Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
File: RYSuojlMRtaTTmPtaIfUcm_fehM.cer (raw, json)
Hash identifier: 6MfpONXdCWOCwAsFRo4DVE+dQJP8I+GiD+oo6ZQw6yw=
Subject key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0232FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Feb 2025 21:00:37 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 151332
IP: 103.179.36.0/23
IP: 2001:df0:45c0::/44
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144124 (0x232fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 24 21:00:37 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91EAAF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:39:21:ca:ad:4a:ea:f6:b6:09:cb:b6:43:
cf:b4:06:b1:cd:e9:3d:c4:24:f9:1e:01:1e:1f:43:
3f:d3:af:4d:de:c8:a9:42:39:92:84:83:8f:72:90:
37:08:a7:03:59:4f:86:4b:3b:e6:a4:1e:a4:dc:08:
95:3e:04:09:d5:36:e5:93:84:f9:8e:3f:43:14:01:
20:f3:17:c6:e9:20:92:94:cf:33:4d:a6:c3:1a:3f:
a9:7b:a9:91:39:e6:8c:05:13:c4:0e:b8:73:e1:5e:
37:77:78:9e:05:bd:8f:2f:7f:46:28:ae:86:63:9f:
04:8e:c8:32:63:1d:9c:0a:0c:62:5a:0f:2e:ff:30:
9a:6b:46:5f:23:60:63:7d:a6:f0:d2:04:56:39:77:
d0:73:7d:5c:11:a4:f7:7e:dc:03:ab:4d:33:4e:32:
98:99:06:04:d6:48:37:03:ed:64:79:9b:00:5a:1d:
0a:bc:c6:b1:3f:f8:21:61:bd:21:4a:c8:4c:d9:35:
d2:e8:53:19:99:6c:48:c8:4d:a1:3d:ba:d1:b2:c0:
6e:71:dd:21:71:fc:4a:e4:0e:bc:a9:e4:5d:2c:fa:
71:4b:ca:65:3a:6b:5b:2f:da:1a:0c:32:b6:87:0a:
a1:a5:98:4c:37:78:7c:55:12:93:18:a6:2f:11:d5:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151332
sbgp-ipAddrBlock: critical
IPv4:
103.179.36.0/23
IPv6:
2001:df0:45c0::/44
Signature Algorithm: sha256WithRSAEncryption
c4:7c:c2:fa:43:5e:7c:58:2c:86:b7:b6:cf:2f:55:74:85:39:
75:84:3e:a7:a5:3b:c9:68:b0:a1:ea:bc:79:dc:c5:80:2a:5f:
67:54:0e:f8:7e:7b:87:ea:5c:67:72:d6:86:06:cb:a1:d8:04:
be:39:92:61:21:9f:ed:64:ff:73:34:9f:08:52:65:31:73:b3:
fb:7d:af:1d:cd:42:fa:45:d0:f6:e7:31:64:fa:dc:d3:f1:73:
39:88:0d:f9:88:9a:9c:71:2a:8a:5b:30:2f:be:51:22:d5:ba:
1e:ba:42:eb:ce:0e:7d:6a:e5:8a:38:22:b9:c8:c6:7e:a7:e5:
b1:f0:10:b2:67:0c:33:d1:d4:75:8d:72:1f:bb:cb:6c:68:74:
bf:7b:58:07:d8:d4:e3:49:33:38:0c:de:c5:2e:3b:5d:1c:70:
34:ed:44:60:89:8b:96:2a:2f:cf:27:f5:9b:d1:d7:1f:6b:af:
e7:4d:8a:0f:9f:dc:8f:8a:ea:07:af:c7:ef:4d:fe:61:b5:37:
34:ec:14:f4:94:5e:26:e6:84:19:c8:6a:a1:ba:e6:bc:64:15:
65:4b:2c:1e:fd:1d:5a:50:af:f3:bf:eb:35:c9:d0:1b:9b:70:
4e:ec:23:50:02:95:5b:da:5b:4e:56:f7:ac:37:43:91:5c:7d:
3b:b6:04:83
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjL8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIyNDIxMDAzN1oXDTI2MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNF
RDY4ODdENDcyNkZERjdBMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLXDkhyq1K6va2Ccu2Q8+0BrHN6T3EJPkeAR4fQz/Tr03eyKlCOZKEg49ykDcI
pwNZT4ZLO+akHqTcCJU+BAnVNuWThPmOP0MUASDzF8bpIJKUzzNNpsMaP6l7qZE5
5owFE8QOuHPhXjd3eJ4FvY8vf0YoroZjnwSOyDJjHZwKDGJaDy7/MJprRl8jYGN9
pvDSBFY5d9BzfVwRpPd+3AOrTTNOMpiZBgTWSDcD7WR5mwBaHQq8xrE/+CFhvSFK
yEzZNdLoUxmZbEjITaE9utGywG5x3SFx/ErkDryp5F0s+nFLymU6a1sv2hoMMraH
CqGlmEw3eHxVEpMYpi8R1aJ3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQURYSuojlM
RtaTTmPtaIfUcm/fehMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVBQUY1L0U5OUY1MjNBNkVDNDExRUNBRkQyNzMzMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2ps
TVJ0YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk8kMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7MkMA8EAgAC
MAkDBwQgAQ3wRcAwDQYJKoZIhvcNAQELBQADggEBAMR8wvpDXnxYLIa3ts8vVXSF
OXWEPqelO8losKHqvHncxYAqX2dUDvh+e4fqXGdy1oYGy6HYBL45kmEhn+1k/3M0
nwhSZTFzs/t9rx3NQvpF0PbnMWT63NPxczmIDfmImpxxKopbMC++USLVuh66QuvO
Dn1q5Yo4IrnIxn6n5bHwELJnDDPR1HWNch+7y2xodL97WAfY1ONJMzgM3sUuO10c
cDTtRGCJi5YqL88n9ZvR1x9rr+dNig+f3I+K6gevx+9N/mG1NzTsFPSUXibmhBnI
aqG65rxkFWVLLB79HVpQr/O/6zXJ0BubcE7sI1AClVvaW05W96w3Q5FcfTu2BIM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:37:13 2025 by rpki-client