Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer (raw, json)
Hash identifier: LrS25gqDcE+Qnb3Xwy/5Dj1Hi+xVolGhetvVh7DuO8Q=
Subject key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02379A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 15 Mar 2025 11:47:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 153696
IP: 163.223.108.0/24
IP: 2001:df5:3bc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Apr 2025 18:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145306 (0x2379a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 15 11:47:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9128F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:1b:60:31:62:ea:d4:df:a9:bf:d3:e5:6f:
12:33:a6:f5:8e:aa:ac:6e:7b:35:95:7c:9c:fe:28:
cb:5f:b1:7d:4a:42:4b:e2:9f:7a:17:70:5f:a3:68:
92:d6:cf:d2:ef:7e:0d:ff:95:26:c9:4b:48:e2:2e:
51:c7:77:01:64:da:b0:f7:d4:bc:75:25:00:c1:cf:
fb:e5:d8:1c:49:84:9a:53:8e:c3:d0:27:0c:ad:9d:
13:cf:08:76:89:1d:a1:b2:97:34:f0:3c:15:86:d9:
c3:af:6b:cb:66:7e:5a:2e:b0:ac:88:f9:bf:bf:9a:
fc:14:f2:f1:e0:0a:5e:d5:d6:0e:3c:bd:b9:7e:be:
86:e5:48:61:d2:6a:11:88:77:23:55:f3:1d:3a:7f:
e1:d5:59:64:6f:dd:b1:c7:f9:8f:b5:e7:ff:5f:28:
44:d2:12:dc:9e:30:76:ac:93:10:e7:13:9a:75:bd:
e7:5f:de:0a:75:ee:ad:ef:ae:22:8b:a1:2a:b9:13:
67:13:cb:8e:f8:bb:dd:7d:91:53:c0:6e:cb:7f:48:
53:c2:e1:54:6f:f9:cf:8d:d9:f9:93:08:99:9a:06:
bd:19:7c:89:27:f2:21:aa:f1:69:cd:1d:83:bc:fb:
50:da:41:f8:96:b1:eb:23:33:67:2c:df:24:76:86:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153696
sbgp-ipAddrBlock: critical
IPv4:
163.223.108.0/24
IPv6:
2001:df5:3bc0::/48
Signature Algorithm: sha256WithRSAEncryption
17:95:1b:02:1c:cd:f1:0c:a6:9a:1c:19:3f:74:5b:6c:d2:b2:
b2:bd:a2:5b:6f:55:a5:ab:99:2d:bb:5d:36:63:07:85:6c:37:
56:ec:86:c3:61:bf:8f:72:1b:f0:f0:d0:22:a0:ca:98:80:b7:
a9:c4:ec:81:a7:6f:b9:4d:4f:58:2f:63:40:78:ae:39:5f:7a:
80:7e:9d:f9:b5:26:ea:c8:7e:1c:78:97:4d:15:4c:07:6b:b2:
a9:f8:53:42:d0:d5:0a:45:d8:93:1c:81:4f:c4:68:41:aa:65:
49:68:a8:ae:3c:05:5c:9a:12:fa:47:e2:50:6b:74:13:f5:fd:
7e:89:e5:0f:6c:6f:5a:31:df:b3:69:52:93:6c:8b:59:66:6e:
bc:ef:f4:16:d4:4f:7c:79:7d:b2:29:10:46:33:0a:7b:1e:70:
4a:51:45:0d:d9:4f:ba:55:f3:a0:41:b3:40:50:ba:56:e8:29:
7a:4f:8c:74:bc:fc:00:7f:c5:2c:8a:34:06:66:cf:b4:8e:e6:
f3:78:f6:d0:5c:1c:aa:1a:c1:01:d8:d9:e1:53:47:8a:5e:10:
01:91:f6:ce:3f:b4:94:b3:c3:d9:05:0b:b5:83:4b:79:44:37:
ea:23:a4:a8:41:11:79:6c:c6:be:ee:d4:49:bc:54:49:10:c0:
11:3f:08:52
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjeaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMxNTExNDczMloXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjhGMUUxMTAvBgNVBAUTKEZFRUI3MkI0N0UwRkJEOUVCMjY4M0Uy
NTlGQTY0MzZCQTU2NTIzRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjsxtgMWLq1N+pv9PlbxIzpvWOqqxuezWVfJz+KMtfsX1KQkvin3oXcF+jaJLW
z9Lvfg3/lSbJS0jiLlHHdwFk2rD31Lx1JQDBz/vl2BxJhJpTjsPQJwytnRPPCHaJ
HaGylzTwPBWG2cOva8tmflousKyI+b+/mvwU8vHgCl7V1g48vbl+voblSGHSahGI
dyNV8x06f+HVWWRv3bHH+Y+15/9fKETSEtyeMHaskxDnE5p1vedf3gp17q3vriKL
oSq5E2cTy474u919kVPAbst/SFPC4VRv+c+N2fmTCJmaBr0ZfIkn8iGq8WnNHYO8
+1DaQfiWsesjM2cs3yR2hi65AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU/utytH4P
vZ6yaD4ln6ZDa6VlI9QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI4RjFFLzQ0QjgxQjIwMDE5MzExRjA4OUQ0OTI4MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyOEYxRS80NEI4MUIyMDAxOTMxMUYwODlENDkyODJDNEY5QUUwMi9fdXR5dEg0
UHZaNnlhRDRsbjZaRGE2VmxJOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlhgMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAo99sMA8EAgAC
MAkDBwAgAQ31O8AwDQYJKoZIhvcNAQELBQADggEBABeVGwIczfEMppocGT90W2zS
srK9oltvVaWrmS27XTZjB4VsN1bshsNhv49yG/Dw0CKgypiAt6nE7IGnb7lNT1gv
Y0B4rjlfeoB+nfm1JurIfhx4l00VTAdrsqn4U0LQ1QpF2JMcgU/EaEGqZUloqK48
BVyaEvpH4lBrdBP1/X6J5Q9sb1ox37NpUpNsi1lmbrzv9BbUT3x5fbIpEEYzCnse
cEpRRQ3ZT7pV86BBs0BQulboKXpPjHS8/AB/xSyKNAZmz7SO5vN49tBcHKoawQHY
2eFTR4peEAGR9s4/tJSzw9kFC7WDS3lEN+ojpKhBEXlsxr7u1Em8VEkQwBE/CFI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:35:27 2025 by rpki-client