPv6:
2402:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
8e:b1:3a:69:93:19:bc:cf:7b:eb:de:32:f3:3e:ac:c9:93:1f:
02:ad:94:5b:22:da:ec:5a:70:12:ad:46:60:1e:7c:26:58:b0:
91:66:70:86:0f:7a:f7:6d:00:0d:f8:24:bc:cd:48:2b:9b:70:
a6:57:66:42:a5:20:da:aa:5c:af:44:01:02:e8:93:cd:1b:2c:
42:d7:3f:bf:d3:13:df:93:2c:ec:eb:2d:90:35:51:df:ee:3a:
43:9b:2a:f5:64:18:11:d8:d1:70:73:17:5e:b4:cb:0e:5d:6c:
1c:c3:c8:9b:4b:e7:b4:2f:8e:eb:11:f3:fd:61:34:1d:2a:ef:
a7:fe:20:df:9c:cc:e6:29:e3:94:c7:af:21:4c:1e:2c:4d:c3:
9e:68:c6:09:12:1b:68:a5:aa:f2:a0:9c:52:9e:69:eb:9d:d9:
1d:96:e7:8b:d1:a0:af:be:2d:9e:d7:77:55:35:45:fc:af:a3:
d2:64:8a:83:83:91:86:6e:ff:ef:50:e4:df:47:09:4f:57:c0:
c2:8d:eb:9e:7f:fd:9b:77:67:05:e3:53:f4:a5:09:89:c6:a0:
ca:d7:66:3d:1b:8b:ca:80:47:5f:45:d1:4e:99:5b:1c:d1:49:
f9:33:ec:3b:66:5d:ed:81:ff:f7:08:f4:1d:63:b7:82:20:92:
02:ef:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:31 2025 by rpki-client