Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
File: BNhIIeE7gDAzVMS-NDMdURHyvKY.cer (raw, json)
Hash identifier: a65tyQjXsGTEvuil6B/bNZ9G715cxblXSgkB34iOi7A=
Subject key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022BFE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jan 2025 20:46:45 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 139802
IP: 103.145.102.0/23
IP: 2001:df2:880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142334 (0x22bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 28 20:46:45 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91F0721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:71:98:2e:27:89:fe:98:cb:5d:2a:51:1e:
ef:82:93:cb:05:15:c0:3c:87:ef:6c:58:85:cf:52:
31:75:1b:18:d8:d3:6d:bb:c2:35:0a:6a:f1:9b:8c:
12:72:7c:f3:fc:62:59:c3:02:83:a3:bf:0c:a0:a0:
d8:bb:a8:9e:32:6c:ee:fc:51:25:93:09:38:bd:13:
7d:e5:6c:88:92:00:d4:1d:66:94:38:48:24:a3:22:
80:7e:be:e3:d6:27:64:38:a2:1d:bf:df:cf:c0:de:
d0:a2:71:b4:49:8a:56:e2:fc:c0:54:35:d0:ab:83:
cf:0a:ac:6d:d9:a6:fc:6c:3a:93:b1:bf:af:73:f1:
84:72:9c:6c:98:fa:c8:ce:e5:19:de:c6:ea:a1:20:
13:e0:c7:a5:37:8a:fa:5e:02:79:d2:5d:34:06:fd:
92:ad:2e:3b:e2:5e:f2:a3:29:8d:ca:f2:45:56:53:
cc:46:4d:0d:36:42:b9:ea:42:25:9a:3a:4a:79:a4:
62:63:34:07:86:37:f1:b0:2c:5d:af:a5:9b:d4:30:
5e:8e:45:a7:4b:82:2b:5e:18:13:21:c8:4b:1c:02:
2f:dd:f3:0e:0f:fc:9e:2d:2a:39:6d:fe:92:a6:4c:
33:66:d8:f9:2a:d6:e8:f6:1d:e3:c6:0d:d6:8c:28:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139802
sbgp-ipAddrBlock: critical
IPv4:
103.145.102.0/23
IPv6:
2001:df2:880::/48
Signature Algorithm: sha256WithRSAEncryption
aa:22:01:99:56:3e:f7:7d:df:bf:2a:2e:0e:76:6a:a1:41:72:
ae:61:a1:5b:ee:25:9a:7d:af:2f:3b:41:06:e2:5b:f8:e1:62:
04:5d:d4:06:81:10:52:cb:38:c3:87:f9:c9:d7:e4:1b:2c:63:
6b:9b:90:de:11:a8:23:da:09:98:28:72:24:35:98:0d:21:a5:
fc:19:24:d8:22:23:15:48:7a:6b:9c:54:c0:7b:a3:81:41:ad:
18:f4:68:fe:be:66:13:cd:b4:88:6d:a3:5e:5f:27:85:49:ec:
07:f2:c3:f0:30:67:05:f5:da:bf:ed:d5:b6:14:90:15:53:a4:
7c:20:d6:94:03:62:16:d3:53:ea:79:9e:fc:09:a6:19:ab:5f:
e2:f2:73:e5:1b:1a:33:3c:52:ce:bc:04:d9:f3:c2:b6:21:00:
bd:04:f3:f4:1c:65:8d:b2:9e:7a:1a:36:30:d5:05:eb:ef:24:
9b:61:ce:9b:6d:c6:2b:ef:5c:0a:fa:a2:3b:0a:14:7a:2c:98:
13:39:50:bf:a1:16:ff:b0:db:b4:e1:90:6e:bd:50:40:58:ea:
4b:a1:d1:e3:68:63:f7:9f:91:ed:c9:70:61:b9:3b:78:3c:46:
90:1c:74:1a:88:e7:fb:5d:62:de:3d:a5:6d:94:8d:fb:b5:f8:
b4:d5:bf:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:33 2025 by rpki-client