Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
File: OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer (raw, json)
Hash identifier: FxSFElT+3aV4/Hnpcxdp1wPL0GgiISigA54J4IM3LFQ=
Subject key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220B5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Dec 2024 02:49:58 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 9303
AS: 10200
AS: 17752
AS: 133756
IP: 103.24.136.0/22
IP: 202.14.102.0/24
IP: 202.20.65.0/24
IP: 202.20.92.0/24
IP: 202.21.157.0/24
IP: 202.27.192.0 -- 202.27.203.255
IP: 202.27.209.0 -- 202.27.219.255
IP: 202.27.222.0/24
IP: 202.27.236.0/24
IP: 202.27.247.0/24
IP: 202.27.251.0/24
IP: 202.36.43.0/24
IP: 202.37.70.0/23
IP: 202.37.117.0 -- 202.37.118.255
IP: 202.49.141.0/24
IP: 202.49.183.0/24
IP: 202.49.189.0/24
IP: 202.50.95.0/24
IP: 203.9.216.0/23
IP: 2404:bf00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139445 (0x220b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 5 02:49:58 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91D1200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:30:c5:e8:77:16:45:3c:52:9f:e9:b4:7c:
e1:ab:8c:1a:8a:48:f3:c5:33:fa:05:26:91:2b:4c:
34:84:b2:c7:4d:84:52:b9:b8:26:9b:37:3b:d8:b3:
c2:2b:3e:8f:bb:0c:58:b1:51:83:8a:96:50:05:d8:
1d:40:6f:20:fb:b3:2c:71:6c:9a:b5:fa:3e:4a:f6:
a9:8c:88:ba:86:a5:cc:26:cc:f2:41:dd:20:b0:63:
ec:f5:37:7c:22:8e:e0:b3:8b:ef:9b:29:31:b4:8b:
df:9d:9c:51:aa:21:0b:8b:58:d7:d5:b9:30:f7:9e:
4b:5e:14:ba:e3:3d:db:18:70:6c:af:28:eb:e2:c1:
d7:80:31:d2:c9:0f:f5:a7:93:36:a4:01:e0:8d:b6:
88:e5:df:ab:0d:81:f8:9b:d7:72:e2:ae:4b:1b:90:
ef:dc:9b:da:41:2a:27:d3:bb:eb:9a:08:ee:21:0e:
4a:14:54:15:f9:1d:7c:af:f9:d6:7e:21:99:58:8a:
a5:75:eb:c7:cb:ef:5f:94:ce:52:87:5f:7c:6d:69:
49:40:97:2f:32:94:f8:62:1d:ad:00:af:9e:6c:74:
09:53:20:f0:4a:24:db:18:96:0b:c3:cd:37:a1:63:
d7:18:80:e8:92:6e:e6:30:9d:e2:c6:72:5b:a8:b7:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9303
10200
17752
133756
sbgp-ipAddrBlock: critical
IPv4:
103.24.136.0/22
202.14.102.0/24
202.20.65.0/24
202.20.92.0/24
202.21.157.0/24
202.27.192.0-202.27.203.255
202.27.209.0-202.27.219.255
202.27.222.0/24
202.27.236.0/24
202.27.247.0/24
202.27.251.0/24
202.36.43.0/24
202.37.70.0/23
202.37.117.0-202.37.118.255
202.49.141.0/24
202.49.183.0/24
202.49.189.0/24
202.50.95.0/24
203.9.216.0/23
IPv6:
2404:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
1d:20:19:77:1f:5d:34:f9:9f:29:65:f7:cc:2f:2d:a1:d8:6d:
d8:66:34:20:13:62:e4:69:e4:fd:84:cf:37:a3:de:37:5f:1f:
97:4e:f5:a1:00:ed:68:71:7a:c2:bc:71:d5:2e:cd:e8:8a:61:
b8:ed:ed:ac:be:33:4c:c1:bf:3e:bd:3e:4b:c7:f1:25:c0:08:
6a:73:52:85:73:c0:af:d1:0c:d7:e9:ca:70:3c:98:4d:99:89:
24:46:2b:5f:89:c0:e7:00:d2:4d:f2:5e:0a:0a:4b:a0:e8:f8:
82:18:b4:69:f8:46:0a:2a:d5:54:81:c7:8d:d4:2a:c9:e8:74:
13:d0:57:d3:d4:d5:b8:94:a1:dd:07:9d:18:da:78:1c:72:78:
4e:4b:83:b7:56:38:f6:6b:3d:74:28:ed:ad:a1:a2:04:42:4e:
c3:e4:59:2f:3e:91:67:b9:10:42:31:24:13:c0:6e:eb:57:2a:
7c:1d:db:29:0f:fc:8d:f0:aa:7d:31:ed:45:3a:75:b6:5b:20:
f8:94:92:fa:c2:fc:16:5e:b6:75:63:15:cb:05:89:64:1a:65:
46:69:80:c2:fe:d7:c9:a0:c4:ac:a4:db:ca:c7:5e:3e:67:66:
57:f8:c5:80:6b:43:c8:fe:da:d7:53:00:f0:46:32:6c:46:95:
0a:24:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:59 2025 by rpki-client