Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
File: 2dCjxqTde6e0VN6uAa9nryxUxDM.cer (raw, json)
Hash identifier: +QM9tK+3DDQhwgtCQ0PlLHyMOPatHsEcedYF+FibI2U=
Subject key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02228F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 14:15:45 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 132890
AS: 133110
IP: 103.27.104.0/22
IP: 113.52.148.0/22
IP: 2407:5f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139919 (0x2228f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 14:15:45 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A915C9B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:a0:da:a1:0a:29:9d:52:fe:5b:60:56:f3:
18:68:7a:70:f9:1a:f6:18:22:62:41:45:95:6e:79:
e8:27:ef:cd:60:29:c8:5a:d6:1a:64:3d:b4:ac:be:
d0:fc:6b:85:73:62:8c:b5:8e:1b:71:b2:9c:0b:ba:
50:e2:89:1f:c1:ad:8b:1c:b0:74:03:4e:5f:b8:f2:
e6:e4:11:1d:71:d3:4d:d0:a0:ca:86:10:20:3e:32:
ce:a1:69:17:b6:3e:09:7d:f1:88:36:35:e7:2d:bd:
9d:8d:ee:3b:26:2e:40:b7:16:53:8f:14:ca:d7:25:
0e:e9:4d:8c:1a:9f:7b:cb:36:9d:1f:32:fa:25:c6:
f4:be:18:06:52:80:5d:c2:3d:a8:fc:05:4a:90:8a:
5a:31:53:f2:f2:a3:16:28:3e:0f:1d:91:bd:ac:35:
bb:90:66:1f:c5:fb:c4:7c:a9:db:28:95:fe:d4:81:
19:50:91:a4:ba:4d:54:0c:ef:0b:2b:42:3e:25:88:
cb:5a:15:61:36:f8:1d:46:43:77:f4:32:33:a0:a5:
69:ae:b1:5f:b8:45:42:2d:94:b6:be:f0:c9:68:69:
7e:9c:8b:95:34:0e:ab:aa:aa:52:9b:f5:f3:6c:fc:
03:52:39:fa:d5:74:4e:18:7d:cf:86:54:4f:24:1b:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132890
133110
sbgp-ipAddrBlock: critical
IPv4:
103.27.104.0/22
113.52.148.0/22
IPv6:
2407:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
c3:fc:9e:8c:4e:6b:86:aa:b8:c9:e1:3f:ed:ba:9d:53:68:c9:
94:58:3a:29:09:22:5a:29:37:03:86:bf:f5:69:86:0c:2d:f3:
60:5d:83:ac:a1:b3:d3:db:61:98:6e:83:21:2c:35:81:de:c8:
4f:7a:c1:74:44:7c:4f:aa:b1:5a:06:d7:da:74:75:fe:ed:9d:
f1:cb:dc:5f:4b:c1:a8:ca:e0:95:d5:71:fd:c3:90:9f:4c:cd:
8a:5f:a9:42:ed:47:a2:df:bf:10:ad:19:30:46:88:da:1d:54:
5c:93:29:cd:22:b2:91:0e:d8:9e:66:05:b1:0e:cd:9b:ea:93:
df:cb:9b:bc:db:6d:8c:f6:9a:7e:79:9e:e7:12:e5:02:3a:31:
68:54:b1:48:c0:24:2a:85:19:43:3a:8a:57:ab:a3:43:af:d4:
24:42:a4:bf:a7:18:d1:f0:52:d6:01:25:b2:75:09:d1:4f:ef:
46:d9:f0:d7:54:ac:b3:6d:26:ae:5c:37:b4:98:cd:b2:23:0e:
51:c5:af:6c:ac:22:b0:de:32:35:1d:89:27:25:aa:ca:6a:41:
1f:73:58:8a:93:5f:ac:38:22:90:4f:cf:09:43:d4:e2:77:7e:
83:09:f9:69:e6:65:02:f9:de:78:9b:5f:4e:61:49:07:1e:24:
ef:c9:18:22
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgIDAiKPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIxMzE0MTU0NVoXDTI1MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVB
RTAxQUY2N0FGMkM1NEM0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdaKDaoQopnVL+W2BW8xhoenD5GvYYImJBRZVueegn781gKcha1hpkPbSsvtD8
a4VzYoy1jhtxspwLulDiiR/BrYscsHQDTl+48ubkER1x003QoMqGECA+Ms6haRe2
Pgl98Yg2NectvZ2N7jsmLkC3FlOPFMrXJQ7pTYwan3vLNp0fMvolxvS+GAZSgF3C
Paj8BUqQiloxU/LyoxYoPg8dkb2sNbuQZh/F+8R8qdsolf7UgRlQkaS6TVQM7wsr
Qj4liMtaFWE2+B1GQ3f0MjOgpWmusV+4RUItlLa+8MloaX6ci5U0DquqqlKb9fNs
/ANSOfrVdE4Yfc+GVE8kG5AzAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQU2dCjxqTd
e6e0VN6uAa9nryxUxDMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVDOUI3LzhDMjY0RkQyRUU1QTExRUFBRDc2OTAzM0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFU
ZGU2ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAgcaAgMCB/YwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJnG2gD
BAJxNJQwDQQCAAIwBwMFACQHXwAwDQYJKoZIhvcNAQELBQADggEBAMP8noxOa4aq
uMnhP+26nVNoyZRYOikJIlopNwOGv/Vphgwt82Bdg6yhs9PbYZhugyEsNYHeyE96
wXREfE+qsVoG19p0df7tnfHL3F9LwajK4JXVcf3DkJ9MzYpfqULtR6LfvxCtGTBG
iNodVFyTKc0ispEO2J5mBbEOzZvqk9/Lm7zbbYz2mn55nucS5QI6MWhUsUjAJCqF
GUM6ilero0Ov1CRCpL+nGNHwUtYBJbJ1CdFP70bZ8NdUrLNtJq5cN7SYzbIjDlHF
r2ysIrDeMjUdiSclqspqQR9zWIqTX6w4IpBPzwlD1OJ3foMJ+WnmZQL53nibX05h
SQceJO/JGCI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:35 2025 by rpki-client