Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
File: yRauWpUgtfZ2fnnJFa-hv25JGJk.cer (raw, json)
Hash identifier: kz9n75pRxltd6FEFhqmiv+OZftpVnrAjPXKHInhvbp0=
Subject key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022A2D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 20 Jan 2025 11:44:43 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 58737
IP: 103.30.169.0/24
IP: 2001:df0:5c00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141869 (0x22a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 20 11:44:43 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9188CC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:8a:b2:96:ef:dd:fe:02:1e:1c:41:00:a9:
fc:5c:fd:9e:84:0f:28:14:c6:1c:a9:c2:fc:df:55:
bd:11:4a:a4:47:b2:85:44:30:67:a0:4f:55:55:56:
d5:d7:6b:ac:0c:01:68:69:72:a7:2b:f3:dd:0f:ad:
08:7f:b4:ca:bd:1c:d7:56:96:bd:23:05:0a:ec:da:
73:0f:05:a6:0d:d1:ea:46:bf:8d:a0:9d:b7:32:44:
27:6a:d3:bc:49:78:7b:79:1f:da:de:b5:0c:fd:31:
4b:9d:0b:4e:a0:23:26:7a:21:8e:9b:78:99:bf:65:
e2:bc:45:44:be:ad:8e:3b:54:ec:8f:3c:43:d4:e6:
22:e9:97:9f:a8:08:27:e5:f5:a7:dd:64:93:89:70:
4e:89:53:41:27:ef:23:72:f6:d4:cf:8f:8d:81:a5:
4e:2b:cd:21:58:75:78:d3:75:74:c2:0e:2d:68:38:
f4:b5:23:68:db:74:8c:81:74:f8:0f:29:59:fd:be:
b4:31:46:59:7e:48:1f:b0:d6:17:ec:57:8a:65:f4:
ef:a8:fd:06:67:ef:49:4f:f8:b4:13:99:f0:d3:36:
fb:f9:4f:46:f5:12:2f:c8:b1:94:0b:92:f0:75:81:
e6:d0:3d:d3:77:86:27:e2:8b:90:cd:b6:75:3f:27:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58737
sbgp-ipAddrBlock: critical
IPv4:
103.30.169.0/24
IPv6:
2001:df0:5c00::/48
Signature Algorithm: sha256WithRSAEncryption
32:f1:c2:02:bd:12:10:a5:6f:19:70:fc:22:73:e0:b9:3f:7a:
9e:1d:86:fd:67:0a:74:09:fe:bd:09:82:9f:5a:d7:f6:05:9b:
2a:3c:4f:6b:e4:1d:f6:5a:a8:83:7b:69:5e:a8:c2:b8:b2:be:
db:c8:20:16:dc:48:82:81:be:e3:0b:af:c2:dd:df:52:ab:a3:
cb:4e:60:fb:c3:22:a0:95:79:09:78:12:20:cb:d1:2a:1a:aa:
f1:19:ab:80:0b:74:6c:5b:4b:93:9b:01:64:a1:fa:dc:05:21:
b0:46:6c:d4:18:af:da:08:cb:ef:59:9e:00:79:27:2d:1e:ed:
65:14:4d:36:bf:cb:3c:77:2a:fd:70:24:90:f2:b7:80:66:ab:
59:5b:48:82:96:e2:c0:86:13:b5:db:83:ca:33:28:10:66:de:
fa:67:79:3c:b9:e2:d1:0b:4e:fa:a0:bf:05:73:19:8a:da:9d:
f3:bc:3e:ea:ed:00:de:6e:45:5c:4e:16:c9:f6:62:ea:9b:6c:
7d:69:a7:56:74:c3:42:50:43:fa:ef:b1:e2:07:73:43:b9:e0:
57:c4:ae:ca:7f:5f:44:61:eb:32:93:c4:90:b6:24:57:3a:8d:
88:22:40:a6:a6:bc:b1:73:b3:57:2b:e5:f9:aa:7b:36:dd:17:
73:91:41:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:00:34 2025 by rpki-client