Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
File: spNInjrPKPDRVxQ3zfC8wspUVFo.cer (raw, json)
Hash identifier: bSymmUh0dgjdv63p20aUus/+wtacO5HQQ95mOL1Ql8k=
Subject key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022797
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Jan 2025 16:43:23 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 136180
IP: 103.203.56.0/22
IP: 116.213.44.0/22
IP: 2400:87c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141207 (0x22797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 6 16:43:23 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A917C29E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:d4:4b:e6:7f:06:39:54:fe:94:35:47:11:
3f:ee:54:a5:0c:ba:4d:87:4a:56:45:c8:3d:b0:7f:
f4:13:18:e0:44:2b:c7:0d:e5:46:02:87:be:0a:44:
52:e5:5f:a8:c8:d7:e8:63:40:7c:e9:dc:4c:94:5f:
9b:ff:d7:61:4e:e5:0a:62:0a:c9:1f:aa:34:c0:31:
cc:d8:95:53:1f:9d:4d:0c:a8:1b:9d:f1:60:30:87:
a2:df:0d:89:9a:ca:b5:1d:14:9d:5a:7a:ed:09:8b:
be:b4:a1:e9:1b:c3:31:22:37:64:f7:6b:2e:86:31:
5d:9c:be:d4:4e:24:be:93:ea:89:27:b4:bd:76:4f:
ea:e6:44:80:e4:95:53:17:5f:7c:22:5b:64:5c:06:
93:d6:0c:fe:b6:0f:71:22:f1:3f:fa:9d:a0:d5:1f:
49:76:02:a7:5e:a0:9e:9e:f3:ef:af:06:a1:f9:ce:
62:19:d1:10:4c:4f:57:5c:8e:b3:e0:06:d4:93:ea:
91:21:6b:ce:98:e5:bb:2d:af:b1:8f:54:af:a7:a9:
34:3a:3d:9f:c7:11:55:cb:0e:02:f1:f1:9b:ee:b6:
47:ed:fb:ae:99:1f:e8:cc:51:0d:94:01:42:b2:d1:
77:e8:16:2c:72:fe:aa:18:a8:f1:b0:5b:bb:b1:62:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136180
sbgp-ipAddrBlock: critical
IPv4:
103.203.56.0/22
116.213.44.0/22
IPv6:
2400:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:04:9e:04:c8:1d:ad:75:c0:72:31:d0:7c:4a:40:50:73:64:
26:19:36:d7:13:3b:24:28:d6:d8:c5:90:a7:c6:7a:b9:f3:29:
26:ac:7f:6f:18:74:4a:02:a4:10:f2:90:41:16:4b:24:48:7b:
a1:eb:41:b9:e8:a2:75:45:fd:e0:e1:49:06:45:5d:57:80:84:
c4:39:4f:5d:36:83:73:12:3c:bb:66:01:e2:9e:88:fd:6e:86:
40:07:d9:b8:92:44:7e:a0:32:7d:09:0b:6d:7f:3c:df:70:28:
67:89:68:bf:ee:72:72:bf:5d:c4:e3:bf:9f:4f:fb:c4:1a:b2:
12:23:e1:5a:5a:09:53:df:96:92:aa:90:12:8d:a9:38:79:cc:
60:0c:02:11:ad:e2:7f:6d:19:d1:35:81:ba:4b:ca:fe:31:e6:
78:48:d8:12:71:ab:f1:cf:22:30:71:cf:5a:88:10:e1:96:77:
db:4a:cb:a2:1b:f7:24:e0:73:22:65:f5:7e:b2:c9:41:c6:fe:
16:53:8a:5b:91:52:72:10:ce:f1:da:5a:be:16:ea:44:8b:57:
d2:2a:8f:79:40:7c:58:5b:61:a0:3d:e8:05:88:5f:43:a8:78:
41:cb:dd:13:79:b7:f9:75:67:1c:74:10:bc:22:e4:db:b4:9d:
3c:6d:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:28 2025 by rpki-client