Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
File: tADiGrPTJXQtuHeDDrxEB233CUg.cer (raw, json)
Hash identifier: KfWHZ0J1iUy32umppAjeDDpaWYLGFaASIswUPA3EG3o=
Subject key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023759
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 13 Mar 2025 15:01:14 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 136215
IP: 103.83.232.0/22
IP: 203.89.124.0/22
IP: 2400:9740::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145241 (0x23759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 13 15:01:14 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91658EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:42:ab:99:df:64:17:4c:7b:94:c3:b2:cd:
be:61:9b:ce:7f:0e:4f:f1:0f:bd:72:1d:d3:65:c8:
40:0a:6a:02:60:46:95:50:44:f4:49:6e:78:93:be:
69:09:6d:62:dd:ee:f3:89:11:5f:d7:45:ae:48:94:
09:3a:2d:33:ba:ed:35:ff:36:42:0b:06:cb:5b:b8:
e4:a5:4e:9f:3d:61:79:f7:70:aa:d7:6e:90:1d:20:
00:f7:be:8c:61:b7:fb:54:da:c7:7b:f9:f5:05:d9:
05:ed:66:27:c7:49:c6:09:e5:2e:f6:4e:99:53:d8:
5f:9e:17:02:2e:8b:a7:77:1e:da:66:84:74:2d:0f:
d8:b1:ea:b0:25:d2:b6:bd:96:4a:71:a6:f9:ff:ab:
23:43:c9:98:f0:c8:c0:11:bb:cc:73:af:30:6d:8b:
e3:46:27:6c:34:b8:87:80:b5:fe:ba:1d:5a:4a:ae:
b1:5c:b7:1a:0c:ce:56:6e:d2:bb:16:dd:8c:a5:d5:
45:f2:03:24:cc:7b:f9:ad:90:b0:f8:e2:82:44:62:
e8:dc:05:33:b1:e0:71:7c:7e:fe:47:f6:49:ac:42:
0e:39:2c:24:a7:61:d3:e1:2c:d6:df:46:96:70:3d:
9f:1f:c9:9d:bb:97:a7:5a:33:54:f1:d7:37:0f:ec:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136215
sbgp-ipAddrBlock: critical
IPv4:
103.83.232.0/22
203.89.124.0/22
IPv6:
2400:9740::/32
Signature Algorithm: sha256WithRSAEncryption
6a:63:b9:22:5f:da:aa:7b:c4:24:4d:6d:7d:ae:83:1c:3c:0b:
60:2f:9e:fb:2c:d5:64:64:43:be:46:34:98:02:f1:70:05:f5:
e8:2d:c0:e3:f2:00:47:f1:90:ff:fc:b7:dc:87:22:80:cb:8a:
2a:69:dc:9e:a7:03:7d:9b:ac:18:8b:2d:8a:09:5c:d2:5b:3e:
f3:e7:c4:b2:3c:b9:2c:b2:b4:db:6a:1f:e2:4c:30:4e:fb:1e:
28:f5:bc:47:c7:8c:fb:37:28:9f:ab:28:ee:61:45:33:b2:70:
ac:fa:86:49:de:de:ce:0c:fa:aa:0c:ff:29:71:b5:c0:1b:af:
b8:78:7a:76:aa:98:5a:4b:e1:4b:47:22:df:04:57:a0:6a:68:
9d:56:1a:2e:77:23:b8:72:39:98:8b:0b:c3:1b:b7:a3:7b:30:
b0:2e:89:29:2b:e8:03:25:d2:e3:c1:df:af:de:81:3c:eb:7a:
7a:bb:71:94:13:11:c7:c3:e8:d0:ac:c7:d8:af:88:39:c7:66:
b9:24:89:1a:2a:7b:c8:16:3e:a7:2a:08:81:79:2f:7c:6c:03:
d9:e5:51:ae:8c:bc:32:af:20:49:35:b7:e7:5a:f6:15:9f:d1:
97:d4:fe:f7:51:d6:80:a2:4d:fb:99:e0:3e:25:66:63:eb:94:
62:de:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:01:16 2025 by rpki-client