Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
File: kEojXLR0fghgD8HSa5P1HEZ066o.cer (raw, json)
Hash identifier: A71E9x/eVLKeDEoUY02+w7BiZ3ZOEerFHRRAJJgbWqs=
Subject key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E9E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Nov 2024 16:31:01 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 135409
IP: 14.137.32.0/19
IP: 103.70.64.0/22
IP: 103.103.60.0/22
IP: 182.54.144.0/22
IP: 182.255.28.0/22
IP: 202.5.112.0/20
IP: 203.2.130.0/23
IP: 203.8.206.0/23
IP: 203.21.140.0/22
IP: 203.24.104.0/22
IP: 203.27.96.0/23
IP: 2001:df2:2600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138910 (0x21e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 29 16:31:01 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A917F247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:86:cd:8a:3a:09:94:f3:68:0d:15:4c:3d:
39:56:af:ef:dd:bd:52:3c:46:dd:9c:98:eb:24:ee:
0f:ef:e0:2d:55:0b:df:2b:fe:57:af:0f:13:e0:92:
4f:40:a9:b3:91:87:9a:ee:b1:2b:df:cb:08:f2:9b:
67:79:69:56:f7:ac:04:57:2e:67:f6:c3:19:50:c3:
96:b1:70:12:a2:ab:4d:33:96:f5:18:65:93:1d:b1:
86:be:80:be:cc:42:b7:a2:b7:0c:85:12:12:d0:2f:
2a:f2:20:91:ba:e4:e9:d7:a2:28:ed:8d:51:1f:ee:
50:f2:42:44:10:06:28:b8:d2:df:33:38:a2:09:75:
de:06:64:2c:9e:45:7b:22:6b:5f:00:db:68:a7:56:
4b:18:e1:20:40:7c:2b:09:6d:68:e0:c3:af:97:d3:
cc:2b:65:0a:b0:bc:17:75:aa:80:1d:9f:9a:c4:89:
72:f3:37:00:2f:05:99:24:52:f2:63:9c:fe:45:bb:
f0:71:c8:3a:52:af:78:68:e9:dd:3b:65:3b:c0:a5:
e8:53:ea:ad:d2:97:5d:3c:6e:86:b6:9f:f5:9a:97:
15:3c:f6:35:e5:17:83:db:18:75:b8:02:87:bb:89:
27:7e:87:e4:3c:a1:a9:d5:b4:12:a9:0d:d0:84:7a:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135409
sbgp-ipAddrBlock: critical
IPv4:
14.137.32.0/19
103.70.64.0/22
103.103.60.0/22
182.54.144.0/22
182.255.28.0/22
202.5.112.0/20
203.2.130.0/23
203.8.206.0/23
203.21.140.0/22
203.24.104.0/22
203.27.96.0/23
IPv6:
2001:df2:2600::/48
Signature Algorithm: sha256WithRSAEncryption
5a:96:28:6a:f8:5e:27:ba:34:9f:4e:32:76:f7:c9:27:dc:71:
1e:b5:55:3c:c1:6e:c5:c3:ad:d2:32:d7:18:83:bd:05:f9:b0:
78:67:bb:3d:04:ee:e8:54:5f:93:c0:70:f5:6a:17:92:fa:4f:
b0:50:3f:e7:d7:7e:66:42:0b:34:d6:ff:25:92:df:b2:71:a3:
c1:d8:0b:c2:3d:6a:33:cf:d0:90:01:b9:5f:98:a6:c5:75:28:
e7:67:c6:98:5a:71:e1:43:e1:f3:a4:f8:7f:9a:3b:be:9c:39:
ad:e9:96:b4:66:5a:54:83:76:b2:15:74:a5:ac:ad:57:97:1d:
c9:ca:07:da:28:4c:ae:59:1e:7b:48:96:54:28:e4:30:4b:4a:
27:bc:b6:10:d7:87:d2:85:91:92:06:f6:90:83:c3:1e:dd:16:
91:c5:dd:c8:a7:21:01:1b:4f:e5:aa:11:c1:bb:9d:40:38:5e:
96:ca:1f:1e:d8:90:d4:70:a8:76:8b:ed:62:26:75:5e:5c:4f:
9d:2d:af:31:67:d6:7f:47:ce:5f:95:d5:3d:6e:57:6b:c8:ea:
1d:fb:93:23:0a:25:1f:07:a3:b6:c8:7c:6d:12:20:fa:bb:d0:
30:cc:08:2a:d4:aa:11:56:fd:b9:31:d4:01:17:f7:da:4f:57:
53:0b:98:d8
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIDAh6eMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyOTE2MzEwMVoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxN0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFE
MjZCOTNGNTFDNDY3NEVCQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVWYbNijoJlPNoDRVMPTlWr+/dvVI8Rt2cmOsk7g/v4C1VC98r/levDxPgkk9A
qbORh5rusSvfywjym2d5aVb3rARXLmf2wxlQw5axcBKiq00zlvUYZZMdsYa+gL7M
QreitwyFEhLQLyryIJG65OnXoijtjVEf7lDyQkQQBii40t8zOKIJdd4GZCyeRXsi
a18A22inVksY4SBAfCsJbWjgw6+X08wrZQqwvBd1qoAdn5rEiXLzNwAvBZkkUvJj
nP5Fu/BxyDpSr3ho6d07ZTvApehT6q3Sl108boa2n/WalxU89jXlF4PbGHW4Aoe7
iSd+h+Q8oanVtBKpDdCEei+BAgMBAAGjggNcMIIDWDAdBgNVHQ4EFgQUkEojXLR0
fghgD8HSa5P1HEZ066owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdGMjQ3LzZEMjJFQUYwOEYwMzExRUNBNUM5RkUxMkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExS
MGZnaGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhDxMGwGCCsGAQUFBwEHAQH/BF0wWzBIBAIAATBCAwQFDokgAwQCZ0ZA
AwQCZ2c8AwQCtjaQAwQCtv8cAwQEygVwAwQBywKCAwQBywjOAwQCyxWMAwQCyxho
AwQByxtgMA8EAgACMAkDBwAgAQ3yJgAwDQYJKoZIhvcNAQELBQADggEBAFqWKGr4
Xie6NJ9OMnb3ySfccR61VTzBbsXDrdIy1xiDvQX5sHhnuz0E7uhUX5PAcPVqF5L6
T7BQP+fXfmZCCzTW/yWS37Jxo8HYC8I9ajPP0JABuV+YpsV1KOdnxphaceFD4fOk
+H+aO76cOa3plrRmWlSDdrIVdKWsrVeXHcnKB9ooTK5ZHntIllQo5DBLSie8thDX
h9KFkZIG9pCDwx7dFpHF3cinIQEbT+WqEcG7nUA4XpbKHx7YkNRwqHaL7WImdV5c
T50trzFn1n9Hzl+V1T1uV2vI6h37kyMKJR8Ho7bIfG0SIPq70DDMCCrUqhFW/bkx
1AEX99pPV1MLmNg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:38 2025 by rpki-client