Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
File: nLES4qnHPxSEW2YBa9-8qIKhp-s.cer (raw, json)
Hash identifier: O0A9yviSRtHsElKNOkWc4N/c5EtJCtajQ8z5Nf1fhPo=
Subject key identifier: 9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 55A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 30 Sep 2026 03:05:48 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 193.119.0.0/19
IP: 2001:7fa:10::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21920 (0x55a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Sep 30 03:05:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A914EAE40000, serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:2d:ca:b6:43:06:aa:df:2c:31:46:38:45:
9a:22:ff:65:0a:30:37:88:80:a8:db:59:bc:b3:25:
56:af:fc:e4:9a:0b:cd:11:f8:15:64:8f:89:82:b8:
61:32:12:73:fd:05:d2:d0:5c:9a:ae:a9:c6:5f:74:
87:49:24:ee:dc:cb:0f:93:5b:a1:a9:79:d7:4a:5a:
60:c1:45:d2:28:ef:5f:17:3e:98:60:d7:fd:f3:ec:
c0:25:11:12:f6:df:3a:ac:9d:22:1f:43:cd:f0:06:
7a:5b:97:a5:c1:1b:3c:ae:7b:cd:3a:84:33:9b:fc:
d2:7f:8c:ae:73:7c:8a:1e:51:2f:13:41:f4:fc:a0:
35:8c:77:3b:55:15:8f:52:d1:25:57:02:86:e3:94:
5c:aa:9e:91:9d:4d:02:47:d8:3c:f9:af:76:4d:09:
c9:4e:50:8c:2e:9b:87:99:07:cb:58:03:f6:98:05:
fc:2f:d3:4b:40:65:65:e5:fe:12:cb:c8:18:c8:0c:
51:c3:40:47:9f:b8:39:6d:f3:5c:58:97:1a:d7:bf:
31:81:27:84:b2:e3:52:09:4e:34:f5:9f:82:c4:c0:
25:e1:0d:4a:e3:40:66:a1:9d:ad:e0:6e:54:d3:0b:
f5:48:d9:68:2a:f6:f0:4a:53:4c:b7:c2:b0:f9:53:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.119.0.0/19
IPv6:
2001:7fa:10::/48
Signature Algorithm: sha256WithRSAEncryption
18:0c:04:83:ba:35:cb:ef:8a:3c:50:d1:27:49:03:21:79:02:
42:00:b9:19:42:ce:5b:73:45:a6:5d:79:a8:c2:60:fd:20:cd:
83:93:dd:54:ec:2f:6c:83:3c:e0:15:8d:38:df:20:f3:31:52:
d4:a2:1c:7b:d5:dc:c1:96:a0:f0:19:1d:07:4f:58:a6:b6:73:
96:7a:a8:6f:a0:8b:a1:9c:ff:a2:01:e6:6f:59:89:18:57:0b:
67:6d:72:2f:55:97:a8:a8:c2:60:2b:69:5f:ef:61:98:8a:58:
83:60:d3:f6:b7:28:b0:32:f9:63:15:77:14:59:0d:8e:02:7f:
5a:ac:8a:68:c3:17:57:ef:38:94:0a:24:0e:8b:dc:cc:33:c9:
67:08:dd:72:4c:7f:70:15:3c:ea:bb:64:73:a2:84:43:25:eb:
8a:57:6e:55:1f:e1:2f:51:0f:78:eb:5a:87:2b:4f:61:e6:df:
77:33:4e:be:9b:84:cb:65:33:d7:ed:4f:6e:b5:ad:13:71:01:
c3:84:86:bc:9a:81:6b:fe:ce:9a:32:e7:c2:ed:4d:95:03:aa:
34:27:a3:41:82:b0:85:f8:12:47:e9:b8:65:d0:c7:7d:e0:09:
13:d2:6d:27:bb:ee:37:f3:ad:a3:8f:82:24:05:d4:07:8c:7f:
a4:05:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:30:03 2026 by rpki-client