Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
File: cS61otcGnxjunGXzsBMnGtvx9UA.cer (raw, json)
Hash identifier: 9nZQDD0qQuSo9noFzP/Khf95MfVm2EEqCsuZ+UkLiXo=
Subject key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022371
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Dec 2024 19:24:32 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 150451
IP: 103.42.228.0/23
IP: 2001:df1:97c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140145 (0x22371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 18 19:24:32 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91A8A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:8c:4d:bb:c3:0f:55:b8:bc:c6:72:a0:0a:
54:72:14:6d:bc:7b:ab:a0:6e:1d:1d:54:96:98:9f:
0f:7d:5b:7d:fc:e0:b6:a8:9d:6d:bd:d8:54:f8:44:
02:1a:97:47:e4:e6:de:3c:36:08:e4:e1:6c:fd:8b:
9c:73:4a:55:d1:a0:ce:c2:57:39:9a:26:96:50:6a:
f6:27:7d:e7:4b:df:8b:2e:f0:bf:48:61:ee:c8:93:
fe:80:3b:93:77:76:09:ff:3c:d3:a3:ea:da:c5:3d:
d1:1f:33:03:dd:fc:08:81:1d:ba:be:55:60:39:6a:
03:49:9d:5d:7a:e3:01:8d:cc:02:ef:1d:59:6a:d4:
16:ff:88:34:64:d0:11:f2:e7:32:67:61:c6:71:2e:
69:b6:1a:a7:9d:b6:e8:49:77:da:a6:41:b7:82:66:
c9:13:98:5a:c2:55:9d:4e:1d:17:87:c6:53:5e:a9:
41:bd:56:14:bd:58:0d:fa:05:a2:a9:52:99:a4:fc:
27:f7:fc:7c:02:10:31:43:b6:66:5b:a0:6a:30:77:
21:83:d5:fc:c6:26:a0:6d:7c:1d:90:9e:d7:89:e9:
89:6b:57:98:2e:64:11:31:ca:29:40:9b:e0:6a:9d:
a8:ab:b2:4b:d5:94:e7:cb:ca:6e:9e:59:e2:50:26:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150451
sbgp-ipAddrBlock: critical
IPv4:
103.42.228.0/23
IPv6:
2001:df1:97c0::/48
Signature Algorithm: sha256WithRSAEncryption
b6:91:e3:63:8a:21:95:65:66:92:3e:df:1a:c6:43:61:48:4c:
6a:03:08:75:7d:25:bf:ee:fb:2d:d1:8f:dd:4d:13:d3:de:9b:
cd:95:c8:e6:57:b8:6d:25:8d:41:b8:97:de:3e:62:01:73:9c:
3d:59:63:42:98:fa:fc:50:4c:36:e2:f2:d4:06:b7:0f:34:e3:
1e:a1:48:ed:a1:07:5f:45:c4:87:9b:86:c6:d2:fb:20:10:b9:
2d:8f:66:59:50:36:70:d1:55:34:4a:05:88:16:ec:e0:04:62:
b2:92:b1:99:3a:c6:94:61:c4:a1:e7:de:f1:22:3d:66:bc:a1:
4e:93:e4:a1:97:9d:3d:37:3f:f1:24:f6:8c:9b:4f:f1:f2:ab:
5f:3f:38:ff:ea:56:9b:86:db:c7:8e:84:2c:19:48:15:f1:c8:
03:82:f8:d3:37:f6:5e:78:e5:cb:ac:c9:e2:af:94:e9:99:07:
b3:f1:9e:0f:90:3b:8e:28:66:c3:dd:cc:a7:ca:0a:19:e8:32:
ac:b0:8c:3e:9a:de:d9:1a:1a:fd:67:7a:81:df:78:ee:14:a5:
30:cc:8a:0c:a8:3d:1e:99:22:9c:63:ba:d9:f6:a1:54:f7:fc:
8a:e1:37:9b:13:67:37:e0:09:bb:c8:83:ef:29:f0:21:fd:3c:
36:07:e8:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:08:55 2025 by rpki-client