Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
File: len3la_fIgULvTA6j619nI1G_Eg.cer (raw, json)
Hash identifier: GV3dt4uCuesYj47MLMrK0lW2AScN49sjiAjDiN/8bJc=
Subject key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0239D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Mar 2025 12:28:41 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 134136
IP: 103.166.94.0/24
IP: 2001:df6:8680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Apr 2025 21:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145880 (0x239d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 26 12:28:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:cc:d2:c1:04:da:72:e6:ef:ba:0d:72:72:
fa:2b:4d:b8:63:4b:36:c6:05:5a:db:68:16:de:86:
62:21:9b:a1:3d:98:78:fd:53:29:58:ad:f1:5e:6c:
21:79:2d:ad:36:d4:d2:cd:3d:78:38:7b:2d:c3:ba:
7d:e7:dd:d9:f6:2c:a9:4f:d2:a2:d5:66:bd:52:a4:
51:db:29:ce:e6:fb:4e:ea:0c:bb:23:62:7b:0b:9e:
1b:2c:8b:3c:0b:ee:38:05:4e:90:01:9f:2a:c7:32:
4c:49:2b:04:f7:b0:ef:4f:ba:84:1e:4e:c5:f1:e4:
94:be:f9:20:4f:2d:64:9f:ce:c4:3f:c3:88:a9:58:
a6:72:b8:87:6b:85:d5:79:35:fe:d0:1f:3d:1e:34:
c1:48:61:82:11:dd:ba:f4:74:2d:db:d2:3d:f4:8f:
3c:28:26:c4:92:cf:e0:3f:b8:7d:14:03:dd:69:db:
ed:27:bd:e2:75:b8:52:2d:0e:23:67:eb:20:30:7f:
46:12:1b:89:ce:dd:14:c7:bf:f9:33:59:6e:2a:c7:
f2:2f:b0:78:ac:5a:b4:b7:94:5f:3e:3a:29:7a:b2:
35:65:2f:84:27:91:82:c3:92:62:cd:ff:94:04:8c:
ea:dd:79:00:1c:4d:aa:03:90:5f:54:8d:c8:96:3b:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134136
sbgp-ipAddrBlock: critical
IPv4:
103.166.94.0/24
IPv6:
2001:df6:8680::/48
Signature Algorithm: sha256WithRSAEncryption
19:27:70:00:06:f5:f1:d7:b6:86:f8:f4:74:ae:51:20:cf:46:
7f:e5:b9:94:08:61:8c:90:19:30:c0:0a:91:81:da:70:9e:78:
ef:d8:85:ae:85:ca:bf:74:7e:2a:a4:da:b8:aa:d3:c7:24:8b:
1b:9d:72:a8:51:33:56:e8:c0:31:24:fa:bb:1a:5e:b0:7c:f7:
83:2c:07:a8:49:c9:bf:48:16:00:f4:42:98:e1:b3:7c:b2:2e:
92:81:ae:6a:09:84:fb:3a:bf:34:d6:9e:e2:1c:31:ec:5f:44:
89:99:53:ae:8f:ba:25:68:9d:03:b5:7e:94:a4:11:5b:54:d8:
e1:9a:cc:a3:26:69:39:2c:ce:93:aa:67:04:6c:45:71:94:f8:
b8:dc:9e:87:41:09:9e:d4:7f:c9:b6:ab:12:37:ff:9f:db:ab:
6e:45:4a:03:fb:2b:17:ce:5e:66:c7:9e:0a:e5:2c:73:7e:e2:
8b:93:ba:7a:bd:82:12:f2:0f:bd:a4:44:65:cf:e0:e4:18:00:
6f:3e:89:8f:49:b1:43:f4:8b:c8:c4:11:d3:12:34:c8:00:f2:
84:58:83:b2:38:a0:87:bf:65:e6:a7:8c:12:55:91:a3:9f:a0:
59:5a:b9:6a:9b:4e:f8:90:c7:7d:2e:29:59:2a:5e:9f:31:77:
4b:33:16:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:31:43 2025 by rpki-client