Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer
File: 2ur7NxZLPyAVggaTIx8kACrcIRM.cer (raw, json)
Hash identifier: KUdu35yXI8KMTq83r4aMCDVbqhdvndzNjjIAR8M3VTM=
Subject key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A935
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/62/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Wed 01 Apr 2026 20:50:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24242
IP: 103.136.144.0/22
IP: 2404:9540::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174389 (0x2a935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 20:50:28 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:92:ea:d3:ba:3a:c3:c1:ef:85:c5:80:50:
cd:b8:49:98:a6:2d:29:08:06:e5:65:fe:2e:73:94:
98:6c:ad:65:6d:37:d4:6e:ec:31:09:0f:26:21:f7:
e6:bb:75:58:d7:26:29:55:b9:2c:1c:a0:fc:34:f6:
b8:a0:9d:1d:c2:f9:aa:bb:56:58:4c:2e:7f:11:99:
f7:76:05:bb:ad:69:39:c1:69:a6:28:0d:31:13:12:
e9:45:ec:5d:11:06:bc:ca:a4:7b:1c:37:76:40:16:
a0:15:e7:42:d0:d5:c7:93:75:d2:78:b7:02:c1:2d:
4c:ee:f7:86:c4:fc:cb:d7:87:ae:a3:e5:7a:a7:32:
36:2d:1e:e1:6f:c9:ff:6a:f1:3f:18:9b:65:94:7c:
ff:ab:3b:94:3a:c4:fa:38:78:39:15:ce:9e:1e:eb:
2b:0b:ce:5a:7b:da:9c:df:5a:94:68:29:15:93:23:
52:8e:96:e8:45:ae:c6:06:b8:9d:db:2b:d1:ba:eb:
62:3b:f8:a5:22:bf:e8:ce:b1:e6:1f:6b:9d:cb:49:
a5:22:58:13:28:ec:47:af:51:5d:1b:35:f1:27:0f:
59:c5:cb:36:54:06:d1:ce:e8:14:79:84:f4:c4:a4:
63:13:ba:b5:3b:ca:ca:4b:12:8c:16:71:bb:45:fb:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/62/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24242
sbgp-ipAddrBlock: critical
IPv4:
103.136.144.0/22
IPv6:
2404:9540::/32
Signature Algorithm: sha256WithRSAEncryption
21:32:b6:22:3b:7c:0c:5c:1c:89:c1:e5:21:98:0e:3c:2b:2e:
85:e5:cf:bb:39:06:d2:54:12:c0:de:2c:3e:7c:80:26:b5:75:
64:07:34:6f:62:47:9d:aa:80:8c:54:8a:76:62:37:54:30:55:
54:69:81:5c:be:2b:ed:0d:ae:bd:2b:4a:25:1a:a6:6c:ce:5e:
a2:8d:90:be:88:92:e4:7d:5f:77:42:f0:31:1c:be:53:dd:b2:
82:a2:77:d2:05:eb:3b:55:fa:b9:d1:83:5e:d6:df:0f:8f:78:
71:ca:e7:ce:99:2b:5b:53:11:f7:71:43:27:a7:d0:7e:9b:b9:
e3:fe:11:69:7d:04:af:70:2c:02:0b:e1:a5:8c:b2:fe:d7:d7:
67:a7:91:40:77:02:e2:2c:40:32:4a:d0:87:f3:fd:f3:06:d6:
67:ba:50:74:69:48:32:26:aa:46:44:e1:3c:96:51:41:b2:91:
30:3f:60:26:36:7c:d3:e5:95:8c:8c:e0:c7:07:f0:70:fd:e2:
1b:76:0b:c1:4e:98:2c:31:23:58:ad:27:73:ad:77:75:a0:8f:
95:16:0b:ca:ef:ed:52:ac:e5:6b:3f:c9:cf:b8:cd:13:51:8c:
c1:af:f5:a3:5a:5a:fc:1e:80:71:c8:45:91:65:5a:b0:52:24:
a6:9b:1a:78
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIDAqk1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQwMTIwNTAyOFoXDTI2MDcwMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyhEQUVBRkIzNzE2NEIzRjIwMTU4
MjA2OTMyMzFGMjQwMDJBREMyMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuNKS6tO6OsPB74XFgFDNuEmYpi0pCAblZf4uc5SYbK1lbTfUbuwxCQ8m
Iffmu3VY1yYpVbksHKD8NPa4oJ0dwvmqu1ZYTC5/EZn3dgW7rWk5wWmmKA0xExLp
RexdEQa8yqR7HDd2QBagFedC0NXHk3XSeLcCwS1M7veGxPzL14euo+V6pzI2LR7h
b8n/avE/GJtllHz/qzuUOsT6OHg5Fc6eHusrC85ae9qc31qUaCkVkyNSjpboRa7G
Brid2yvRuutiO/ilIr/ozrHmH2udy0mlIlgTKOxHr1FdGzXxJw9Zxcs2VAbRzugU
eYT0xKRjE7q1O8rKSxKMFnG7RfsU9wIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFNrq
+zcWSz8gFYIGkyMfJAAq3CETMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIHUBggrBgEFBQcBCwSBxzCBxDAuBggrBgEF
BQcwBYYicnN5bmM6Ly9ycGtpLnJvYS5uZXQvcnJkcC94VG9tLzYyLzBaBggrBgEF
BQcwCoZOcnN5bmM6Ly9ycGtpLnJvYS5uZXQvcnJkcC94VG9tLzYyL0RBRUFGQjM3
MTY0QjNGMjAxNTgyMDY5MzIzMUYyNDAwMkFEQzIxMTMubWZ0MDYGCCsGAQUFBzAN
hipodHRwczovL3Jwa2kucm9hLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICXrIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgAB
MAYDBAJniJAwDQQCAAIwBwMFACQElUAwDQYJKoZIhvcNAQELBQADggEBACEytiI7
fAxcHInB5SGYDjwrLoXlz7s5BtJUEsDeLD58gCa1dWQHNG9iR52qgIxUinZiN1Qw
VVRpgVy+K+0Nrr0rSiUapmzOXqKNkL6IkuR9X3dC8DEcvlPdsoKid9IF6ztV+rnR
g17W3w+PeHHK586ZK1tTEfdxQyen0H6bueP+EWl9BK9wLAIL4aWMsv7X12enkUB3
AuIsQDJK0Ifz/fMG1me6UHRpSDImqkZE4TyWUUGykTA/YCY2fNPllYyM4McH8HD9
4ht2C8FOmCwxI1itJ3Otd3Wgj5UWC8rv7VKs5Ws/yc+4zRNRjMGv9aNaWvwegHHI
RZFlWrBSJKabGng=
-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:07 2026 by rpki-client