Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
File: OqWspVx7NeP5Iru42qsdfYhw43M.cer (raw, json)
Hash identifier: Nkw4hidPCOskiYyIJYcl+CcmtvVaV2HtVeU0hUAwBak=
Subject key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F33
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Dec 2024 03:18:37 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 133152
IP: 43.229.132.0/22
IP: 103.253.72.0/22
IP: 2400:5780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139059 (0x21f33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 1 03:18:37 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A915A533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:e6:6c:7a:5b:20:86:9c:00:5e:55:ad:7f:
3b:86:f8:ba:12:a2:c3:39:14:73:98:ef:a0:c1:64:
76:d6:ed:27:99:99:b0:e9:15:7f:78:db:57:92:96:
74:72:a7:6e:15:b8:2f:9e:bb:24:44:29:14:4e:d2:
53:38:85:72:9e:c3:db:eb:bf:2b:ea:6a:1d:10:7f:
bc:c0:0f:68:ae:ec:8e:78:7e:f6:6e:dc:d2:7a:3c:
b2:9e:73:76:67:ce:50:75:b4:d1:21:df:35:10:4b:
88:11:5f:0f:50:d9:ee:a9:1d:bc:c9:75:ea:b9:d6:
ea:7b:1d:ef:2c:97:36:3f:63:81:44:0f:21:40:d3:
7e:ab:be:f7:fd:41:f9:79:bf:26:9e:83:67:3f:7b:
58:5c:7a:23:5d:a2:fe:96:bf:17:b4:42:bd:75:d9:
6a:73:63:6d:4a:f7:69:90:e8:64:0a:cc:80:c4:d3:
69:8b:7c:5f:ab:24:b9:4e:f3:03:7e:97:83:0a:88:
41:14:95:b8:45:9d:2b:d1:bb:7e:f7:e3:6d:d5:35:
dd:66:6f:44:03:ca:27:83:45:0b:42:c0:ef:cf:78:
74:65:b0:39:e9:60:4b:b9:b9:89:52:01:6a:94:b9:
43:78:43:54:ed:33:b0:9f:34:8b:19:fe:a1:9f:0b:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133152
sbgp-ipAddrBlock: critical
IPv4:
43.229.132.0/22
103.253.72.0/22
IPv6:
2400:5780::/32
Signature Algorithm: sha256WithRSAEncryption
cb:8d:30:d9:bf:61:6f:d1:de:96:34:8c:c2:82:b0:42:1b:d3:
69:d1:43:e2:be:3a:6e:8f:6b:2c:f6:ae:35:2d:80:de:fb:70:
c6:0e:d2:78:49:6e:50:3d:94:ae:df:56:17:fe:b9:64:39:bb:
65:7e:05:0f:c5:df:12:99:88:bd:42:23:27:24:84:fd:2e:32:
41:52:30:d8:d8:d0:1e:e0:33:ec:40:46:d9:7f:d8:fd:18:a5:
07:80:ee:31:dd:7d:d7:69:a6:f9:8e:2d:79:36:9f:3b:61:f9:
ad:c0:94:10:83:e4:45:08:31:bf:fc:cc:65:f4:f3:81:56:3e:
53:db:cb:b9:b7:df:79:b1:f9:33:a7:a5:5f:84:3b:e0:b3:64:
7d:d2:a7:7a:bc:7e:e4:d3:7b:16:7d:4b:d7:7c:6c:e7:24:0f:
66:e8:13:96:7f:82:66:e0:76:18:d7:66:1b:a8:8a:66:a4:08:
ae:5a:f8:55:5f:69:5f:bb:02:4c:f4:c0:5b:58:8c:d8:03:ba:
6a:15:9d:62:6f:48:68:30:d7:6e:ef:f1:77:4f:a6:5a:69:94:
57:18:cb:b8:6b:a4:c2:fb:00:b9:44:51:66:7b:fb:9b:33:19:
23:55:69:29:4e:40:d8:70:73:9e:da:b0:27:de:f6:1e:01:27:
c1:fa:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:20 2025 by rpki-client