Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.cer (raw, json)
Hash identifier: jjHA1mtIY07IiNmflYKtU+PjYfK/K4Zmr9IWIlHD2tk=
Subject key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0233FA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Feb 2025 15:45:38 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 9716
AS: 24017
AS: 133414
IP: 202.10.128.0/17
IP: 202.80.64.0/19
IP: 203.17.26.0/23
IP: 203.18.236.0/22
IP: 203.21.224.0 -- 203.22.17.255
IP: 203.201.0.0/19
IP: 2001:df0:24e::/48
IP: 2405:7f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144378 (0x233fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 28 15:45:38 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9155AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:37:94:89:af:ee:5f:87:e3:fa:44:d8:7d:
1e:41:35:a2:e5:dc:5f:30:d7:91:6c:73:d0:7c:12:
ff:30:33:42:02:3e:dc:20:78:85:5b:8a:1d:3c:1d:
ee:f1:75:da:0d:82:eb:39:86:31:9d:31:01:a7:5e:
5a:c1:53:33:85:8b:b3:8b:ee:4c:fa:a7:fc:8b:7c:
08:11:ac:e5:00:25:76:8d:26:51:25:76:1a:30:71:
49:ad:0b:df:8b:47:3a:5d:7e:0e:97:3e:f7:35:29:
72:ae:92:ef:7c:30:f6:8d:01:2e:c6:a8:23:29:b7:
b6:e8:ef:f2:25:a1:dd:40:0c:31:cb:cc:47:7e:c5:
f4:b6:33:38:b1:d8:d5:4b:46:1f:23:1a:e0:0d:a3:
79:aa:5a:27:49:13:d8:f4:71:1b:cd:08:9d:03:55:
fd:af:55:78:bd:bd:b4:71:f1:2b:9a:7a:50:38:b2:
ed:66:0f:bf:68:c4:44:56:69:21:d5:09:da:f2:d4:
d6:7c:b3:99:9e:dc:ae:24:42:b2:b5:af:6a:6a:85:
cc:f2:ab:d6:37:71:85:38:07:50:45:9b:14:1e:0c:
e9:a4:88:25:7a:86:96:af:fb:85:5b:52:7e:85:df:
1f:14:52:6b:8f:fb:25:8f:7d:73:bc:6b:c9:32:b3:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9716
24017
133414
sbgp-ipAddrBlock: critical
IPv4:
202.10.128.0/17
202.80.64.0/19
203.17.26.0/23
203.18.236.0/22
203.21.224.0-203.22.17.255
203.201.0.0/19
IPv6:
2001:df0:24e::/48
2405:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
c4:af:e6:1b:86:c5:33:e1:eb:d8:a6:54:eb:75:b2:92:1c:35:
f9:cf:7c:b9:db:a0:da:50:31:ec:8a:ee:66:2c:9d:42:20:0d:
a2:3c:7c:2a:e3:17:b9:59:70:cb:55:08:da:31:db:5b:2d:f8:
ed:22:2a:ac:fa:61:54:c9:aa:6a:b0:5e:eb:0a:9e:23:d7:42:
ff:db:99:88:1b:fd:b1:60:c0:3b:35:09:24:59:18:6a:30:a7:
b1:0a:a8:e6:2a:7e:ae:dd:89:9c:c3:1a:35:87:6b:25:c7:06:
31:40:ef:f6:ea:ba:f1:67:3f:2d:9f:7f:e4:a0:95:79:31:8d:
8b:34:96:c5:ae:5f:8a:dc:9b:a7:f7:00:d3:c0:46:76:85:54:
74:da:82:32:bd:68:eb:ac:fb:8c:f8:f5:30:fe:af:db:af:71:
e9:62:4d:cf:42:61:71:af:15:45:d4:cb:ba:2c:59:75:4b:5f:
93:60:46:5b:84:6c:b8:8b:54:3a:63:77:1d:04:35:bf:fe:62:
0c:26:8f:3a:96:95:93:7e:7a:9a:02:ad:1b:21:39:e0:9d:b3:
5f:0c:52:e6:d9:16:11:9c:da:2e:3b:17:c9:7a:b4:14:d0:58:
32:06:4e:b2:17:ea:90:56:13:cd:d2:67:83:09:4a:d1:fa:30:
4b:51:d5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:31 2025 by rpki-client