Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer
File: JD5IKavy-QnBLdoET-XTa4IQU5I.cer (raw, json)
Hash identifier: YSpFAWoYfETEGZrEawpBTcwm5TStLXDTjoqeZZDgF8A=
Subject key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0237A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 15 Mar 2025 17:22:34 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 135037
IP: 103.206.228.0 -- 103.206.230.255
IP: 2405:82c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145313 (0x237a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 15 17:22:34 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91F2152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:af:8b:de:a9:b2:a9:e1:e3:bd:d9:b8:16:
92:e5:fd:ac:b2:ad:72:83:c4:9a:dc:4e:18:85:20:
27:c2:24:38:09:57:fd:72:b5:2a:3e:1b:9a:21:e5:
82:43:d7:29:fa:f8:53:38:b8:92:fd:80:92:ff:f8:
92:08:25:8e:c3:85:35:7c:ba:00:9b:05:6e:5b:03:
7d:f9:76:b8:19:10:61:18:4e:86:36:d7:dd:db:c9:
fd:4b:01:71:fe:4c:0a:19:8d:ff:7f:35:f4:11:74:
6a:90:2d:d3:0a:d5:b8:15:93:aa:a5:51:0b:4f:35:
b3:cc:cf:92:05:74:19:bc:1d:9c:65:7d:ee:d5:fa:
78:45:ae:c3:a0:fb:e9:bc:4f:af:b7:c4:2f:d9:60:
3c:1a:fa:96:fb:ac:bb:51:62:ef:99:c0:4b:55:0a:
cd:c7:99:20:8e:e1:aa:af:41:91:06:5c:30:f1:7e:
d6:2e:bf:09:26:bd:26:2a:a5:15:a8:14:d2:48:42:
ea:a2:38:d7:c8:99:a1:8c:02:e4:8c:e3:32:92:ae:
ca:eb:a0:2e:e6:c9:2a:d4:96:fc:24:48:83:6c:13:
70:50:bd:91:b9:f1:d5:ab:15:6d:56:d9:58:9b:6a:
74:dd:56:6c:68:ca:ac:a7:29:de:f9:13:8f:a1:a7:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135037
sbgp-ipAddrBlock: critical
IPv4:
103.206.228.0-103.206.230.255
IPv6:
2405:82c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:4b:69:e5:71:35:29:49:7e:27:3b:ec:af:7c:33:6c:30:68:
cf:57:db:1d:9d:4c:90:82:05:d2:77:e6:f5:bb:8e:98:26:d6:
f9:b9:33:0b:32:e2:c9:6c:db:5c:50:ef:99:b5:6c:bd:28:45:
1f:f4:00:a3:e1:d3:30:6d:cc:a9:51:d1:68:e6:39:c4:cf:b7:
5e:31:a0:4a:9b:7b:de:85:54:af:08:b2:ee:5e:a8:2c:c7:0a:
e1:26:3b:e5:27:7f:91:05:3c:d7:cd:0d:1e:d5:aa:09:53:62:
9e:e1:f1:af:04:5a:58:c3:a4:42:af:4e:c0:50:e1:4c:c4:03:
48:b3:3c:b3:01:5e:bc:2e:1e:f2:99:af:8b:4a:a5:e3:1a:6a:
65:a4:87:82:f1:85:fa:1d:5b:8d:d1:dc:17:89:4e:b8:51:c0:
c6:f9:30:0d:6d:a8:7a:2b:c7:e1:95:30:d3:cf:55:db:b3:5c:
fd:5f:fa:db:1d:f4:4c:da:c1:34:21:5a:35:11:8c:5c:89:58:
97:8c:d3:08:70:b8:ef:58:53:bc:ee:8d:12:5a:d4:62:47:b4:
cb:4d:9b:9c:c7:aa:4d:83:16:df:58:9a:e2:a8:76:19:51:64:
17:fd:60:63:9d:24:e5:a0:a6:5b:2c:58:5a:72:9b:b7:ba:4e:
3e:8f:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:19 2025 by rpki-client