Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
File: l1LdGhX17GHZdpHLXszr7L06YTc.cer (raw, json)
Hash identifier: 8cKEcGtTQI+aJRQeib9vxMlOutpIiTB7cHmBIGDeA9U=
Subject key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023AAB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 30 Mar 2025 12:45:57 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 56087
IP: 103.204.28.0/23
IP: 180.235.108.0/22
IP: 2406:fa00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146091 (0x23aab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 30 12:45:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9126259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:ca:64:94:a5:02:96:6f:45:c0:5a:a0:f5:
57:4e:f9:1e:0a:45:f1:b4:70:e1:9b:78:0a:99:97:
47:01:f5:1b:e2:33:5a:ee:f0:03:9d:b9:e4:3c:8f:
41:a8:e4:62:e5:10:e1:00:23:1a:b1:8d:01:0a:74:
ad:8c:cc:4d:66:5b:28:f2:e8:08:02:86:97:36:a0:
d6:27:d1:cb:db:81:c1:02:fb:85:c6:39:ee:d0:75:
04:0a:c1:3d:74:17:66:4c:f3:3e:17:5c:31:c6:d8:
8e:ba:29:17:19:9e:3a:76:9f:17:90:aa:46:6a:1f:
c3:79:2e:36:9a:e8:c2:23:69:0a:73:56:df:27:8f:
58:40:70:19:84:80:0c:ad:a2:3c:8d:10:70:e3:dc:
51:3b:50:36:4b:e4:3b:48:02:2d:25:ad:9b:13:46:
b5:bb:5f:5b:93:4e:38:33:93:b4:34:7f:96:d4:33:
6d:bc:55:f6:06:ec:a6:34:14:19:5b:15:cb:df:5c:
47:d9:b4:24:f6:46:e7:00:be:b1:e4:0c:8c:94:43:
b4:1e:28:f3:40:64:43:07:36:a9:0d:20:cd:cf:16:
b1:41:1f:26:4d:ba:3f:c0:10:f2:cc:b4:5e:39:68:
86:1f:d3:d2:d2:ac:e2:db:d5:44:83:b0:ba:dd:62:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56087
sbgp-ipAddrBlock: critical
IPv4:
103.204.28.0/23
180.235.108.0/22
IPv6:
2406:fa00::/32
Signature Algorithm: sha256WithRSAEncryption
1e:57:db:fc:5a:26:b0:04:cc:e4:33:13:6d:9a:c4:dd:d4:0c:
78:0e:7c:97:1b:6c:e8:3d:d3:25:81:f6:24:fb:ee:a9:c6:9a:
3e:b6:e6:50:42:54:62:c2:32:0a:46:2b:0a:09:d8:e0:57:8e:
35:2d:8c:2f:30:2b:fb:b7:c3:06:91:de:70:8e:d4:96:7e:65:
88:5e:ce:a1:c6:b7:f9:5f:fd:07:a4:85:cd:eb:db:57:6d:e8:
59:62:d3:47:2b:9a:00:b0:40:ad:e7:71:80:de:26:26:d6:ba:
17:1d:34:de:57:d6:aa:d0:da:6f:01:de:c1:92:5f:0f:34:85:
f5:50:02:43:65:03:43:2e:4e:73:29:c7:16:84:9d:2e:6c:30:
44:00:55:dd:2d:fc:3d:9a:f5:8f:cd:df:52:aa:45:06:9b:52:
02:4a:4e:ba:37:57:5a:4c:0b:22:05:c7:8b:80:17:96:96:99:
6f:55:50:50:c6:eb:ac:49:1c:17:33:7e:e5:a0:e6:71:63:06:
a7:87:dc:01:20:2c:4e:c3:ff:ac:53:84:86:ff:b3:cd:a8:69:
f0:b4:ac:af:f7:69:7e:53:0d:12:64:fd:c5:16:35:f0:47:98:
9b:fc:7e:2a:ba:67:6d:f6:4a:5c:86:40:72:2b:4a:08:70:86:
ed:7e:4d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:47:50 2025 by rpki-client