Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer (raw, json)
Hash identifier: jrixejj6mRedvTKTtM/N90HhMxm8lb67HEuDIFw+9Jc=
Subject key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023892
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 20 Mar 2025 03:39:32 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 9498
AS: 23870
AS: 24560
AS: 45514
AS: 45609
IP: 27.123.64.0/18
IP: 58.84.56.0/23
IP: 59.144.0.0/15
IP: 61.95.128.0/17
IP: 61.246.0.0/16
IP: 61.247.224.0/19
IP: 101.2.0.0/17
IP: 103.7.108.0/22
IP: 103.16.104.0/22
IP: 103.56.85.0/24
IP: 103.110.38.0/24
IP: 103.116.28.0/22
IP: 103.210.40.0/22
IP: 103.239.233.0/24
IP: 103.251.28.0/22
IP: 122.160.0.0 -- 122.187.255.255
IP: 125.16.0.0/13
IP: 150.129.140.0/22
IP: 171.48.0.0/12
IP: 171.76.0.0/14
IP: 180.178.0.0/19
IP: 180.211.80.0/22
IP: 182.64.0.0/12
IP: 202.56.192.0/18
IP: 202.71.16.0/21
IP: 203.101.0.0/17
IP: 203.132.128.0/19
IP: 203.145.128.0/18
IP: 2404:a800::/32
IP: 2407:b900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145554 (0x23892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 20 03:39:32 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91964B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:21:47:ac:2c:95:e8:a1:d2:f2:5a:6e:86:
80:f2:28:c7:d5:3b:16:f5:1e:d5:97:0e:0a:cb:ee:
0a:1d:c3:4a:b0:37:7f:ed:7f:a6:5b:b8:22:26:fe:
d5:5e:de:93:11:46:d0:4e:b9:c2:51:4d:e2:4e:62:
08:85:78:ef:77:b6:70:dc:a6:7d:77:21:7e:52:db:
3f:4f:45:83:4a:c6:43:12:2e:e6:3d:92:1e:eb:89:
49:d4:ad:07:62:e4:44:f3:81:63:57:53:46:68:5c:
70:c9:fe:1d:77:30:41:aa:5e:a5:e4:02:99:07:7f:
3b:d0:ab:63:ea:b2:1b:4d:be:8f:a9:04:49:88:49:
fc:76:e8:4d:bf:73:9d:57:82:a8:79:2c:b5:70:4f:
49:7a:ff:4f:f9:e1:a3:ed:29:0e:59:88:c1:86:ad:
3f:d2:0d:43:29:f2:f5:55:05:74:dd:57:94:41:68:
44:0d:08:db:00:6e:46:4b:21:3c:9d:eb:6c:73:0e:
57:a4:da:e6:bc:bd:3f:57:3d:99:da:c6:03:ff:6b:
41:0d:f6:06:69:39:f2:cc:21:bc:2e:2c:c6:5f:f5:
d1:f8:f4:22:b2:25:17:ad:e7:76:a1:ea:10:21:59:
7a:42:9b:bd:ed:91:bc:63:fd:a4:a4:14:d1:31:89:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9498
23870
24560
45514
45609
sbgp-ipAddrBlock: critical
IPv4:
27.123.64.0/18
58.84.56.0/23
59.144.0.0/15
61.95.128.0/17
61.246.0.0/16
61.247.224.0/19
101.2.0.0/17
103.7.108.0/22
103.16.104.0/22
103.56.85.0/24
103.110.38.0/24
103.116.28.0/22
103.210.40.0/22
103.239.233.0/24
103.251.28.0/22
122.160.0.0-122.187.255.255
125.16.0.0/13
150.129.140.0/22
171.48.0.0/12
171.76.0.0/14
180.178.0.0/19
180.211.80.0/22
182.64.0.0/12
202.56.192.0/18
202.71.16.0/21
203.101.0.0/17
203.132.128.0/19
203.145.128.0/18
