Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer (raw, json)
Hash identifier: 5xTWalI5fQuJZHkg85eTm4znX8E+Lnjg6Gp6D9v4aYk=
Subject key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C4D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 14:00:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 142006
IP: 103.164.86.0/23
IP: 2001:df6:4280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146509 (0x23c4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 2 14:00:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91211D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:a5:83:f8:c0:f1:36:93:19:61:e9:0f:7e:
b2:4c:ce:e9:43:47:c7:53:36:b0:8d:7d:c8:64:df:
9d:f7:b4:fe:95:17:54:7f:54:1d:3d:9a:26:f1:c7:
27:63:c5:f5:ef:c0:ee:66:23:44:a5:9f:93:f0:5e:
62:b9:47:12:b7:72:3d:39:ef:1a:a1:d4:c2:ba:3a:
71:90:f1:7f:34:b3:bb:b8:39:13:1c:41:a2:ae:d7:
e8:b6:dd:d5:24:af:77:f7:1c:58:82:e8:86:d5:a6:
ab:2f:1f:b7:14:d2:52:2e:ce:d7:3f:f0:18:1f:bf:
a6:3d:e0:7b:6e:b8:f1:44:c6:b6:d8:1f:c4:b8:44:
2a:15:e8:a6:73:d0:f2:4a:df:47:d1:58:9c:4f:67:
73:97:23:e3:9d:bc:bf:e9:3d:d8:6d:bf:c5:31:e1:
1a:b7:02:2b:b9:a6:ed:b5:87:b0:ab:dd:61:0a:7f:
83:79:73:73:9f:fc:f9:e9:a8:14:d7:83:70:3c:d8:
ab:d7:f6:52:12:d8:8b:a2:33:c8:44:a2:be:dd:c5:
fa:f1:a6:32:76:e6:75:04:ac:38:f9:61:35:b9:ca:
fa:3d:75:1e:8c:07:52:d2:e1:27:6a:75:d8:5b:2b:
3c:a4:0e:d3:5b:da:6c:09:46:76:33:60:c3:f9:e2:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142006
sbgp-ipAddrBlock: critical
IPv4:
103.164.86.0/23
IPv6:
2001:df6:4280::/48
Signature Algorithm: sha256WithRSAEncryption
19:d3:66:8b:66:47:31:1e:31:2f:b9:7f:3e:0b:60:0a:c6:3f:
cf:7d:bd:77:ea:23:47:b5:6b:2c:29:4c:cd:df:5f:2f:ce:aa:
a9:e2:d1:62:62:61:18:0d:53:c1:39:33:29:9e:48:6e:bc:05:
15:a9:f8:f8:a0:fb:fb:49:58:c3:37:36:45:5b:1c:2e:15:28:
0c:8b:68:cd:da:c4:51:d6:59:18:06:da:7c:74:e7:54:fd:9e:
92:b9:17:cf:dd:7f:d4:b8:ee:48:19:d2:28:b4:3a:fd:cf:13:
3a:07:7a:30:c5:10:f3:72:f3:74:98:b2:25:05:2b:76:d8:61:
55:b9:23:6b:35:cc:ea:3f:e1:51:62:2b:6e:ae:61:41:f5:75:
e3:c4:5f:d8:00:05:4f:76:bf:8d:62:9c:e5:a9:7d:ca:12:3f:
8b:ab:35:d3:eb:5b:b0:8e:91:cd:aa:db:7b:c7:28:f9:34:09:
51:bc:fa:36:81:44:d2:1b:50:18:9e:7e:d3:17:55:a2:55:ea:
1c:5a:f8:ee:ae:49:ac:a5:ae:b8:a6:92:9d:91:68:15:c8:df:
ed:3d:05:da:e1:7f:f1:72:46:52:0c:1c:83:0e:2f:ca:21:ba:
3d:e8:36:b1:66:48:df:37:95:90:f5:a4:9c:28:5d:a8:49:3f:
53:2d:4b:27
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjxNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQwMjE0MDAxMloXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcy
NzAxOEFGQjQyQTI2RTMxRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIZ6WD+MDxNpMZYekPfrJMzulDR8dTNrCNfchk3533tP6VF1R/VB09mibxxydj
xfXvwO5mI0Sln5PwXmK5RxK3cj057xqh1MK6OnGQ8X80s7u4ORMcQaKu1+i23dUk
r3f3HFiC6IbVpqsvH7cU0lIuztc/8Bgfv6Y94HtuuPFExrbYH8S4RCoV6KZz0PJK
30fRWJxPZ3OXI+OdvL/pPdhtv8Ux4Rq3Aiu5pu21h7Cr3WEKf4N5c3Of/PnpqBTX
g3A82KvX9lIS2IuiM8hEor7dxfrxpjJ25nUErDj5YTW5yvo9dR6MB1LS4Sdqddhb
KzykDtNb2mwJRnYzYMP54hw5AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUlo0qqmFo
y0lpRKcnAYr7QqJuMeEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTIxMUQ0L0E5RjQ5NjUyODZDRDExRUJBNEFGRjYwOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyMTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1G
b3kwbHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiq2MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6RWMA8EAgAC
MAkDBwAgAQ32QoAwDQYJKoZIhvcNAQELBQADggEBABnTZotmRzEeMS+5fz4LYArG
P899vXfqI0e1aywpTM3fXy/Oqqni0WJiYRgNU8E5MymeSG68BRWp+Pig+/tJWMM3
NkVbHC4VKAyLaM3axFHWWRgG2nx051T9npK5F8/df9S47kgZ0ii0Ov3PEzoHejDF
EPNy83SYsiUFK3bYYVW5I2s1zOo/4VFiK26uYUH1dePEX9gABU92v41inOWpfcoS
P4urNdPrW7COkc2q23vHKPk0CVG8+jaBRNIbUBieftMXVaJV6hxa+O6uSaylrrim
kp2RaBXI3+09Bdrhf/FyRlIMHIMOL8ohuj3oNrFmSN83lZD1pJwoXahJP1MtSyc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:10 2025 by rpki-client