Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
File: nFh2OitDfLKSxGQXuNSO32tXAc8.cer (raw, json)
Hash identifier: CCiiKVtLQnNNWCGO7e9LWK7XmHEWf4slZsOIEdPOuic=
Subject key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022712
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Jan 2025 13:19:32 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 139811
IP: 103.145.144.0/23
IP: 2405:88c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141074 (0x22712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 3 13:19:32 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9130683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:24:07:f9:05:3a:63:bd:b4:1c:5f:af:5f:
15:d5:6f:32:87:35:ed:7a:13:5c:e1:ad:cd:00:ff:
1e:3f:56:d2:af:20:d1:5e:17:95:49:1c:9c:17:a4:
20:98:db:3f:06:52:bb:e2:8f:e2:32:9c:fe:c2:ce:
02:24:c2:72:60:62:26:60:97:2e:c6:7d:b6:57:2f:
53:b8:56:1e:aa:59:b3:1e:30:cb:ab:82:11:9a:7a:
54:1d:ba:d6:f9:87:d1:91:33:14:64:b3:31:74:4e:
7f:10:ac:ba:a8:11:f3:af:93:d2:76:e9:76:3a:a2:
ba:37:d0:16:c7:8c:da:3c:0a:d3:b2:6f:67:2d:e8:
e8:91:5e:bb:07:9f:d2:c6:30:84:7c:55:cb:11:ca:
f2:b0:00:f4:ae:99:3a:e0:72:dd:81:29:85:eb:5e:
f8:12:f1:0e:1c:2d:f5:f0:91:52:07:36:64:36:e1:
51:d0:95:56:d0:80:71:df:7b:5d:8b:0a:7e:a4:ca:
34:35:ab:ab:5d:db:bb:6f:76:44:86:38:75:63:d1:
9d:e7:26:91:70:f0:5e:c9:cf:0a:4d:8c:eb:f2:f3:
ce:b2:3b:56:16:cd:95:ca:74:e3:d8:db:72:2f:5a:
36:54:e7:82:b9:b9:49:10:f5:15:4e:d8:a7:ff:77:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139811
sbgp-ipAddrBlock: critical
IPv4:
103.145.144.0/23
IPv6:
2405:88c0::/32
Signature Algorithm: sha256WithRSAEncryption
53:d4:e6:72:6f:29:ef:7b:33:d9:f9:ff:ff:7a:22:5b:3b:6e:
7f:48:e8:f4:9d:4e:c4:34:58:d5:96:53:e9:55:b6:2a:a4:97:
3e:c5:5f:74:82:78:dd:e6:10:66:ac:74:e3:3e:6b:63:82:ce:
c3:85:1f:15:e5:51:7a:07:a8:5e:cd:06:25:2b:6b:2b:34:5d:
bf:e2:ad:c6:72:0f:c6:1d:2f:66:c2:b0:0b:d9:93:f3:d7:0c:
fe:ab:b6:86:53:41:1e:b4:d9:b2:24:6c:3d:e8:7b:6c:49:a2:
07:c3:4b:b6:7e:ad:e6:ca:ae:b9:c5:3e:da:f9:68:1d:1a:b1:
5d:21:fd:78:09:24:b5:64:14:99:d5:4e:f5:cb:cd:d8:db:e0:
3a:dc:6c:5b:bc:b5:36:61:03:64:b9:15:c7:84:9b:e0:19:1e:
ce:20:b2:82:f4:c0:df:b1:1d:d4:19:78:5a:e1:28:3c:c2:06:
a6:2d:e7:b8:6c:74:b9:20:9b:38:ec:2d:2e:76:18:c8:3b:b4:
6d:57:83:12:d0:34:c3:20:8e:a8:e5:39:fa:f0:3b:a8:39:20:
84:de:e6:69:db:80:42:6d:ca:ba:9a:fa:02:c5:a0:b8:fd:83:
95:16:0d:25:fd:47:49:6f:fe:c4:87:5f:d2:2f:e4:4a:05:40:
17:c7:3d:db
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAicSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDEwMzEzMTkzMloXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzA2ODMxMTAvBgNVBAUTKDlDNTg3NjNBMkI0MzdDQjI5MkM0NjQx
N0I4RDQ4RURGNkI1NzAxQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK/CQH+QU6Y720HF+vXxXVbzKHNe16E1zhrc0A/x4/VtKvINFeF5VJHJwXpCCY
2z8GUrvij+IynP7CzgIkwnJgYiZgly7GfbZXL1O4Vh6qWbMeMMurghGaelQdutb5
h9GRMxRkszF0Tn8QrLqoEfOvk9J26XY6oro30BbHjNo8CtOyb2ct6OiRXrsHn9LG
MIR8VcsRyvKwAPSumTrgct2BKYXrXvgS8Q4cLfXwkVIHNmQ24VHQlVbQgHHfe12L
Cn6kyjQ1q6td27tvdkSGOHVj0Z3nJpFw8F7JzwpNjOvy886yO1YWzZXKdOPY23Iv
WjZU54K5uUkQ9RVO2Kf/d+07AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUnFh2OitD
fLKSxGQXuNSO32tXAc8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMwNjgzLzUzRDc1NEZFMkE0MjExRUI5QzQ2Q0Q0Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMDY4My81M0Q3NTRGRTJBNDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0
RGZMS1N4R1FYdU5TTzMydFhBYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiIjMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5GQMA0EAgAC
MAcDBQAkBYjAMA0GCSqGSIb3DQEBCwUAA4IBAQBT1OZybynvezPZ+f//eiJbO25/
SOj0nU7ENFjVllPpVbYqpJc+xV90gnjd5hBmrHTjPmtjgs7DhR8V5VF6B6hezQYl
K2srNF2/4q3Gcg/GHS9mwrAL2ZPz1wz+q7aGU0EetNmyJGw96HtsSaIHw0u2fq3m
yq65xT7a+WgdGrFdIf14CSS1ZBSZ1U71y83Y2+A63GxbvLU2YQNkuRXHhJvgGR7O
ILKC9MDfsR3UGXha4Sg8wgamLee4bHS5IJs47C0udhjIO7RtV4MS0DTDII6o5Tn6
8DuoOSCE3uZp24BCbcq6mvoCxaC4/YOVFg0l/UdJb/7Eh1/SL+RKBUAXxz3b
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:11 2025 by rpki-client