Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer (raw, json)
Hash identifier: IhWcHyErwNmiVbNNadSLARziU9RLlOiXZuzY0HxnEUI=
Subject key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0239F8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Mar 2025 18:15:34 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 150747
IP: 103.82.202.0/23
IP: 2001:df1:ec40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145912 (0x239f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 26 18:15:34 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9189122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:23:b8:8e:77:a6:53:4c:fc:7f:98:c7:5f:
e4:ae:ff:bb:0e:ac:1d:f7:b0:6a:2d:e7:1c:38:e6:
47:60:ab:83:5c:89:d2:a8:c1:af:36:54:fe:c9:12:
e8:fd:70:c6:6c:7b:39:59:28:b2:4e:26:d4:32:45:
a1:89:08:bc:6d:fa:f7:ff:0f:73:0b:ae:8f:20:05:
85:75:e5:f0:8e:3e:5b:19:e9:3d:85:8c:f1:95:17:
3e:1a:c6:36:69:a9:76:d2:91:ee:86:10:aa:5b:3b:
4b:fc:d1:7b:1b:33:d5:90:05:bc:e0:96:a9:a7:b6:
5a:72:1d:bc:0b:f2:f8:6c:58:ea:32:cf:91:b3:7d:
e1:a9:f7:9c:22:39:94:dd:50:0d:dc:d5:81:28:95:
0f:5d:00:73:3f:0f:03:62:c1:ce:8e:66:05:1f:49:
a8:89:95:9b:73:a6:d5:49:24:f5:1d:46:58:04:ab:
b8:3f:9e:c3:b2:0d:fa:42:71:1a:74:23:78:5d:fa:
c0:58:cd:fb:57:8e:bf:da:82:f8:4d:be:bc:b3:c9:
b2:fd:c9:92:ce:b5:26:41:cf:f1:fb:ac:d6:fe:1e:
7b:bb:2d:90:de:f1:2e:29:aa:ba:d9:14:67:5d:47:
cf:bd:ed:6c:10:5b:07:38:fd:5e:f3:13:9d:0a:ac:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150747
sbgp-ipAddrBlock: critical
IPv4:
103.82.202.0/23
IPv6:
2001:df1:ec40::/48
Signature Algorithm: sha256WithRSAEncryption
c5:d2:b2:fe:8a:0b:14:3a:10:d0:5a:c5:2d:54:b5:7b:c6:77:
5f:f2:78:d1:0d:69:d2:92:b0:5e:cb:17:b2:05:41:cb:1a:ef:
b4:fe:d1:7a:37:02:56:6b:ea:60:24:0d:fd:4d:ef:da:88:d7:
92:4e:47:07:3e:04:1a:79:14:61:bc:58:8e:65:2d:fd:b8:e3:
84:c1:a5:01:42:05:b8:57:89:37:07:b4:ef:79:47:14:5d:88:
fb:fe:56:f8:96:9f:9b:00:e7:f3:5a:6c:4b:a4:b2:9a:4a:cf:
7b:ad:d9:ad:b9:26:e0:ae:39:88:4a:50:4d:dd:f1:c9:e5:5e:
c9:b6:8d:a1:1f:c2:a9:77:82:2a:46:96:d4:54:b6:d4:99:52:
c5:85:e0:3b:8a:9d:37:c2:d6:c6:54:3d:dd:f7:ba:d2:d9:64:
c2:64:bd:31:c5:d8:8d:51:e4:80:cb:1d:d7:0f:b8:33:49:68:
46:82:c7:99:fd:cb:ed:f5:e2:15:86:76:8f:fc:6a:a6:b9:a5:
ae:af:1e:8e:47:94:75:7a:47:b7:c0:70:98:7f:d9:c4:45:63:
ee:c2:4c:4b:f3:28:1d:5a:56:05:5a:f9:4e:df:9d:a8:b1:97:
8c:22:71:c5:40:d7:fd:8e:80:8c:31:ae:f3:16:a7:2f:7b:37:
7a:aa:96:53
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjn4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMyNjE4MTUzNFoXDTI2MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4
MkM0NUM5NTc2RjUyQTNCRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/9iO4jnemU0z8f5jHX+Su/7sOrB33sGot5xw45kdgq4NcidKowa82VP7JEuj9
cMZsezlZKLJOJtQyRaGJCLxt+vf/D3MLro8gBYV15fCOPlsZ6T2FjPGVFz4axjZp
qXbSke6GEKpbO0v80XsbM9WQBbzglqmntlpyHbwL8vhsWOoyz5GzfeGp95wiOZTd
UA3c1YEolQ9dAHM/DwNiwc6OZgUfSaiJlZtzptVJJPUdRlgEq7g/nsOyDfpCcRp0
I3hd+sBYzftXjr/agvhNvryzybL9yZLOtSZBz/H7rNb+Hnu7LZDe8S4pqrrZFGdd
R8+97WwQWwc4/V7zE50KrF59AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUu0+uhVQK
Wtn5PLSCxFyVdvUqO/QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg5MTIyLzBGRDRFRjRFQUVFRjExRURBMkU5QkM2OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZR
S1d0bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkzbMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ1LKMA8EAgAC
MAkDBwAgAQ3x7EAwDQYJKoZIhvcNAQELBQADggEBAMXSsv6KCxQ6ENBaxS1UtXvG
d1/yeNENadKSsF7LF7IFQcsa77T+0Xo3AlZr6mAkDf1N79qI15JORwc+BBp5FGG8
WI5lLf2444TBpQFCBbhXiTcHtO95RxRdiPv+VviWn5sA5/NabEuksppKz3ut2a25
JuCuOYhKUE3d8cnlXsm2jaEfwql3gipGltRUttSZUsWF4DuKnTfC1sZUPd33utLZ
ZMJkvTHF2I1R5IDLHdcPuDNJaEaCx5n9y+314hWGdo/8aqa5pa6vHo5HlHV6R7fA
cJh/2cRFY+7CTEvzKB1aVgVa+U7fnaixl4wiccVA1/2OgIwxrvMWpy97N3qqllM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:02:18 2025 by rpki-client