Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
File: gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer (raw, json)
Hash identifier: WpVwHH5zZ8yIkR5XC0jLIy/+Sc9glCfvZZ/vOmU34n4=
Subject key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02313B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Feb 2025 06:37:13 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 137910
IP: 163.61.136.0/23
IP: 2401:efa0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143675 (0x2313b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 14 06:37:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9134A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:e0:7a:33:0c:89:54:ba:51:f0:3c:a7:b3:
92:59:fa:de:4f:b3:d4:da:da:67:4b:2b:25:3f:1c:
ba:c2:ed:11:c1:8a:76:52:87:ff:c3:84:08:27:90:
63:ed:a1:b1:54:c9:a8:f0:89:82:ca:13:56:56:00:
12:9d:5e:01:7c:f3:4c:b6:4d:b6:b0:da:c7:69:ad:
c9:76:60:6e:59:d8:03:e8:2d:5a:f7:fa:5e:aa:f7:
93:5d:cf:ed:d0:fe:3d:f4:97:73:c2:e4:43:17:d4:
8a:d8:11:d3:d8:43:f0:16:87:73:7e:3d:3c:d8:6a:
46:0b:07:3f:93:69:d1:48:3f:66:cb:45:1a:33:11:
be:b9:f4:d1:fd:4c:6c:0a:ae:f0:b9:9a:1b:24:fc:
b5:04:3c:74:4e:7c:0a:54:a2:3a:bc:21:89:7a:68:
4d:db:d3:1b:1f:e6:5e:3e:da:f1:ae:5e:9f:13:6e:
3d:99:99:87:82:f4:d7:26:99:6e:17:05:f7:0e:70:
d5:2d:1d:8d:d1:20:29:f7:10:ee:f3:f1:0f:87:1a:
fe:32:51:a1:90:9f:a5:b3:3e:48:0c:e5:ff:21:66:
0c:19:1f:c8:15:87:5a:06:98:11:d9:d4:2a:80:a9:
70:39:59:ed:8a:93:ec:6f:ea:26:6e:88:d9:c2:1b:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137910
sbgp-ipAddrBlock: critical
IPv4:
163.61.136.0/23
IPv6:
2401:efa0::/32
Signature Algorithm: sha256WithRSAEncryption
62:18:fe:96:2d:41:00:5e:54:84:74:50:e6:60:6d:30:f8:fc:
73:dd:ae:8f:a9:7f:38:51:12:51:9c:b4:2d:9d:e9:f2:43:07:
2d:7a:bd:77:5b:f2:70:c0:7d:bd:e4:1f:f0:58:fe:f4:ce:0b:
4b:9c:4f:a0:c7:63:f0:b2:89:bd:93:b1:6c:f9:8d:76:ac:eb:
c3:2a:40:91:21:cc:b0:25:bb:ec:6f:ec:48:0e:4a:8f:bc:05:
3d:d2:5a:5f:70:42:87:5e:61:4a:78:5b:d0:26:30:50:64:b5:
8c:6c:b7:7f:7a:0b:36:22:ab:06:24:51:59:31:23:4b:0d:7e:
5d:ba:d2:92:91:98:f6:e9:2e:96:fa:23:6d:46:29:21:93:86:
e4:74:f8:ec:21:61:65:12:8f:b3:fb:fa:09:f4:e0:68:67:2a:
fb:be:85:66:9f:b9:ad:54:eb:2b:77:c9:42:94:09:be:4d:2f:
61:d9:a2:3f:45:7d:69:9f:99:46:a2:4a:8b:ac:6f:87:ae:d7:
f1:a2:e4:4c:e7:59:4f:8c:91:aa:7f:e3:24:de:71:e9:eb:5d:
62:10:8f:a3:60:08:88:dc:cb:4a:f6:bc:1d:6f:2e:f4:3f:8e:
fb:73:e9:68:58:89:12:8b:55:94:12:a6:20:fa:22:cc:aa:74:
dc:b1:2d:1b
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAjE7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIxNDA2MzcxM1oXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzRBNDIxMTAvBgNVBAUTKDgwQjE4QjgxRDQ3QjYxNzcxMzA0RTBG
NzYxMEQxMUE3QzM0MDYxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkXuB6MwyJVLpR8Dyns5JZ+t5Ps9Ta2mdLKyU/HLrC7RHBinZSh//DhAgnkGPt
obFUyajwiYLKE1ZWABKdXgF880y2Tbaw2sdprcl2YG5Z2APoLVr3+l6q95Ndz+3Q
/j30l3PC5EMX1IrYEdPYQ/AWh3N+PTzYakYLBz+TadFIP2bLRRozEb659NH9TGwK
rvC5mhsk/LUEPHROfApUojq8IYl6aE3b0xsf5l4+2vGuXp8Tbj2ZmYeC9NcmmW4X
BfcOcNUtHY3RICn3EO7z8Q+HGv4yUaGQn6WzPkgM5f8hZgwZH8gVh1oGmBHZ1CqA
qXA5We2Kk+xv6iZuiNnCG4JXAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUgLGLgdR7
YXcTBOD3YQ0Rp8NAYSMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM0QTQyLzFGQjBGNjc2RUE4QzExRUY4OEM5MDg1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNEE0Mi8xRkIwRjY3NkVBOEMxMUVGODhDOTA4NUFDNEY5QUUwMi9nTEdMZ2RS
N1lYY1RCT0QzWVEwUnA4TkFZU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhq2MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBoz2IMA0EAgAC
MAcDBQAkAe+gMA0GCSqGSIb3DQEBCwUAA4IBAQBiGP6WLUEAXlSEdFDmYG0w+Pxz
3a6PqX84URJRnLQtnenyQwcter13W/JwwH295B/wWP70zgtLnE+gx2Pwsom9k7Fs
+Y12rOvDKkCRIcywJbvsb+xIDkqPvAU90lpfcEKHXmFKeFvQJjBQZLWMbLd/egs2
IqsGJFFZMSNLDX5dutKSkZj26S6W+iNtRikhk4bkdPjsIWFlEo+z+/oJ9OBoZyr7
voVmn7mtVOsrd8lClAm+TS9h2aI/RX1pn5lGokqLrG+HrtfxouRM51lPjJGqf+Mk
3nHp611iEI+jYAiI3MtK9rwdby70P477c+loWIkSi1WUEqYg+iLMqnTcsS0b
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:36 2025 by rpki-client