IPv6:
2404:a800::/32
2407:b900::/32
Signature Algorithm: sha256WithRSAEncryption
8b:fb:92:07:9b:9e:b6:35:46:69:ba:9d:16:69:83:71:17:84:
57:33:cd:4a:8f:3d:d4:89:07:e4:6a:5f:59:c2:db:66:fb:af:
18:49:58:e6:db:2f:63:0a:6e:d3:08:f8:e9:7d:d6:e0:25:3f:
60:b3:b1:a7:76:78:0e:5a:b7:45:42:c7:3c:46:1f:6a:b8:a8:
03:5e:36:3a:7a:09:6c:6f:45:a4:66:17:b8:34:de:79:45:04:
ba:3e:b7:19:c1:8f:01:eb:3a:d6:4f:2d:d2:55:60:a7:8c:e8:
1e:82:6d:79:ce:d6:2a:e3:85:53:f4:2a:0e:22:0a:f0:6c:5d:
e5:ee:48:ff:05:5d:62:74:a7:c2:c6:bc:d3:a3:2c:db:38:3d:
01:60:23:37:6d:ec:14:99:8c:31:1b:fe:0b:e6:d6:31:aa:e6:
04:5b:8f:de:28:5d:96:79:cb:cc:ee:5a:f8:a0:35:e0:6d:2b:
5c:ba:af:20:29:07:fd:35:a8:eb:79:f1:0e:59:7a:ac:5d:e5:
2b:24:91:65:a8:0a:61:39:4d:17:64:54:0b:24:fb:10:1b:2b:
53:b7:ec:80:d9:ea:1a:27:d4:06:19:94:f2:9b:65:43:09:03:
28:ea:a7:4a:3f:01:2b:d0:a4:e2:0c:a1:b3:d2:f3:18:2a:00:
29:6d:1e:37
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIDAjiSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMyMDAzMzkzMloXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUz
Qzg4QUQxNERBODlBMTg2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc0iFHrCyV6KHS8lpuhoDyKMfVOxb1HtWXDgrL7godw0qwN3/tf6ZbuCIm/tVe
3pMRRtBOucJRTeJOYgiFeO93tnDcpn13IX5S2z9PRYNKxkMSLuY9kh7riUnUrQdi
5ETzgWNXU0ZoXHDJ/h13MEGqXqXkApkHfzvQq2PqshtNvo+pBEmISfx26E2/c51X
gqh5LLVwT0l6/0/54aPtKQ5ZiMGGrT/SDUMp8vVVBXTdV5RBaEQNCNsAbkZLITyd
62xzDlek2ua8vT9XPZnaxgP/a0EN9gZpOfLMIbwuLMZf9dH49CKyJRet53ah6hAh
WXpCm73tkbxj/aSkFNExiQNTAgMBAAGjggPdMIID2TAdBgNVHQ4EFgQUs5hmqZ0c
2fTn6PU8iK0U2omhhiUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk2NEIzL0U2NTg1MTEyMUQ4NDExRTJBMUJBMzBEQjA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVow
YzJmVG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQgBAf8EHDAa
oBgwFgICJRoCAl0+AgJf8AIDALHKAgMAsikwgdsGCCsGAQUFBwEHAQH/BIHLMIHI
MIGvBAIAATCBqAMEBht7QAMEATpUOAMDATuQAwQHPV+AAwMAPfYDBAU99+ADBAdl
AgADBAJnB2wDBAJnEGgDBABnOFUDBABnbiYDBAJndBwDBAJn0igDBABn7+kDBAJn
+xwwCgMDBXqgAwMCergDAwN9EAMEApaBjAMDBKswAwMCq0wDBAW0sgADBAK001AD
AwS2QAMEBso4wAMEA8pHEAMEB8tlAAMEBcuEgAMEBsuRgDAUBAIAAjAOAwUAJASo
AAMFACQHuQAwDQYJKoZIhvcNAQELBQADggEBAIv7kgebnrY1Rmm6nRZpg3EXhFcz
zUqPPdSJB+RqX1nC22b7rxhJWObbL2MKbtMI+Ol91uAlP2Czsad2eA5at0VCxzxG
H2q4qANeNjp6CWxvRaRmF7g03nlFBLo+txnBjwHrOtZPLdJVYKeM6B6CbXnO1irj
hVP0Kg4iCvBsXeXuSP8FXWJ0p8LGvNOjLNs4PQFgIzdt7BSZjDEb/gvm1jGq5gRb
j94oXZZ5y8zuWvigNeBtK1y6ryApB/01qOt58Q5Zeqxd5SskkWWoCmE5TRdkVAsk
+xAbK1O37IDZ6hon1AYZlPKbZUMJAyjqp0o/ASvQpOIMobPS8xgqACltHjc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:55 2025 by rpki-client