Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
File: aRgc9FH4s_7GT8gpi1ItSIylyeY.cer (raw, json)
Hash identifier: qnQdRb0DQ5zQseFP0v9tObZpoVIT7Lk67y6Tz4ix5Fk=
Subject key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C3A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jan 2025 17:25:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 141383
IP: 163.61.8.0/23
IP: 2001:df4:ffc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142394 (0x22c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 29 17:25:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A916DE3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:95:3b:ce:22:00:a0:57:01:07:be:3e:35:
23:b5:14:65:1c:e1:9f:f2:4b:e4:be:a8:1b:c5:63:
9a:0e:88:48:2f:31:89:5b:bf:92:7e:cf:08:96:da:
0b:60:12:e5:bc:78:e5:10:3f:da:82:ce:ee:72:7e:
af:6c:43:8b:38:5b:72:4c:36:cd:cd:44:15:8d:cf:
02:ab:e9:61:ef:ce:68:61:6b:8a:34:6f:ee:5e:17:
dc:59:b6:59:3b:6d:c0:ea:e2:95:bd:05:e1:5e:b6:
e7:aa:14:15:da:91:2b:69:d6:93:4f:d9:f3:27:43:
fc:ed:2a:c4:7e:aa:d9:cb:cd:ae:23:d5:3e:58:5c:
6d:06:9c:5e:73:96:ea:6a:97:db:0f:c8:dc:63:b8:
24:71:f9:6f:af:ad:2d:18:c5:a8:f2:af:4e:69:32:
9c:19:00:d9:5a:90:83:82:01:a0:ea:54:be:8c:1f:
5a:de:a9:60:41:4b:62:ee:08:e5:d4:26:2c:20:e6:
77:74:54:32:28:47:00:92:eb:30:2a:c6:12:dc:75:
74:47:df:77:94:d6:f6:a5:17:9a:ba:86:51:8d:cb:
ec:42:5e:f9:a9:e7:8a:1c:53:25:10:d0:01:4c:d0:
30:0b:b0:96:1c:39:17:ac:ce:8d:74:1c:61:27:e9:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141383
sbgp-ipAddrBlock: critical
IPv4:
163.61.8.0/23
IPv6:
2001:df4:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
88:47:9e:27:8c:a0:18:99:ba:71:ed:47:fb:74:1b:cf:13:93:
a5:ca:9d:ba:71:89:dd:ce:79:1e:90:d6:df:b7:23:9f:ff:e9:
f3:b9:24:84:27:82:a1:74:a8:87:f2:d5:d2:d5:8e:be:80:81:
77:2b:10:39:9f:31:1a:d8:5c:ca:df:c0:4e:7b:28:b6:ca:f2:
ee:38:40:07:ad:dd:be:86:2a:70:55:86:e9:16:51:e7:3e:63:
2b:90:9f:fd:74:eb:69:41:86:c7:10:c5:c7:29:49:5f:b1:61:
5d:4f:59:9e:b6:9e:bf:d6:dc:d3:0a:63:17:0e:f3:08:5f:cf:
f1:1f:94:62:dd:bd:5e:28:71:d4:ff:42:c0:df:c1:9b:51:60:
3e:ae:96:05:6c:d2:9e:90:b8:5e:62:84:64:41:05:75:b3:4e:
d3:86:e7:c4:e0:25:d5:44:8d:18:36:18:aa:4a:8e:df:85:e9:
f1:d2:7a:15:10:88:5b:1d:8f:15:ea:06:50:f2:32:c4:af:90:
2f:2d:ab:57:b6:8b:0a:e2:85:96:48:9c:3f:f4:a2:84:b3:67:
f9:27:e7:22:8c:69:62:9c:9a:ec:3c:ba:48:bb:d8:05:77:ed:
39:fa:ec:a0:cd:ea:9d:b8:c3:91:7b:7c:61:3f:c7:a9:97:76:
12:93:4b:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:53 2025 by rpki-client