Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
File: aw5C2IWeCxzeVBV6y412BK0_8bM.cer (raw, json)
Hash identifier: t+PbIsXJiY6iMw3YfKKdUrZJI7L/fQFEwOEjtFqp/tI=
Subject key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022B13
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Jan 2025 14:40:32 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 4795
AS: 24052
AS: 38490
IP: 202.155.0.0/19
IP: 2001:e00::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142099 (0x22b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 23 14:40:32 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A9153457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:8d:1f:5b:a6:37:42:c1:d8:35:d3:39:4d:
f9:df:fb:e7:22:90:d3:e0:c2:26:c9:83:de:de:21:
20:2f:81:6f:c7:28:01:e0:f6:b2:77:5f:f1:41:aa:
3e:a5:6d:ce:3b:f4:a8:0b:a0:11:78:23:9a:05:06:
86:44:12:58:7b:9a:ea:b4:f9:0d:bf:df:7a:f8:09:
ac:f1:c8:9e:d6:d0:62:e4:30:13:18:cd:1d:5e:05:
a7:c5:db:21:df:69:f3:3e:44:06:81:e7:c0:13:93:
6f:4b:a4:b6:7b:29:ac:7a:c2:e4:cf:d9:a1:b7:47:
0f:45:6c:0f:f5:f7:86:08:59:5d:c7:02:df:14:6c:
c6:6a:aa:cd:dd:30:b1:5f:d9:7e:fe:6c:8e:25:c4:
38:59:15:49:e0:4d:74:d2:9d:e2:18:75:50:f7:d1:
de:2f:af:bf:45:32:22:e9:a7:f9:b7:13:ca:c0:ee:
08:cb:05:cf:2d:18:94:d5:ed:72:5f:5d:4c:65:b0:
d4:9f:96:82:0f:c3:8e:0d:56:bc:35:05:1e:0d:91:
d3:89:fe:63:16:1c:a0:3c:5b:4c:c3:2d:83:cd:c4:
12:b1:65:90:47:f6:d1:dc:75:06:e6:43:7e:28:09:
16:67:2c:28:f4:de:c1:d9:d2:ac:16:36:ab:6f:d1:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4795
24052
38490
sbgp-ipAddrBlock: critical
IPv4:
202.155.0.0/19
IPv6:
2001:e00::/31
Signature Algorithm: sha256WithRSAEncryption
84:dc:c9:7f:1c:53:61:da:4f:06:c9:c0:6f:cd:b4:7a:90:af:
c5:dd:6f:c2:17:eb:bc:e7:a2:13:b8:ad:32:3f:c2:a9:3c:97:
f1:d1:13:09:60:74:8d:ee:af:c1:76:b8:39:73:a6:a2:14:cd:
6e:48:eb:06:0b:70:a8:60:3c:9b:30:08:c3:43:a1:d3:f1:72:
6a:4b:3e:f3:7c:0d:46:98:fc:bd:06:c1:cf:bf:96:db:2d:5d:
a0:8d:02:5b:7a:bd:5c:1a:73:ed:c6:de:1e:49:d1:ed:a5:6a:
19:fd:59:ae:2e:94:62:0c:ee:0f:6b:65:e6:2c:cf:90:b6:ab:
3b:6c:51:c7:2d:f4:72:e5:e9:cc:be:e3:bd:a3:7a:f1:78:2c:
53:9a:a3:77:24:9a:17:b0:85:3f:56:e1:37:b0:c1:39:db:25:
37:eb:5e:ae:b1:5f:f0:61:e8:14:2e:b3:d6:25:63:71:56:4d:
d0:a7:c1:34:84:18:f8:7f:63:fd:3c:43:b2:15:11:2f:0a:a8:
63:8e:99:6a:a5:10:16:6f:34:3f:aa:59:88:65:22:8f:52:00:
29:dd:24:4d:e5:9e:eb:08:8d:e0:cd:28:b8:d7:0e:da:d1:a6:
19:7f:74:fe:44:a9:80:8a:d6:cd:01:89:32:68:22:c3:99:22:
3c:14:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:05:29 2025 by rpki-client