Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
File: oiK21tBSghQiHUrOpH4axhHvQno.cer (raw, json)
Hash identifier: D7fIOhARn1c1iLoq4nz6dR3Z79OCb5HTdsDtkzKptqI=
Subject key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023393
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Feb 2025 12:41:40 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 133762
IP: 103.108.180.0/22
IP: 2402:6e40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Apr 2025 21:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144275 (0x23393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 12:41:40 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7f:a7:da:22:14:50:cc:d6:7b:b4:a9:97:99:
c3:f4:0f:2b:8a:81:61:bb:5c:54:2d:49:d8:87:16:
d6:88:84:98:df:a4:ad:ef:ee:a7:af:40:3c:94:ea:
c7:cc:9c:28:32:a7:4a:d8:55:36:13:d3:5f:3f:3b:
6a:f7:d1:90:3f:fc:14:e7:45:30:13:61:8b:e7:e1:
26:40:bf:c4:58:58:63:4b:3c:37:a7:58:02:1c:e4:
9c:da:72:4c:41:87:84:13:f9:23:26:93:ca:c6:6a:
55:9e:e7:d5:60:a6:23:e8:16:a7:53:e2:cc:3d:c4:
0e:25:a5:ac:ad:d7:31:e6:55:e8:b4:29:34:76:69:
a3:f8:22:ed:d5:92:3d:73:02:4b:d5:e7:09:e1:1d:
59:94:c3:a4:ad:f4:b3:e1:fe:80:83:f7:6b:d1:a2:
4e:00:12:5d:4f:1f:f2:16:1a:70:f3:96:c3:8e:c9:
64:b0:f1:1f:0a:73:5d:1a:71:fd:50:b8:e0:4e:5a:
cf:dd:5c:e7:f5:d2:21:74:0c:34:46:24:23:4a:b5:
08:e2:8e:38:f2:cb:ab:0c:9c:8d:09:37:ad:20:78:
f6:06:f5:5e:b9:45:b2:21:7f:a2:ba:1d:d3:c4:4c:
75:78:b6:0c:cd:a9:59:a2:1a:ad:71:18:56:5d:df:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133762
sbgp-ipAddrBlock: critical
IPv4:
103.108.180.0/22
IPv6:
2402:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
92:80:44:fc:4c:f1:db:6a:17:af:db:c5:fb:e9:5c:f0:f6:66:
a4:ac:e7:dd:02:b8:7e:5a:da:f7:18:f0:8d:14:39:30:fa:22:
57:fd:67:fd:31:2c:5d:ec:15:39:ac:71:e5:b4:a6:21:e5:7a:
ac:2e:e5:47:6e:2e:df:be:b3:ae:7c:64:d9:f8:99:18:b8:83:
fd:d1:79:1e:87:5a:77:4e:e1:2c:f8:ee:20:24:df:25:42:0e:
ff:2b:d2:5a:01:af:15:4a:a3:63:3e:c5:53:f4:5d:59:e4:9d:
77:59:c1:a1:e7:e7:db:14:8c:4c:ae:26:5e:37:72:b9:2b:93:
09:be:5d:af:ab:11:bd:8e:e1:93:94:69:18:b6:d7:58:c5:7f:
27:20:37:06:50:a2:e0:1a:f5:5a:eb:ce:07:3c:3b:9b:a0:73:
c6:50:d5:e9:12:89:75:97:f7:b9:86:4c:04:95:38:21:64:4c:
5f:79:82:03:c2:8a:61:6c:ec:76:f2:cc:35:a9:cc:f4:64:6b:
69:4e:89:6d:ba:d8:8e:e4:6e:62:8d:5a:c7:0e:94:16:29:b9:
61:10:c2:d4:ea:e9:e7:52:60:d1:dd:82:ae:52:1d:d9:1e:39:
01:8e:0b:27:f8:43:3c:27:65:eb:87:01:a7:58:16:77:ba:fe:
e9:81:ae:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:37 2025 by rpki-client