Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer (raw, json)
Hash identifier: QRgVHJR/Lk3bbwd9rRaWiOyx6A0PfaqHCcizZcVwW+8=
Subject key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025338
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Jul 2025 12:38:23 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 132335
IP: 43.230.200.0/22
IP: 45.64.104.0/22
IP: 45.113.224.0/22
IP: 45.120.136.0/22
IP: 103.12.211.0/24
IP: 103.13.112.0/22
IP: 103.26.204.0/22
IP: 103.250.184.0 -- 103.250.186.255
IP: 157.119.40.0/22
IP: 2001:df2:1000::/47
IP: 2405:7140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152376 (0x25338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 12:38:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:c7:22:aa:a8:d8:6f:b8:2e:09:8e:54:73:
62:0e:50:03:79:dc:76:19:91:9b:55:35:bc:d6:ea:
26:56:d7:fc:9a:ea:08:d1:08:b2:9e:a9:7f:07:5b:
b3:ab:83:ae:51:f3:81:5d:ce:8c:50:92:3c:1e:88:
61:1d:34:59:e1:fb:05:61:38:f5:03:5f:9a:10:0a:
d3:ed:f6:3e:bb:d9:bc:e2:86:c9:95:9f:d5:12:9c:
e8:ec:40:a6:19:6e:38:c0:7a:41:78:55:d0:2a:27:
66:b9:84:03:be:fa:b4:92:6b:f1:38:1f:86:68:ee:
d5:8e:3c:6b:ae:ab:3e:d5:22:32:0b:50:21:9d:7f:
42:f9:5a:32:ec:5a:13:71:ba:18:a4:a3:9a:c8:97:
f6:98:da:5b:ec:bf:ee:09:ea:65:7a:e1:0e:b4:a4:
d3:b6:16:7b:30:66:30:bd:1c:bf:bd:09:36:da:c2:
6e:cc:55:19:b5:61:0c:52:15:05:15:9e:66:6c:4c:
6d:68:ca:a2:87:6a:0a:49:da:3f:1d:e9:32:63:f8:
31:46:cc:d9:49:34:0f:c5:d0:63:b6:cc:27:81:95:
1b:28:25:99:b7:ee:1b:67:79:d4:8d:37:ef:19:df:
01:e6:e4:f4:76:8f:2c:59:54:b8:1b:e4:62:57:bd:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132335
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0/22
45.64.104.0/22
45.113.224.0/22
45.120.136.0/22
103.12.211.0/24
103.13.112.0/22
103.26.204.0/22
103.250.184.0-103.250.186.255
157.119.40.0/22
IPv6:
2001:df2:1000::/47
2405:7140::/32
Signature Algorithm: sha256WithRSAEncryption
80:1c:44:fa:63:1b:a4:1a:97:65:7d:c6:1f:d4:01:f4:d1:df:
84:97:0e:77:bd:d2:0a:9a:a6:8d:4e:93:1e:be:37:10:9e:8d:
d5:20:34:45:12:b7:c4:91:cd:10:8f:2c:5d:51:ed:19:19:9f:
46:58:e3:a0:9f:d1:6b:e2:68:5a:c6:a3:15:ff:60:e5:ea:c4:
0e:94:d6:96:60:ff:e5:7c:d1:ad:10:00:a2:a4:d3:e5:9b:ce:
a8:be:21:9b:d7:2f:a6:46:38:dd:8b:82:9e:69:7c:75:f5:a0:
a2:67:d2:b3:7d:1c:d6:69:20:dc:27:02:02:63:69:5f:76:c5:
58:fd:89:87:30:fe:ea:4f:1d:9e:61:3a:0e:7b:08:01:06:e5:
cd:02:d7:71:42:25:a6:84:c6:cb:19:fa:b4:96:a2:98:c1:8d:
07:41:6c:1f:cb:d2:d5:14:44:62:81:3f:a3:84:b7:37:cb:0a:
b2:b2:92:5b:18:e8:3c:47:6b:7a:f7:17:2a:5c:11:d3:2f:7e:
6c:dd:19:d0:13:53:47:15:3d:e0:a4:33:90:b6:91:46:38:66:
f7:69:b1:cc:84:7c:5e:ee:55:f7:db:6d:0e:65:34:b2:f0:8c:
2b:60:52:34:00:8c:59:73:b4:9f:63:25:95:2d:a4:3b:15:2c:
37:9e:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:17 2025 by rpki-client