Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
File: XAo1I_02RadjWvJRmtzQAuEy-84.cer (raw, json)
Hash identifier: 9QW5jnnRnZAvaby9KtkWZcTQqQsUHFiiIsBD5sRiXGI=
Subject key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0231BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Feb 2025 22:46:31 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 139077
IP: 103.139.104.0/23
IP: 202.4.28.0/23
IP: 2001:df0:7380::/48
IP: 2401:c4a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143805 (0x231bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 17 22:46:31 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91B0F90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:4d:73:b0:76:89:c0:29:c8:d6:a3:23:41:
2e:3a:ef:53:3b:e8:04:4d:71:fd:62:12:1f:1f:86:
20:3b:03:59:b0:0b:68:74:d5:b8:e3:d0:ad:26:e4:
2b:0b:85:6a:9f:b8:84:aa:1a:82:49:12:37:62:e0:
ac:b1:21:bc:6f:f2:76:85:7e:0d:f2:df:a4:83:c8:
e6:7b:05:54:86:1b:9c:5e:f1:45:71:b6:4b:5e:93:
36:8b:a6:6d:49:85:56:d8:b7:61:11:46:1e:50:5a:
c9:34:50:3b:fa:ef:2a:c5:45:cf:37:84:f6:e5:65:
35:74:56:13:dc:b6:29:18:b8:e3:61:d0:25:c9:64:
db:4c:cf:9a:05:be:e3:d7:92:d5:e2:cd:69:9e:b3:
51:78:b7:50:8a:41:26:16:6e:50:4f:21:02:90:78:
fe:5e:be:f1:80:bc:87:62:15:b5:00:f6:e1:92:ae:
ff:79:55:4d:66:c7:73:a0:fc:4f:ec:71:25:bd:3b:
d8:f8:10:22:ea:20:70:26:f4:c0:d2:8b:25:e4:7d:
48:11:97:2f:de:fb:e4:6b:75:3f:e3:c9:29:4f:cf:
02:84:28:6e:62:69:df:2e:cc:e7:cc:39:81:b0:8d:
26:c1:99:e1:8b:aa:fe:fa:77:de:21:55:65:ff:ed:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139077
sbgp-ipAddrBlock: critical
IPv4:
103.139.104.0/23
202.4.28.0/23
IPv6:
2001:df0:7380::/48
2401:c4a0::/32
Signature Algorithm: sha256WithRSAEncryption
37:19:9c:59:67:dd:ec:cc:e0:b0:bf:95:92:3d:11:4b:e8:03:
69:f5:8b:db:39:64:7d:98:49:54:6e:26:e1:60:64:3b:e1:5e:
00:49:33:a0:20:05:1b:a7:ea:f7:85:82:79:ad:32:55:31:cc:
d2:94:80:aa:46:44:74:ff:9c:d7:d2:5f:b3:37:c5:f6:cb:a8:
f1:87:76:19:2d:87:e7:30:07:86:89:3e:c8:0d:5f:bf:8e:ea:
6d:2e:30:3e:57:21:80:95:10:ce:ee:e2:22:fb:fc:fa:0e:a4:
96:54:6d:89:d9:0e:ef:49:7b:08:e9:67:8a:70:5d:84:fb:bf:
fd:e4:5e:cb:79:e8:1e:ef:65:49:46:58:c3:48:46:bb:fb:62:
ec:36:9c:ef:9f:8f:4b:ea:a8:b0:1d:1d:ee:9a:1f:c0:b1:30:
7a:98:07:4d:df:54:66:4d:2d:08:ff:de:3d:38:ac:f8:7c:46:
39:77:78:8f:d2:33:84:46:9d:fa:f8:4b:fd:92:f5:35:56:66:
48:cc:85:21:1c:02:ee:8b:c6:78:31:8f:38:a5:1a:5d:1a:a0:
34:17:ef:4e:bf:84:bf:d9:1f:01:a7:ab:6a:d7:ad:39:3b:f3:
b4:b7:da:d4:8e:7b:e5:8a:72:06:f4:21:08:1a:74:f8:d4:da:
06:ec:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:35 2025 by rpki-client