Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
File: UG14DtF5dIDxUlE0f8KEQ9culQc.cer (raw, json)
Hash identifier: Hp+YUNlLsNygmr60i5SOMwi1bImsVGxAK7aF/BknOxE=
Subject key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023862
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Mar 2025 15:40:36 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 139901
AS: 150711
IP: 103.85.236.0/22
IP: 116.204.148.0/22
IP: 2400:b340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145506 (0x23862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 19 15:40:36 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A917EB0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:c6:cb:80:95:fc:f4:4a:2c:21:fb:97:e6:
8c:0e:2a:5a:74:7b:f8:13:11:55:61:40:fa:c3:e0:
7b:0c:7c:fd:e4:d9:e3:f1:b6:eb:b1:d1:b9:d4:a8:
d8:bb:63:fb:b3:de:6b:c1:68:c1:00:b2:e1:c6:23:
d4:9b:a4:30:46:2f:a2:00:30:2d:74:ce:e4:b9:1c:
e8:c3:55:a5:3e:cd:1b:82:a9:5e:94:a7:7d:c1:35:
38:9c:45:a5:a9:89:0a:6e:6f:4c:32:f0:ee:10:b7:
47:f1:72:9d:29:c4:8b:b6:04:64:01:e5:f5:f3:b7:
70:60:59:c4:dc:91:a6:60:88:ea:01:7f:6b:b8:53:
99:d5:aa:4f:56:86:b3:9a:72:5e:86:d6:c0:ea:5e:
f1:65:10:8d:1a:5b:7d:4f:2c:08:43:db:f0:80:b7:
01:6d:41:ca:df:06:87:0e:4f:58:6a:64:4e:4e:f3:
44:94:cd:5d:fa:39:91:39:ad:5e:2c:ac:1b:16:3b:
c5:30:87:d5:b9:c3:bd:82:3c:e3:a0:7e:e7:be:91:
3f:96:08:4b:b5:fa:4c:28:8f:90:3b:f4:da:81:51:
ff:12:88:0d:5d:74:ed:a0:31:2f:2d:b7:ee:83:7e:
97:02:8e:11:2b:49:af:96:60:f2:f2:6c:93:c7:c1:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139901
150711
sbgp-ipAddrBlock: critical
IPv4:
103.85.236.0/22
116.204.148.0/22
IPv6:
2400:b340::/32
Signature Algorithm: sha256WithRSAEncryption
39:9f:30:d9:d9:01:c4:c5:25:c5:05:26:df:bd:ca:5c:d7:10:
49:a9:3f:64:69:4c:c6:f5:b8:6f:f6:3a:0d:20:f7:9e:7a:9a:
54:b2:de:38:4e:aa:96:72:3a:b5:54:fa:7e:a3:e4:ce:da:6e:
50:f4:bd:c3:20:9a:a1:41:00:ba:9e:c0:94:33:7f:ed:00:2a:
f6:24:23:34:4d:58:91:22:8b:93:63:73:07:ff:21:6b:5e:d4:
52:52:e3:d2:13:9a:f0:ce:fe:f6:a0:f4:cc:f7:fb:c8:57:7e:
1b:b2:dc:96:b9:f7:d9:81:4b:4f:e8:16:86:fd:88:a7:57:9c:
d2:f7:32:92:c2:9a:9e:98:47:e7:de:03:d6:f6:5b:11:fa:ba:
dc:88:c0:27:95:ce:d0:11:b4:8e:26:df:4b:22:64:cb:ef:dc:
ef:ff:1c:5b:fd:51:91:8a:a4:ee:08:3b:e9:fd:47:41:7a:0b:
5f:dd:75:c4:4f:ee:33:52:80:4a:7c:16:dc:56:fd:50:0a:c0:
64:e4:19:1e:26:05:3f:ba:da:0d:c6:5f:7a:fd:f7:85:c8:3c:
33:c2:a3:23:c1:67:35:c4:21:9f:72:d5:b1:2b:90:64:c5:f1:
4f:ac:db:d1:9a:40:43:e0:42:8e:6e:f3:0c:f1:f1:c5:f9:ff:
83:74:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:29 2025 by rpki-client