Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer (raw, json)
Hash identifier: aY79lqFCg8auGUv7TBUZuovVod0/lMvkj+Q8i/SDeEk=
Subject key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023295
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Feb 2025 14:16:43 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 137435
IP: 103.108.112.0/22
IP: 2406:d240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144021 (0x23295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 21 14:16:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9153049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:eb:62:8e:c7:a6:86:da:1e:0d:4d:f1:fc:
3c:48:dd:c5:3f:dd:0e:3d:1f:2f:4b:88:b2:bd:4b:
ac:76:80:61:e8:a9:bd:96:47:17:36:af:bb:eb:50:
bb:1c:4a:8d:3e:74:c7:db:c2:fa:b0:31:ab:da:ed:
6e:95:11:6f:8c:31:b8:0d:19:6e:4b:90:51:d5:74:
90:56:c2:5c:a2:08:ed:cf:67:37:81:33:d7:a5:40:
2b:7c:1c:38:c7:89:33:dd:d9:c4:0a:f4:8b:70:1e:
f1:f9:93:93:ca:55:1b:89:ae:4a:26:bd:be:b5:04:
af:ba:21:d7:79:17:11:52:5c:6e:3e:6c:71:f6:2d:
f3:9a:aa:bd:88:de:bb:9c:17:55:13:b7:f1:ca:d8:
77:20:9a:9b:0a:e6:90:bb:6b:70:a8:d1:2e:59:12:
01:30:ac:bf:52:47:ec:78:62:7d:7d:ce:29:6a:42:
d1:55:f2:da:99:e5:1c:91:63:7d:0d:9f:3e:5d:7f:
2c:4c:f7:77:fe:db:61:25:32:48:4f:cf:9e:16:18:
7b:68:77:25:d8:3d:10:8b:df:21:04:52:17:96:1b:
78:c3:d5:fa:e4:8d:34:5f:fe:f5:66:a8:90:c3:f7:
3f:56:c8:8c:a7:19:86:2f:7f:5e:00:a4:52:d9:a1:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137435
sbgp-ipAddrBlock: critical
IPv4:
103.108.112.0/22
IPv6:
2406:d240::/32
Signature Algorithm: sha256WithRSAEncryption
b1:83:0b:21:7f:10:b9:a1:68:84:d3:7f:a3:48:76:ff:43:7c:
ce:42:dd:de:d7:45:fb:d2:c8:f2:12:fc:b3:f5:fe:d4:49:86:
45:6b:b1:6c:ea:bf:90:85:c2:eb:fc:70:c1:a8:49:d0:18:7d:
89:49:f6:f2:f1:1a:37:23:b6:02:2a:6f:83:e1:7d:45:12:de:
4b:3a:bc:11:92:30:6f:8d:72:da:ac:3b:5e:3c:b3:96:83:74:
32:e1:83:fb:91:78:16:ce:42:38:66:36:a0:4d:58:69:d1:d3:
6e:58:57:76:ff:d8:98:c3:49:d7:8a:e6:75:21:9a:a4:5b:89:
55:a0:d0:55:43:f4:5a:e8:d6:f4:86:ed:7f:e6:5e:0b:d1:a6:
54:7f:cc:c0:0c:b5:1a:67:b4:55:26:e7:ee:f8:3a:1a:8f:63:
ce:08:40:4b:5c:2c:d7:9f:0a:e1:b6:ac:6d:e0:a1:de:07:77:
51:fe:dc:7f:b6:6f:92:4e:01:67:6e:ac:d8:42:e5:f9:2c:b6:
b3:d0:36:25:82:8b:cf:21:76:ef:ce:f5:f7:18:0e:36:a0:ac:
5f:07:cd:e6:9f:c2:0c:cd:af:d1:da:9a:22:6c:a3:78:a1:d7:
1a:71:81:d0:8d:eb:98:fa:15:1c:66:25:1e:88:b1:31:c4:00:
1e:89:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:26 2025 by rpki-client