Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
File: OSQdwqlJIur_mC2bQID4vkD3tr0.cer (raw, json)
Hash identifier: HVm4tCGQ6xNGOQIYn/zl/uRvnZfu5tU4M1xU1vo1f3k=
Subject key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02374A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Mar 2025 09:21:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 150739
IP: 163.223.106.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145226 (0x2374a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 13 09:21:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91E17F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:4f:6b:c9:d9:73:34:56:4e:51:f9:c6:5e:
66:d7:40:66:1c:3c:0e:b4:5e:1e:73:54:7d:a5:a5:
e4:2c:28:b2:e4:5a:8d:8a:5d:82:5c:35:71:78:f1:
ad:59:62:e3:8a:89:ad:57:be:94:18:23:00:d6:0e:
95:17:7b:a2:60:89:cd:d3:e9:6f:b6:80:33:c5:ba:
34:56:d7:f2:55:c9:d4:55:6a:ab:8e:bf:d6:2d:1c:
9f:0c:09:a7:d3:b2:f1:81:4f:4f:bf:c4:94:5e:73:
44:02:6f:bc:55:4c:d6:6a:d5:8b:cc:cc:2c:95:5b:
29:63:3a:44:9a:be:ba:30:1f:8c:ea:19:f5:c6:88:
41:28:cd:aa:bb:f4:de:1b:3e:39:5a:28:ae:ef:52:
b8:23:0a:14:9e:05:70:2d:71:57:d5:49:f4:62:59:
46:97:63:ed:17:c8:d1:08:16:c5:da:6d:fa:94:c9:
80:bc:d0:89:a9:a7:ac:d6:3a:d9:ca:0c:1d:3e:e3:
91:2e:ef:6f:fc:83:f8:f5:1a:e6:8e:8b:39:cc:b0:
67:1f:e5:0e:7c:35:8c:16:94:13:e3:40:3f:72:cd:
21:15:5b:26:9e:50:a3:32:bf:b5:4e:1f:c9:16:bf:
c1:5a:15:5b:ad:d6:0b:78:5c:d9:e4:3b:82:e0:0e:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150739
sbgp-ipAddrBlock: critical
IPv4:
163.223.106.0/23
Signature Algorithm: sha256WithRSAEncryption
47:2a:94:3f:29:7e:05:ea:b5:f7:24:a1:f4:99:d1:af:06:cc:
5d:ba:5d:e9:27:b3:ad:57:e1:09:14:35:4f:07:0c:64:20:ba:
16:21:f5:4a:9a:c4:d0:6f:71:62:ba:45:8e:1c:ae:95:95:4c:
c0:77:80:15:e3:fd:ed:11:1f:d3:4a:15:fd:98:7e:fb:f7:a7:
16:5f:54:28:e7:8b:ea:b6:7c:cf:0b:75:60:ad:fb:98:c7:b4:
89:7b:07:03:a3:a8:24:fd:83:d9:e1:2f:16:31:b3:79:2b:c3:
0c:6d:df:5e:76:d7:32:b9:7c:4c:66:82:78:f6:02:93:82:1c:
94:1b:ee:27:b6:bf:1c:08:95:20:97:bb:52:4d:76:6a:3f:14:
be:06:a4:bd:19:3e:80:d6:87:8e:c3:d7:39:6d:31:84:6e:1f:
5e:b4:25:99:ef:4c:58:dc:8c:00:b2:e3:f2:fa:0a:49:0d:cf:
d9:ab:ab:84:a8:5a:d7:fb:de:ea:72:91:c6:78:42:89:cb:57:
57:ae:fa:47:2a:f6:69:ef:ca:69:48:71:6b:dc:b1:eb:a8:76:
23:5e:1b:63:cd:fe:10:8d:63:0b:4a:d8:ca:79:6b:00:da:ee:
54:4a:de:a9:6f:58:8e:f9:b3:64:f7:01:a8:2f:18:34:4f:73:
1f:31:79:81
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAjdKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMxMzA5MjE1OVoXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5
QjQwODBGOEJFNDBGN0I2QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCimE9rydlzNFZOUfnGXmbXQGYcPA60Xh5zVH2lpeQsKLLkWo2KXYJcNXF48a1Z
YuOKia1XvpQYIwDWDpUXe6Jgic3T6W+2gDPFujRW1/JVydRVaquOv9YtHJ8MCafT
svGBT0+/xJRec0QCb7xVTNZq1YvMzCyVWyljOkSavrowH4zqGfXGiEEozaq79N4b
PjlaKK7vUrgjChSeBXAtcVfVSfRiWUaXY+0XyNEIFsXabfqUyYC80Impp6zWOtnK
DB0+45Eu72/8g/j1GuaOiznMsGcf5Q58NYwWlBPjQD9yzSEVWyaeUKMyv7VOH8kW
v8FaFVut1gt4XNnkO4LgDjCbAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUOSQdwqlJ
Iur/mC2bQID4vkD3tr0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUxN0YzLzlBOUZCOEYyRkZFQzExRUZCRjU1QkI2RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3Fs
Skl1cl9tQzJiUUlENHZrRDN0cjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkzTMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo99qMA0GCSqG
SIb3DQEBCwUAA4IBAQBHKpQ/KX4F6rX3JKH0mdGvBsxdul3pJ7OtV+EJFDVPBwxk
ILoWIfVKmsTQb3FiukWOHK6VlUzAd4AV4/3tER/TShX9mH7796cWX1Qo54vqtnzP
C3VgrfuYx7SJewcDo6gk/YPZ4S8WMbN5K8MMbd9edtcyuXxMZoJ49gKTghyUG+4n
tr8cCJUgl7tSTXZqPxS+BqS9GT6A1oeOw9c5bTGEbh9etCWZ70xY3IwAsuPy+gpJ
Dc/Zq6uEqFrX+97qcpHGeEKJy1dXrvpHKvZp78ppSHFr3LHrqHYjXhtjzf4QjWML
StjKeWsA2u5USt6pb1iO+bNk9wGoLxg0T3MfMXmB
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:15:09 2025 by rpki-client