Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
File: J38SJEpQvGVO5WP-c5_k63GZZrY.cer (raw, json)
Hash identifier: fzIg20cTXy5CBJdaLgLW2MhOycpvey14rxUdtUpP4E4=
Subject key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02328A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Feb 2025 09:08:33 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 152181
IP: 36.50.144.0/23
IP: 2001:df3:4ac0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144010 (0x2328a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 21 09:08:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91B89AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:16:1b:3c:aa:b2:33:3e:1a:a0:f7:0b:f6:
80:f7:95:d5:29:42:5a:ad:dd:25:f8:24:6f:2b:f0:
72:53:9a:c7:f5:e3:c9:08:11:15:ea:ba:bf:85:e0:
77:67:7f:48:13:90:42:f9:73:ea:7c:61:c6:f7:ed:
f6:f8:c1:52:d4:1a:02:85:56:fb:cb:e1:cc:8a:e4:
c0:33:de:3f:91:d2:19:61:7e:be:1c:9a:a4:63:34:
83:e7:69:62:cb:45:33:70:6b:74:fe:0b:64:8a:1d:
f2:16:40:63:79:16:be:14:a1:4a:66:14:e3:96:71:
c2:f1:09:35:fd:67:8f:27:68:ee:7b:20:c6:35:d7:
7a:9c:00:b3:53:63:d6:b7:ab:d1:7b:1e:c1:3d:cd:
6a:58:87:80:b3:62:85:90:d6:ae:7e:f5:b4:78:d6:
34:1c:81:c3:c3:36:53:34:70:d2:7a:33:f2:4a:d1:
0e:4a:32:f4:8d:29:67:32:d2:0f:60:4c:67:6b:1b:
44:9b:48:13:4b:85:15:a9:05:61:32:db:40:7d:74:
6b:11:5c:4e:70:fc:14:c9:27:72:d8:31:e5:7a:4f:
da:36:b2:81:0b:42:11:03:57:86:28:9c:42:e0:46:
5b:ff:55:5a:89:53:5e:75:99:66:49:f3:8d:f8:c1:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152181
sbgp-ipAddrBlock: critical
IPv4:
36.50.144.0/23
IPv6:
2001:df3:4ac0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b7:1a:5a:98:aa:a0:aa:27:c7:4c:0f:0d:56:e9:e9:ee:85:
9d:a0:d7:b0:f1:aa:7f:c5:82:a0:11:f7:36:69:00:1d:d8:2e:
d4:bb:10:ad:50:01:72:61:19:1f:a1:4a:8a:aa:36:f8:ed:78:
b7:ac:3a:3c:1c:1d:0f:b8:2e:43:1a:c0:15:3b:93:64:60:6d:
fd:d7:d0:2c:07:6e:06:eb:1e:c3:0f:9f:95:f7:47:9e:a1:eb:
ea:33:73:a6:04:bd:d0:d6:40:a7:c5:74:a0:7d:b0:ad:43:fb:
07:0e:b9:be:c9:8c:a2:ce:fa:bc:5a:22:d2:aa:31:c2:65:ad:
94:5b:2c:15:6f:f0:ad:a3:96:7e:62:d1:25:25:3b:16:2a:ee:
a3:2f:37:a4:e9:16:4e:89:a6:19:5b:19:80:62:0e:3e:e2:db:
d0:26:32:3d:a6:f6:49:ad:83:42:f5:e5:4a:ee:5a:31:0a:44:
bc:11:30:b2:3d:aa:5a:d8:5e:49:c6:84:27:4a:33:b5:4a:62:
31:27:83:3c:19:9e:22:1a:85:97:eb:16:d8:7a:4c:95:0a:57:
81:e0:5d:e2:78:6a:c7:1e:80:91:37:7e:f8:3f:27:1d:e8:4d:
7f:ba:5f:37:76:b2:74:4a:d2:ba:59:49:6a:31:f9:e0:29:41:
7c:0a:28:8a
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjKKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIyMTA5MDgzM1oXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjg5QUExMTAvBgNVBAUTKDI3N0YxMjI0NEE1MEJDNjU0RUU1NjNG
RTczOUZFNEVCNzE5OTY2QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmpRYbPKqyMz4aoPcL9oD3ldUpQlqt3SX4JG8r8HJTmsf148kIERXqur+F4Hdn
f0gTkEL5c+p8Ycb37fb4wVLUGgKFVvvL4cyK5MAz3j+R0hlhfr4cmqRjNIPnaWLL
RTNwa3T+C2SKHfIWQGN5Fr4UoUpmFOOWccLxCTX9Z48naO57IMY113qcALNTY9a3
q9F7HsE9zWpYh4CzYoWQ1q5+9bR41jQcgcPDNlM0cNJ6M/JK0Q5KMvSNKWcy0g9g
TGdrG0SbSBNLhRWpBWEy20B9dGsRXE5w/BTJJ3LYMeV6T9o2soELQhEDV4YonELg
Rlv/VVqJU151mWZJ8434wfeLAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJ38SJEpQ
vGVO5WP+c5/k63GZZrYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI4OUFBLzg1RDBGMzQ2QkM2MjExRUY5QTc4Mzc1MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCODlBQS84NUQwRjM0NkJDNjIxMUVGOUE3ODM3NTFDNEY5QUUwMi9KMzhTSkVw
UXZHVk81V1AtYzVfazYzR1paclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlJ1MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBJDKQMA8EAgAC
MAkDBwAgAQ3zSsAwDQYJKoZIhvcNAQELBQADggEBAFy3GlqYqqCqJ8dMDw1W6enu
hZ2g17Dxqn/FgqAR9zZpAB3YLtS7EK1QAXJhGR+hSoqqNvjteLesOjwcHQ+4LkMa
wBU7k2Rgbf3X0CwHbgbrHsMPn5X3R56h6+ozc6YEvdDWQKfFdKB9sK1D+wcOub7J
jKLO+rxaItKqMcJlrZRbLBVv8K2jln5i0SUlOxYq7qMvN6TpFk6JphlbGYBiDj7i
29AmMj2m9kmtg0L15UruWjEKRLwRMLI9qlrYXknGhCdKM7VKYjEngzwZniIahZfr
Fth6TJUKV4HgXeJ4ascegJE3fvg/Jx3oTX+6Xzd2snRK0rpZSWox+eApQXwKKIo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:16 2025 by rpki-client