Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer
File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.cer (raw, json)
Hash identifier: VLXqP5RDxOgXgM5K1+JRy2B077zMOnGiRnU5D/8Uko0=
Subject key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023689
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Mar 2025 08:15:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 153681
IP: 163.223.60.0/23
IP: 2001:df5:3440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145033 (0x23689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 10 08:15:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91F54CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:ec:b4:6b:ce:2d:38:6c:24:64:ff:db:35:
78:b8:99:d7:bb:0d:48:6e:88:47:b4:04:e6:e0:38:
ac:91:0b:92:70:49:9e:7c:04:12:23:40:8e:5f:22:
5b:27:4c:fb:f6:5d:5d:39:81:99:7a:f7:3c:a7:fe:
04:09:cd:c8:cf:77:ef:48:7a:b6:64:04:3c:b9:0b:
24:c8:f0:fe:37:b3:2c:ee:58:e3:01:2d:08:3e:de:
7a:e6:96:3a:ea:7a:93:ac:0d:6d:53:60:ef:8b:55:
a8:6e:ee:ae:9c:71:4a:87:b5:34:42:25:e0:75:57:
4e:ce:2d:4e:d0:0c:6c:28:e0:80:61:4b:1f:49:63:
96:ea:56:72:16:db:06:f1:cb:7e:e7:cb:94:d2:7b:
da:41:27:13:53:df:f7:64:91:fe:0a:14:c2:1f:7f:
a7:11:b4:37:53:1b:6d:16:24:aa:11:1f:b1:99:c9:
f0:d5:c7:35:de:4d:5c:bb:c2:b2:0e:fa:0c:d8:91:
4b:02:3d:ca:86:fb:88:9a:48:86:d1:52:51:61:dc:
0a:fa:e4:46:54:b2:97:bc:09:d8:bc:13:42:3d:3f:
f9:76:5f:fa:70:be:c8:e1:e8:15:06:a5:c8:ed:37:
97:54:1f:79:7c:8d:8a:ac:92:86:e8:0e:aa:c1:13:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153681
sbgp-ipAddrBlock: critical
IPv4:
163.223.60.0/23
IPv6:
2001:df5:3440::/48
Signature Algorithm: sha256WithRSAEncryption
ca:42:ac:55:80:d5:b0:ea:43:b8:59:80:65:35:aa:11:0b:f2:
f1:b2:03:32:89:75:36:8c:f1:cd:81:b2:72:fa:f8:31:a6:2b:
47:4c:54:ca:98:7d:11:18:61:2f:9e:d9:aa:2a:1b:3f:33:aa:
31:4c:4a:37:99:f1:83:7e:34:cf:46:54:85:1d:79:12:a9:8e:
40:79:32:81:3d:97:47:4d:79:e9:8c:29:05:da:f4:65:b9:34:
16:63:3d:55:b3:27:02:71:54:32:d7:b8:59:06:1e:77:56:84:
62:f7:26:ee:fe:dd:d7:83:4e:0e:ab:f9:a8:a4:5c:29:51:2a:
fa:0b:c8:d7:66:3d:db:f3:4e:73:fb:a3:7e:89:cd:6a:7d:83:
4f:06:49:6c:5e:aa:7d:76:3e:c7:50:cc:b5:66:c0:e1:2f:9a:
92:b2:6a:45:3d:37:5e:63:55:79:32:30:e7:ee:75:65:6b:cb:
e0:fa:ce:28:4e:37:32:6c:1d:17:98:79:aa:95:ab:dc:64:56:
32:af:12:45:58:c5:04:e7:0a:46:04:49:de:aa:e5:1a:83:62:
59:ab:9b:ec:6b:63:12:e0:84:b5:7f:c3:ce:fe:c5:7e:cb:fe:
79:64:07:e4:90:76:2a:66:0c:9b:8a:d0:5e:3b:b0:5c:48:01:
a2:70:74:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:32 2025 by rpki-client