Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
File: bODpSXEbID5KyyK2gPP_9H7RbGE.cer (raw, json)
Hash identifier: vxMDuIPKyAMvz+yLiBnYpSbj7D38wua9has2/jV+zGE=
Subject key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C9B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 22:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38532
AS: 56161
AS: 132200
AS: 132425
AS: 132526
AS: 132731
IP: 43.227.231.0/24
IP: 43.229.84.0/22
IP: 43.229.128.0/22
IP: 103.7.8.0/22
IP: 103.14.212.0/22
IP: 103.26.40.0/22
IP: 103.36.92.0/22
IP: 103.62.4.0/22
IP: 103.244.100.0/22
IP: 103.254.255.0/24
IP: 113.11.248.0/21
IP: 113.197.32.0/21
IP: 116.12.48.0/21
IP: 124.6.60.0/22
IP: 175.111.104.0/22
IP: 2400:1480::/32
IP: 2401:db80::/32
IP: 2404:8540::/32
IP: 2407:2f00::/32
IP: 2407:9a80::/32
IP: 2407:d200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 11:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146587 (0x23c9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 2 22:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91BDC3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:2c:f1:11:0d:0f:c0:85:92:ca:bc:16:aa:
ea:d1:45:26:0c:2c:f0:9f:78:c5:28:a2:aa:c3:3a:
3b:ce:8a:e8:db:fb:99:c8:c0:f2:73:2e:b7:4e:99:
b5:25:f1:4d:5f:4e:43:6e:f9:30:5a:67:81:f7:b6:
0d:2f:2d:d1:53:dd:fc:4c:a9:f2:b4:ec:e0:e8:17:
97:24:0a:29:ab:44:10:63:62:c8:6b:a7:9e:de:23:
bd:06:d7:d7:6d:01:f3:2c:ec:8b:d1:d9:26:e9:d1:
8c:23:fe:ae:66:56:d7:cc:05:15:73:47:ad:45:66:
7c:ce:79:60:d3:a3:de:b1:8c:d7:39:da:66:41:1d:
5b:e5:44:27:5c:31:b7:0c:3b:9c:c4:6f:ec:a1:dc:
78:43:e1:de:6b:1a:42:f5:6f:db:5f:c2:59:8d:94:
92:af:9c:33:5d:0b:3b:19:15:f8:cf:f2:9e:01:7e:
34:ce:e7:2d:48:e4:ef:d5:93:a5:f3:6b:40:46:10:
02:37:4f:31:64:e3:22:65:33:73:30:62:7d:ce:27:
f2:c8:c4:28:c3:2e:67:98:99:89:5a:2c:21:7f:96:
47:fc:3a:58:14:47:83:e0:5e:d0:96:14:54:4d:fa:
89:02:7f:9f:c4:79:a4:e5:8f:08:4a:1e:c6:96:5a:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38532
56161
132200
132425
132526
132731
sbgp-ipAddrBlock: critical
IPv4:
43.227.231.0/24
43.229.84.0/22
43.229.128.0/22
103.7.8.0/22
103.14.212.0/22
103.26.40.0/22
103.36.92.0/22
103.62.4.0/22
103.244.100.0/22
103.254.255.0/24
113.11.248.0/21
113.197.32.0/21
116.12.48.0/21
124.6.60.0/22
175.111.104.0/22
IPv6:
2400:1480::/32
2401:db80::/32
2404:8540::/32
2407:2f00::/32
2407:9a80::/32
2407:d200::/32
Signature Algorithm: sha256WithRSAEncryption
49:9a:ba:21:3a:fd:b2:4c:66:af:45:c5:88:f0:ba:37:a4:6b:
d7:62:07:c3:cd:89:7a:b1:6a:bc:fe:8d:8c:13:e3:1f:98:5a:
3d:c4:7b:f9:4a:88:3d:e3:c7:cb:93:41:0a:48:d1:81:61:8a:
91:fe:58:19:1d:aa:5f:1d:d1:99:db:1d:fe:47:1c:de:42:69:
b1:73:2f:53:64:a1:f0:ac:41:40:87:a7:89:ca:d6:49:e3:12:
28:73:7c:e9:b7:c1:39:d5:f2:e8:21:f7:0d:dd:a0:02:7b:51:
43:14:b8:98:1d:8e:87:21:10:2b:a0:b6:c0:74:32:1a:39:6e:
57:b1:24:5a:66:fc:17:16:19:a4:2b:22:ce:b0:c2:c5:9d:cd:
8d:a9:9d:53:d0:88:de:58:98:80:5b:2a:5d:97:5c:7f:83:d7:
f1:a8:f7:9b:df:86:d3:1d:6a:b8:72:3a:9e:31:d1:7c:4d:c7:
b5:07:78:28:11:e6:e1:51:11:05:fb:35:33:4e:f2:07:db:b4:
1a:6d:9c:f6:43:82:64:cf:f0:cd:8b:58:6c:67:fc:d8:0c:6f:
d5:ac:07:05:94:19:3b:2b:c0:05:47:ab:66:52:fb:0a:b7:2f:
19:c9:2d:63:c6:00:e2:dd:15:29:a9:5f:5b:ea:32:a6:81:45:
fd:27:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:36:00 2025 by rpki-client