Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer
File: A72QmhoVpFA9-tWUw8bem5RgTmY.cer (raw, json)
Hash identifier: /lpe35B5GGMcZsirndhhVoPPYnAykpBzdLdEJ4gTs1M=
Subject key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E18
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 22:03:41 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 133759
IP: 43.249.220.0/22
IP: 103.41.80.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138776 (0x21e18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 22:03:41 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91D873B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:80:7a:23:11:97:3d:b6:55:9c:ae:98:08:
07:59:c5:64:ef:51:ae:36:cf:d5:70:ce:37:e6:a7:
06:8a:0f:ac:bd:62:bd:15:33:43:6f:bf:7a:8b:73:
a6:90:91:0b:3c:75:44:2b:92:a7:d6:7c:d0:2a:e4:
14:e7:63:d5:23:47:a3:a2:e9:6f:bc:3f:41:8c:ea:
e0:07:78:4a:88:e6:2e:39:31:34:4b:8c:c0:89:c8:
69:fa:f4:cc:53:f3:9d:fc:70:5e:bb:64:ee:bb:f9:
44:52:47:8a:ec:0c:32:91:f5:4a:15:33:4a:d6:54:
81:7c:18:b8:e0:a8:58:14:31:bd:71:90:bd:34:32:
68:b4:c4:87:db:4a:08:18:ae:3a:2b:ec:24:56:0f:
0b:42:43:95:a2:02:de:49:a5:39:4a:0e:c8:de:07:
61:d5:b2:89:ae:18:de:bd:ae:be:6b:0f:28:27:6d:
45:de:d3:c4:a4:c5:d9:6d:be:5f:2b:ab:92:78:6e:
1d:97:fc:2f:31:0c:3b:88:93:26:ca:c9:28:90:d4:
16:85:f4:5d:24:79:36:f2:dd:40:76:43:34:aa:de:
c6:d8:0c:ef:70:f0:b1:6f:46:eb:13:18:39:92:c5:
dd:5a:f0:f7:bd:70:0a:4c:5d:20:b7:ae:f1:79:e8:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133759
sbgp-ipAddrBlock: critical
IPv4:
43.249.220.0/22
103.41.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:bc:86:a7:ea:f9:86:96:2a:c9:fb:59:9c:5b:46:c0:8b:e5:
12:76:2b:d5:fe:49:06:4b:7c:39:6b:d6:44:02:0f:83:e0:f3:
c2:d8:ec:57:20:23:2e:39:f8:cb:a5:a5:00:d6:31:e5:f3:07:
a5:df:69:e6:0c:d6:a2:1c:39:e0:f5:3c:1a:2d:fc:01:7e:12:
09:79:3f:d7:ed:1f:0c:0a:d4:bd:f0:cf:4d:7b:2b:e1:24:a4:
47:36:a8:47:d1:9f:6f:e9:39:9a:7b:5c:e9:61:69:9d:b0:42:
2c:e2:46:e8:83:d1:bc:6a:2c:6a:41:de:8e:4a:b4:10:e7:e6:
10:aa:bc:6f:ca:c9:d3:78:7a:98:8a:99:8d:87:73:8b:7b:b2:
31:87:c8:64:66:d9:e6:1d:01:97:0c:3f:8e:e9:06:d0:53:d4:
3f:5e:26:3c:93:55:f1:0f:5a:27:8d:50:52:9e:39:2f:2d:91:
e2:08:2b:65:46:23:6e:e6:70:59:77:a9:7b:89:71:54:72:ed:
74:17:8e:68:87:e8:4a:09:85:cc:51:49:a0:9b:41:fe:2c:ff:
ad:59:64:6a:ba:96:bb:64:7e:a4:f0:95:bc:ae:a9:b9:d7:5f:
ec:c7:a2:65:5f:88:7e:8c:19:53:83:99:36:85:ce:77:a6:ae:
97:b5:75:a7
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAh4YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyNzIyMDM0MVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5
NEMzQzZERTlCOTQ2MDRFNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJN4B6IxGXPbZVnK6YCAdZxWTvUa42z9VwzjfmpwaKD6y9Yr0VM0Nvv3qLc6aQ
kQs8dUQrkqfWfNAq5BTnY9UjR6Oi6W+8P0GM6uAHeEqI5i45MTRLjMCJyGn69MxT
8538cF67ZO67+URSR4rsDDKR9UoVM0rWVIF8GLjgqFgUMb1xkL00Mmi0xIfbSggY
rjor7CRWDwtCQ5WiAt5JpTlKDsjeB2HVsomuGN69rr5rDygnbUXe08Skxdltvl8r
q5J4bh2X/C8xDDuIkybKySiQ1BaF9F0keTby3UB2QzSq3sbYDO9w8LFvRusTGDmS
xd1a8Pe9cApMXSC3rvF56H1lAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUA72QmhoV
pFA9+tWUw8bem5RgTmYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ4NzNCLzRBMTZCQkRBQzYwNDExRUNBQTk0NTk0QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhv
VnBGQTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgp/MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK/ncAwQCZylQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCevIan6vmGlirJ+1mcW0bAi+USdivV/kkGS3w5
a9ZEAg+D4PPC2OxXICMuOfjLpaUA1jHl8wel32nmDNaiHDng9TwaLfwBfhIJeT/X
7R8MCtS98M9NeyvhJKRHNqhH0Z9v6Tmae1zpYWmdsEIs4kbog9G8aixqQd6OSrQQ
5+YQqrxvysnTeHqYipmNh3OLe7Ixh8hkZtnmHQGXDD+O6QbQU9Q/XiY8k1XxD1on
jVBSnjkvLZHiCCtlRiNu5nBZd6l7iXFUcu10F45oh+hKCYXMUUmgm0H+LP+tWWRq
upa7ZH6k8JW8rqm511/sx6JlX4h+jBlTg5k2hc53pq6XtXWn
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:38 2025 by rpki-client