Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
File: Nocz_cVgxeuJ5FJA331AOcsvYQg.cer (raw, json)
Hash identifier: abqeyokG2BwDC9NIJlzl4fwYg7T4NyOHfPTAYZ3tavw=
Subject key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021FCE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 23:16:24 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 45481
IP: 103.242.32.0/22
IP: 113.52.0.0/20
IP: 2400:eb00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139214 (0x21fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 23:16:24 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91C97F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:8f:9a:75:47:ad:e3:46:93:6f:c8:36:df:
bc:2a:40:62:e5:40:f0:88:c8:60:85:fb:75:59:f1:
18:cf:08:b3:ed:1c:ad:aa:53:5a:7a:9d:ae:e0:5e:
96:47:ae:d6:ce:73:b4:7d:60:22:f7:5a:81:a8:24:
74:df:c3:86:cb:b6:9d:72:b8:34:11:a6:09:ad:79:
d5:f7:8f:09:14:01:5d:97:8b:ee:dd:78:bd:b5:d6:
bc:e5:3e:5d:61:95:03:14:25:29:a0:62:40:25:b7:
4f:27:96:c8:00:05:55:fe:b9:2b:13:f7:e9:e8:05:
63:e3:a4:f7:69:08:fc:58:2b:42:e1:d6:ce:50:ec:
2b:2e:c0:11:d7:e1:77:da:2c:20:72:ad:b0:7e:28:
f0:81:96:9c:9c:06:80:c1:93:1d:e7:b1:db:b1:92:
b4:a2:74:fb:cb:3b:57:9b:f0:f0:ab:3f:71:5d:38:
83:d4:08:9c:b4:42:da:92:c8:bc:f5:24:0d:3f:7e:
e0:ed:e3:d9:46:27:11:ea:52:42:d2:11:5e:ad:53:
4b:c3:23:d3:d8:15:87:ba:94:a3:56:ff:9d:5e:c3:
9c:88:fe:59:08:bb:a4:19:7c:4d:5f:b7:aa:11:8e:
2d:ca:33:b8:15:b6:d8:c0:84:88:9a:44:de:23:f9:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45481
sbgp-ipAddrBlock: critical
IPv4:
103.242.32.0/22
113.52.0.0/20
IPv6:
2400:eb00::/32
Signature Algorithm: sha256WithRSAEncryption
96:b7:0f:cb:90:ff:60:99:e3:85:c1:29:9c:3b:b4:b3:69:c2:
8e:83:e6:cd:20:72:44:cf:59:fa:30:da:52:57:05:51:5c:35:
ba:e0:ed:69:b3:86:38:3e:c5:2b:78:15:f9:7a:99:5f:5d:67:
ec:ad:09:fe:b2:9c:29:9b:6d:1c:29:5c:ee:e4:94:8d:44:2b:
ff:4b:87:e5:9c:8d:50:94:6e:16:a7:d8:8e:5d:99:ee:75:cd:
39:5d:e3:36:ad:64:19:9a:de:11:3f:d7:9e:73:23:5b:a4:e1:
8c:20:6c:c9:1f:83:14:a3:b2:f9:95:14:45:a8:eb:13:3e:ef:
67:bf:21:af:d9:cf:e6:f4:9b:fa:db:d0:c3:8a:9f:9b:a5:0b:
7a:08:f2:80:f5:c8:23:09:83:94:96:3b:13:bd:43:2f:27:09:
10:f4:d4:2e:0d:2b:d7:1d:b5:a1:41:b6:0a:25:c1:89:25:e1:
b1:af:f3:40:ac:83:ca:4e:94:c2:5f:11:24:c9:ba:7e:d7:85:
11:b4:73:b3:26:bc:6b:bc:bf:22:b0:c6:f4:80:98:bd:c2:36:
a8:03:83:d5:cf:88:8f:f5:61:9f:69:52:c1:c8:9b:4b:26:c8:
88:8c:6e:a3:f0:98:ba:ff:77:b2:af:0e:14:0f:b5:05:76:aa:
a0:d9:e1:00
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAh/OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwMjIzMTYyNFoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0
MERGN0Q0MDM5Q0IyRjYxMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDH34+adUet40aTb8g237wqQGLlQPCIyGCF+3VZ8RjPCLPtHK2qU1p6na7gXpZH
rtbOc7R9YCL3WoGoJHTfw4bLtp1yuDQRpgmtedX3jwkUAV2Xi+7deL211rzlPl1h
lQMUJSmgYkAlt08nlsgABVX+uSsT9+noBWPjpPdpCPxYK0Lh1s5Q7CsuwBHX4Xfa
LCByrbB+KPCBlpycBoDBkx3nsduxkrSidPvLO1eb8PCrP3FdOIPUCJy0QtqSyLz1
JA0/fuDt49lGJxHqUkLSEV6tU0vDI9PYFYe6lKNW/51ew5yI/lkIu6QZfE1ft6oR
ji3KM7gVttjAhIiaRN4j+WdtAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUNocz/cVg
xeuJ5FJA331AOcsvYQgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM5N0Y1LzkxNzBDNDJBMjc0NDExRUQ4QzEzOUI1MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDOTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NW
Z3hldUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDALGpMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ/IgAwQEcTQA
MA0EAgACMAcDBQAkAOsAMA0GCSqGSIb3DQEBCwUAA4IBAQCWtw/LkP9gmeOFwSmc
O7SzacKOg+bNIHJEz1n6MNpSVwVRXDW64O1ps4Y4PsUreBX5eplfXWfsrQn+spwp
m20cKVzu5JSNRCv/S4flnI1QlG4Wp9iOXZnudc05XeM2rWQZmt4RP9eecyNbpOGM
IGzJH4MUo7L5lRRFqOsTPu9nvyGv2c/m9Jv629DDip+bpQt6CPKA9cgjCYOUljsT
vUMvJwkQ9NQuDSvXHbWhQbYKJcGJJeGxr/NArIPKTpTCXxEkybp+14URtHOzJrxr
vL8isMb0gJi9wjaoA4PVz4iP9WGfaVLByJtLJsiIjG6j8Ji6/3eyrw4UD7UFdqqg
2eEA
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:30:34 2025 by rpki-client