Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer
File: 0fHal9jt-Zxl369uyp87Umxgq0E.cer (raw, json)
Hash identifier: /cC10RsPpy2CDHOd9U/Nlh0w7iUZAzSds76T7ghQwMU=
Subject key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023533
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Mar 2025 13:06:37 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 132906
IP: 103.148.240.0/24
IP: 103.164.7.0/24
IP: 2001:df2:fe80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144691 (0x23533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 4 13:06:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A912185F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:bf:8d:2f:bd:c7:d6:44:5d:87:d9:8e:d5:
ba:f8:be:e1:19:1c:75:1b:cf:94:bf:ce:00:88:50:
56:88:70:3e:02:85:12:c6:01:a4:31:df:b0:54:8e:
7b:67:dd:04:e6:07:08:ae:fd:29:85:80:91:97:24:
17:78:f2:70:87:db:45:8d:d9:fc:34:49:db:32:0e:
20:26:e0:e6:15:4c:b6:00:ac:2b:35:0d:0f:75:35:
76:fa:5c:ca:98:09:95:bc:e3:2e:de:52:0f:49:c5:
b3:f0:4c:bd:e6:90:13:78:f9:a2:39:f8:59:42:d6:
e6:0f:b5:f7:d2:65:0d:f4:23:e1:84:17:f2:eb:ac:
e5:9e:6e:09:43:93:9d:c1:70:e9:99:f3:82:c1:7e:
11:c9:84:36:16:ba:1b:02:bd:70:7f:6d:73:b0:ef:
ad:67:98:47:c0:5b:77:b7:18:c4:11:06:a9:6d:28:
42:cd:ea:43:ce:fa:07:b8:ef:98:fe:d4:00:4c:da:
ca:c6:75:26:bd:d1:57:c6:1e:6d:45:4e:a0:a7:10:
4e:d1:6d:de:c5:21:10:00:71:8e:bf:d9:66:a0:df:
57:57:47:5c:90:3a:83:51:f5:08:4a:f9:2f:f8:5e:
3c:7e:72:c1:87:dc:90:67:82:0e:db:a2:80:d4:ec:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132906
sbgp-ipAddrBlock: critical
IPv4:
103.148.240.0/24
103.164.7.0/24
IPv6:
2001:df2:fe80::/48
Signature Algorithm: sha256WithRSAEncryption
8b:53:e2:7d:5f:e6:58:f0:63:e4:d5:af:9e:78:f7:38:4b:5c:
5e:76:62:95:03:63:75:c0:d6:a2:5d:62:30:88:1d:44:44:93:
93:05:fa:59:65:0a:64:94:74:68:71:62:a1:07:71:9c:03:59:
15:71:fc:de:c4:af:4a:af:c2:d8:2c:ee:62:f0:cb:c2:c5:28:
30:a2:cc:7e:58:ca:b0:1c:9b:4f:ab:72:8e:e9:bb:eb:27:28:
17:cf:14:b6:d1:5d:53:ee:83:f3:9f:32:83:cf:f4:69:49:4a:
81:d4:13:ed:71:41:d3:48:ac:4d:bc:39:0d:49:65:b5:ce:ed:
e5:95:2c:de:8a:ad:fc:86:ea:f3:4a:7c:cc:69:1a:d7:61:67:
8c:85:66:25:6a:15:0e:fe:ae:43:05:51:e9:50:fc:ef:16:d2:
d5:9f:83:d0:30:fb:e2:e0:25:18:c9:c2:87:94:20:44:22:9d:
87:34:46:89:dc:c2:63:fe:3a:22:cb:76:9f:90:34:d5:35:64:
43:96:2d:1d:e4:39:ee:94:f5:6e:f7:41:7e:6a:6c:5b:aa:17:
2a:1a:99:92:37:87:8f:72:ab:28:74:20:bc:ad:6a:7d:20:3b:
f7:9e:0d:aa:e1:b5:7d:3a:89:57:52:5f:bd:69:5d:73:88:c7:
68:e5:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:37 2025 by rpki-client