Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
File: Ul6ia2phflqvwFQjzOWI3hnsWEc.cer (raw, json)
Hash identifier: 3y/bH8X5/TWq3H7aO2GpJkGv8tQr+oRPP+O8u/QVAXQ=
Subject key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022033
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Dec 2024 19:45:11 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 149027
IP: 103.176.226.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139315 (0x22033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 3 19:45:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91975F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:f3:08:42:83:8d:69:9a:68:31:ba:c1:58:
56:69:f4:db:9c:44:d8:07:06:1a:99:f9:3f:76:6d:
64:43:97:c0:ac:ff:c4:c1:0f:4d:85:de:1c:36:d0:
eb:1d:21:fe:fc:af:6a:30:c4:a8:46:0d:1c:54:b2:
0d:dd:22:5c:a8:be:d2:6d:4f:8d:10:0d:dc:f0:52:
fc:88:f9:1a:e9:4e:a2:f3:80:56:9e:96:15:c6:92:
df:11:99:55:a8:4a:3f:bb:b6:80:af:6c:96:3c:6c:
b7:ff:3f:dd:a9:a7:f6:8a:9c:7a:63:c7:b9:f8:c5:
97:1f:de:3b:81:e6:3e:0f:0b:bd:5e:c3:39:1d:e5:
ed:a5:12:d6:50:67:ce:8f:90:ed:21:92:34:01:69:
19:38:69:0a:43:d4:78:00:bb:f4:b3:10:8d:6c:8e:
57:65:ff:1e:31:45:9d:72:45:a3:ea:74:3d:df:ef:
bf:5a:f1:05:cd:64:1b:36:0b:c2:d0:ad:97:87:a0:
b2:c7:0e:1c:27:bd:14:f6:70:62:fa:4e:ba:c5:8f:
fa:70:68:85:10:52:0e:0f:12:a6:a8:c0:f9:c6:99:
ca:e0:eb:db:2c:41:86:cb:50:63:21:90:1c:4f:8e:
0a:95:da:0a:1d:03:55:15:7a:e0:17:62:31:d3:a1:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149027
sbgp-ipAddrBlock: critical
IPv4:
103.176.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:64:36:ee:e0:8a:c0:33:d8:49:1b:6f:df:c1:f3:08:0e:e0:
43:65:16:3e:cb:15:9c:c7:23:77:e9:10:b9:0f:de:3f:84:19:
7b:a8:cd:74:15:fa:07:53:e1:c1:4a:4b:86:13:92:bb:9f:18:
7b:6f:32:95:02:aa:83:a1:f2:36:52:6a:f4:ae:1a:4a:08:7d:
50:70:df:ac:d1:34:a8:f9:72:24:ad:65:d2:25:75:5e:09:5e:
71:50:35:c4:56:15:90:19:a2:07:2d:1f:d7:b7:a0:66:22:4b:
c0:8a:e4:a1:33:e5:d4:c1:2f:6f:f2:1a:61:64:7b:e2:67:26:
79:da:93:7e:1a:fc:bd:be:28:0f:65:d8:ed:ba:f9:ca:c7:a1:
82:8b:b0:7c:3e:ac:97:92:b3:a8:21:ee:f0:9f:76:7a:4d:c8:
28:4a:ec:6c:4e:93:75:06:57:f5:6e:5f:98:c9:2e:df:fc:51:
c9:8d:f9:76:c0:c0:0e:35:74:0a:cb:91:94:4f:55:f1:7c:b3:
e7:ea:44:da:8b:f1:c3:12:2f:20:da:0e:da:f5:5b:c7:54:06:
ad:32:38:34:98:28:94:cc:45:1c:0b:a2:e8:bd:20:90:7a:23:
19:64:dd:e2:70:58:62:97:41:8b:98:21:4f:2e:18:6f:a3:a1:
1f:e4:31:57
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAiAzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwMzE5NDUxMVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTc1RjExMTAvBgNVBAUTKDUyNUVBMjZCNkE2MTdFNUFBRkMwNTQy
M0NDRTU4OERFMTlFQzU4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIKvMIQoONaZpoMbrBWFZp9NucRNgHBhqZ+T92bWRDl8Cs/8TBD02F3hw20Osd
If78r2owxKhGDRxUsg3dIlyovtJtT40QDdzwUvyI+RrpTqLzgFaelhXGkt8RmVWo
Sj+7toCvbJY8bLf/P92pp/aKnHpjx7n4xZcf3juB5j4PC71ewzkd5e2lEtZQZ86P
kO0hkjQBaRk4aQpD1HgAu/SzEI1sjldl/x4xRZ1yRaPqdD3f779a8QXNZBs2C8LQ
rZeHoLLHDhwnvRT2cGL6TrrFj/pwaIUQUg4PEqaowPnGmcrg69ssQYbLUGMhkBxP
jgqV2godA1UVeuAXYjHToVTnAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUUl6ia2ph
flqvwFQjzOWI3hnsWEcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk3NUYxL0NCNjYzMzBBRUUyQzExRUM5NTZCMkM0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5NzVGMS9DQjY2MzMwQUVFMkMxMUVDOTU2QjJDNEZDNEY5QUUwMi9VbDZpYTJw
aGZscXZ3RlFqek9XSTNobnNXRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkYjMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7DiMA0GCSqG
SIb3DQEBCwUAA4IBAQB+ZDbu4IrAM9hJG2/fwfMIDuBDZRY+yxWcxyN36RC5D94/
hBl7qM10FfoHU+HBSkuGE5K7nxh7bzKVAqqDofI2Umr0rhpKCH1QcN+s0TSo+XIk
rWXSJXVeCV5xUDXEVhWQGaIHLR/Xt6BmIkvAiuShM+XUwS9v8hphZHviZyZ52pN+
Gvy9vigPZdjtuvnKx6GCi7B8PqyXkrOoIe7wn3Z6TcgoSuxsTpN1Blf1bl+YyS7f
/FHJjfl2wMAONXQKy5GUT1XxfLPn6kTai/HDEi8g2g7a9VvHVAatMjg0mCiUzEUc
C6LovSCQeiMZZN3icFhil0GLmCFPLhhvo6Ef5DFX
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:05:26 2025 by rpki-client