Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.cer (raw, json)
Hash identifier: m0fIO7QuK5zC80L6nzsoI1kEZv/GFCHBib2WWVdAjpQ=
Subject key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022B6E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Jan 2025 20:16:15 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37976
AS: 140046
IP: 103.147.194.0/23
IP: 2001:df2:a280::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142190 (0x22b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 24 20:16:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91F8ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:db:d5:f6:56:d2:3a:e3:ff:28:58:34:1b:
5b:b8:aa:72:79:49:45:1d:a4:b3:f0:0c:aa:ce:77:
63:62:fe:dd:a8:dc:54:82:68:87:7c:c4:f9:c3:fa:
4f:da:e8:49:5f:f1:24:66:ba:e9:34:0d:66:78:c4:
1f:7d:ae:c4:54:33:73:a5:93:f0:4b:90:ac:ee:b2:
a0:58:ac:29:5c:2f:e5:c0:19:30:31:32:61:f8:5f:
96:55:f7:03:18:07:6e:1b:22:36:2d:9b:b5:19:e0:
a2:c6:a8:84:c4:07:53:42:47:c6:e0:99:7d:3e:1a:
11:76:6c:a8:56:2e:b9:96:12:07:56:1a:03:8b:41:
b8:02:09:a3:c0:2a:a7:1f:14:d3:ec:89:e7:50:c5:
35:ad:29:60:9e:28:2f:3d:18:a5:19:c4:95:5b:85:
ac:6f:25:50:d8:e2:19:64:50:94:6f:5a:97:6c:25:
eb:24:2e:5c:77:78:b6:39:2f:d0:4c:8d:04:42:1e:
58:ab:30:70:63:ba:fb:7d:e7:1a:a7:bf:fb:7f:58:
96:3d:fd:bb:20:80:85:85:5c:e3:d7:d0:d5:f9:79:
17:4a:a2:c1:83:01:02:cf:c7:c5:4d:ba:35:d0:c0:
d8:b2:77:bd:4e:75:65:0d:50:e1:34:44:e7:e4:f8:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37976
140046
sbgp-ipAddrBlock: critical
IPv4:
103.147.194.0/23
IPv6:
2001:df2:a280::/47
Signature Algorithm: sha256WithRSAEncryption
1b:08:dd:a1:1a:2d:94:9b:a9:69:00:74:67:31:3a:b4:e5:f0:
9f:a6:94:0f:67:1b:e1:15:19:cd:f4:7e:7d:5b:8c:68:18:0a:
00:fb:e5:33:6c:3b:c7:1e:4a:21:fd:49:91:62:ec:2f:61:6a:
c6:9c:db:33:8d:f9:e1:a7:7a:25:2a:b2:70:07:bf:81:41:77:
b2:a8:39:37:e9:a7:8d:a2:48:82:33:c4:06:44:08:d3:0c:f6:
4d:da:49:50:43:64:b7:04:02:6d:fe:e9:b1:51:7b:30:87:11:
31:ed:19:7a:aa:86:17:7e:b2:50:42:39:89:2d:ca:11:73:58:
68:fd:bb:c2:9d:0f:a6:05:f2:08:4b:f9:72:17:5b:59:69:f0:
e4:08:2a:16:57:cd:a0:a3:8f:8e:94:8f:d1:12:ae:35:d0:23:
d3:e7:dd:30:76:49:f1:67:3a:c6:5a:ca:42:73:75:c8:d7:fb:
15:a3:f0:4e:2f:31:9c:0f:d3:62:ee:25:a0:bd:f2:1f:44:d9:
db:0a:62:f7:f9:b5:d4:b2:48:e5:12:5c:44:56:56:61:77:88:
9b:d0:79:eb:c9:ac:9a:92:70:cc:08:2a:13:eb:96:a1:fb:1f:
30:ee:56:d8:29:ff:a3:b5:be:a6:06:ee:8f:7d:c4:60:00:e9:
07:e5:67:3f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAituMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEyNDIwMTYxNVoXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjhBREYxMTAvBgNVBAUTKEU3NzA1MDg5MUJGODkyNzQzMjY1MEI3
MDZGMkJGRUREOTJBMTExQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfe9vV9lbSOuP/KFg0G1u4qnJ5SUUdpLPwDKrOd2Ni/t2o3FSCaId8xPnD+k/a
6Elf8SRmuuk0DWZ4xB99rsRUM3Olk/BLkKzusqBYrClcL+XAGTAxMmH4X5ZV9wMY
B24bIjYtm7UZ4KLGqITEB1NCR8bgmX0+GhF2bKhWLrmWEgdWGgOLQbgCCaPAKqcf
FNPsiedQxTWtKWCeKC89GKUZxJVbhaxvJVDY4hlkUJRvWpdsJeskLlx3eLY5L9BM
jQRCHlirMHBjuvt95xqnv/t/WJY9/bsggIWFXOPX0NX5eRdKosGDAQLPx8VNujXQ
wNiyd71OdWUNUOE0ROfk+DoRAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQU53BQiRv4
knQyZQtwbyv+3ZKhEckwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY4QURGL0NERjQwNUMyRjA2ODExRURCQjk3OEUyREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOEFERi9DREY0MDVDMkYwNjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2
NGtuUXlaUXR3Ynl2LTNaS2hFY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAJRYAgMCIw4wMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnk8Iw
DwQCAAIwCQMHASABDfKigDANBgkqhkiG9w0BAQsFAAOCAQEAGwjdoRotlJupaQB0
ZzE6tOXwn6aUD2cb4RUZzfR+fVuMaBgKAPvlM2w7xx5KIf1JkWLsL2FqxpzbM435
4ad6JSqycAe/gUF3sqg5N+mnjaJIgjPEBkQI0wz2TdpJUENktwQCbf7psVF7MIcR
Me0ZeqqGF36yUEI5iS3KEXNYaP27wp0PpgXyCEv5chdbWWnw5AgqFlfNoKOPjpSP
0RKuNdAj0+fdMHZJ8Wc6xlrKQnN1yNf7FaPwTi8xnA/TYu4loL3yH0TZ2wpi9/m1
1LJI5RJcRFZWYXeIm9B568msmpJwzAgqE+uWofsfMO5W2Cn/o7W+pgbuj33EYADp
B+VnPw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:11:00 2025 by rpki-client