Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
File: vKs-dvhO1DdC8qCBJCcI55nOG18.cer (raw, json)
Hash identifier: /ZnwesFjKl35c0Gqmy6ASSGhupgoyrev4MML00UkDuk=
Subject key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023A1F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Mar 2025 05:22:04 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 45652
IP: 43.252.120.0/22
IP: 103.233.80.0/22
IP: 110.34.128.0/17
IP: 2401:4a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145951 (0x23a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 27 05:22:04 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91AC532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:1a:bc:51:41:64:89:3c:1d:83:e1:1b:93:
66:81:65:3e:03:42:9b:e6:0c:9a:c0:d8:18:6b:7a:
d8:85:33:e7:77:fc:fe:38:35:61:9e:3b:47:22:ea:
65:71:df:b0:c0:91:18:53:24:ed:ff:96:dc:12:13:
cd:09:e7:5c:ff:2e:de:db:c8:6f:32:25:fa:b3:8c:
3b:66:01:34:7a:8e:2f:e3:da:e9:bb:f4:f6:5b:87:
8a:47:be:e0:2f:3a:13:04:41:1c:ec:08:18:a5:b2:
81:ed:9f:f3:85:2c:10:be:ba:37:83:17:b0:28:54:
a0:e8:77:a3:0c:ba:1e:92:d8:70:cd:43:d8:98:59:
a7:fd:a1:74:a8:7c:92:50:19:5f:52:a6:85:ba:38:
54:3f:76:d0:f0:05:cc:bd:57:8e:7a:48:d4:a8:09:
13:dc:af:b1:ca:e4:72:c4:c0:7f:5e:17:1f:0c:14:
4a:de:75:4a:3f:c8:84:fd:fa:55:e5:98:63:2f:6f:
50:d5:a7:d0:af:e1:3c:19:79:db:bd:23:76:cc:3e:
88:f7:cc:3f:a5:8e:e8:45:df:9e:7c:9a:61:d0:06:
ce:dc:92:79:cc:cd:94:51:93:a8:09:60:70:5d:2c:
5c:da:4b:ed:93:1e:d3:fe:b7:8a:ae:5e:4e:91:9d:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45652
sbgp-ipAddrBlock: critical
IPv4:
43.252.120.0/22
103.233.80.0/22
110.34.128.0/17
IPv6:
2401:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
9e:8c:68:fe:3d:6b:6b:82:80:18:f1:0c:a7:57:7d:a0:1f:a0:
7e:74:74:21:e8:79:a3:0c:b4:ab:41:fd:a3:77:b3:01:13:bb:
ab:37:6f:72:ca:05:21:ee:a6:12:c9:79:85:6f:1a:56:46:2a:
43:5a:d5:79:ed:68:08:49:e5:61:aa:a0:be:91:43:a1:99:2e:
1c:9e:4b:20:01:ed:ef:27:f5:53:2a:d5:b9:da:0d:ea:ec:72:
40:39:62:57:9b:4f:f3:e7:19:b5:48:d8:79:3f:0c:2e:fa:45:
8c:79:b1:db:6d:eb:f8:5d:bd:8a:31:9a:b4:51:7e:23:5a:2f:
f4:76:89:66:26:20:fc:9d:25:aa:c7:e8:6e:bf:32:e1:23:d5:
6e:dc:2b:6d:52:a1:2c:af:de:44:8b:e0:1c:95:65:65:8f:67:
5d:53:96:49:c7:07:0a:7a:07:60:21:9d:7d:fd:cf:62:0b:6e:
7e:de:6d:7a:54:05:77:3c:a6:b0:6b:30:0f:35:90:5f:c6:54:
a4:f2:bc:68:13:b0:e1:6d:9c:31:d3:df:0e:48:7a:94:67:ad:
87:13:6a:1d:71:7d:75:2c:af:94:27:bd:ed:e8:e0:b4:9f:ab:
78:09:65:dc:ca:52:4e:cc:6e:26:51:2a:02:6a:04:66:60:a5:
ec:37:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:04:39 2025 by rpki-client