Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer (raw, json)
Hash identifier: DsyGqwatmPPACMsDIxjroygmm1gxz1ejerrxBQWDR0c=
Subject key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022B54
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Jan 2025 13:31:25 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 139831
IP: 103.145.206.0/23
IP: 2405:8d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142164 (0x22b54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 24 13:31:25 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9145456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4f:0e:4f:90:8b:13:d7:b4:5c:10:fa:09:03:
de:b4:ce:d7:d1:1e:b8:c8:c1:24:66:1c:28:b2:d3:
70:20:80:5d:ed:7c:9b:cc:62:c7:47:d5:52:47:e8:
68:e0:49:60:c3:c2:1e:25:76:db:75:5d:7d:9c:8c:
20:2f:eb:8f:a0:c3:e7:10:c8:b0:13:07:17:f2:82:
23:dd:30:a8:4c:85:86:48:ae:46:3e:f3:2c:27:e2:
7f:0c:3f:cc:5d:be:50:66:e7:2f:3f:50:44:e0:ac:
68:46:b5:99:54:49:e2:22:9c:cd:ed:b3:95:0c:9a:
28:16:60:f2:58:a1:19:85:b9:c8:01:84:40:10:39:
30:41:72:5c:83:29:86:07:80:61:49:20:ac:a9:ce:
84:2f:0d:89:e1:c7:4c:6b:70:48:ca:2c:ad:13:d9:
0b:c2:69:31:ef:d9:06:e3:b3:82:d3:37:56:25:97:
3e:cf:99:68:d8:04:b6:63:09:9b:47:db:36:a8:9c:
e5:5a:9f:57:d8:7a:a5:59:ca:63:12:d1:ed:74:05:
18:1d:cb:d8:41:73:7a:d6:ad:8b:e2:55:21:9b:82:
a1:f1:0e:3e:ce:e2:36:30:ff:23:08:22:56:b3:e0:
92:64:62:16:cc:06:94:b3:6c:26:1c:7a:bb:60:6b:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139831
sbgp-ipAddrBlock: critical
IPv4:
103.145.206.0/23
IPv6:
2405:8d40::/32
Signature Algorithm: sha256WithRSAEncryption
8f:c8:66:41:af:b6:19:61:b2:bf:f2:65:16:5b:9e:ac:58:d5:
7f:44:ea:f5:ea:bb:c3:62:fb:67:f8:a9:2b:48:8d:9d:ab:ec:
15:ec:e3:e9:7d:be:4e:e7:0e:b9:ae:f4:e1:12:04:26:5e:a8:
bd:4f:6f:be:29:98:1a:d9:92:05:f5:ec:38:83:ad:34:8b:b1:
43:f2:b7:d5:f5:95:b5:11:53:fc:2f:98:ed:54:05:e1:4b:c2:
f6:6a:9b:ab:8f:24:2c:3e:86:7c:56:b4:8f:72:13:96:7b:6f:
d5:43:3f:f2:bd:9a:8a:f6:7b:af:42:cb:ff:83:78:0d:07:22:
fb:0e:8d:2a:f3:8c:ab:57:5f:4b:c6:41:da:a2:20:4b:e7:8a:
eb:df:22:50:bf:95:00:90:49:7d:d1:00:e1:55:61:07:0e:43:
be:85:49:aa:08:bd:bf:b9:99:79:92:a6:37:08:28:4e:60:59:
3f:1c:9a:4a:49:32:cc:be:b2:46:3c:71:4c:48:cc:85:4f:58:
29:53:a0:b8:aa:69:04:de:fc:69:88:c6:29:27:89:38:c8:f6:
62:f3:38:69:27:c9:e2:f2:8d:d5:d3:99:88:b4:e4:d7:a3:39:
5e:f8:5d:fc:10:11:28:1c:1f:8f:f4:48:80:4b:e7:22:2d:f8:
76:43:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:37 2025 by rpki-client