Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
File: o_EASaOTr53KRFlmZBZrh0Avgio.cer (raw, json)
Hash identifier: TzbbyGMbbbxddtPLfzGyvvP+JSBbuKXBszSohX4xPCk=
Subject key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7E74
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jul 2026 13:51:30 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 165.101.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32372 (0x7e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jul 8 13:51:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:b5:cd:82:0e:f9:0a:83:40:8b:74:2b:cd:
bb:4b:bc:70:03:79:44:ac:d5:d4:34:df:01:64:c1:
50:d3:67:52:73:a1:e6:5c:e3:53:38:74:cc:ea:da:
87:fc:5f:9f:01:06:85:73:a6:0b:2a:39:0b:56:63:
31:b9:27:c4:2a:47:ee:e0:f1:0f:4a:fb:81:05:38:
54:c8:bf:d1:14:17:c8:04:2f:23:4d:db:a0:f0:4f:
60:01:1e:ff:67:d3:8d:68:aa:7c:39:cc:df:93:8e:
3b:72:1b:41:06:35:2d:8a:c4:57:b5:b0:20:2a:e8:
a1:8c:86:51:21:65:dd:42:75:2d:87:d0:7e:d0:af:
f8:2d:c1:8f:00:cf:98:f6:d9:da:6f:84:a3:3b:32:
60:09:25:ba:4b:ca:a4:61:e6:b7:97:d9:0b:b2:9d:
3a:a4:c5:7d:9b:4b:d7:db:f2:95:a9:6d:b2:a1:ff:
75:95:e5:d5:f0:51:2f:a5:3d:6a:c0:c1:09:7a:a5:
c9:f4:3c:44:64:60:22:5f:d8:72:30:5f:87:16:da:
19:7e:4b:87:aa:0f:28:6e:df:f9:ca:63:0b:f5:44:
a8:8c:e4:af:63:78:2e:0f:b9:57:78:f4:fb:c1:b0:
85:47:55:c6:bd:69:22:a0:ff:55:54:82:21:29:53:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.74.0/23
Signature Algorithm: sha256WithRSAEncryption
48:c7:72:aa:7f:16:d1:8d:86:9f:bb:75:17:10:b5:d4:1d:5d:
b0:b1:b6:2f:6c:41:38:5a:24:f9:3a:15:0b:45:bb:7c:77:6a:
ea:60:c5:46:7a:7c:32:9f:9b:3a:5a:b7:05:27:e0:31:66:0c:
39:b9:2e:bd:87:6f:0e:05:b8:f4:c8:6e:ca:77:20:b5:72:b9:
b8:0f:ce:aa:5c:b2:d8:a4:2d:15:f2:18:e2:fc:7d:69:81:20:
65:29:4c:1e:1d:47:03:b6:19:58:2b:16:05:10:5b:f0:f4:51:
31:d6:90:85:69:8f:44:7d:0e:d3:7d:d1:24:6f:bd:90:a5:de:
b4:be:5d:b2:21:26:4e:20:b6:9a:b2:24:05:cd:70:f1:33:68:
7e:01:f1:99:08:10:0d:2a:d3:49:b3:54:1a:d3:bc:ec:92:0f:
ed:39:6b:ec:0a:41:00:66:40:95:37:27:90:8e:c2:68:ce:c9:
2d:05:6f:70:1d:82:50:3e:98:ce:c6:01:c8:88:29:5a:ca:54:
5f:4d:18:a0:96:51:6f:c6:bf:b4:96:d4:ec:54:0c:a4:85:7d:
a3:90:17:d9:19:8c:4f:ee:e0:b5:0b:59:88:9f:ad:31:81:45:
0e:39:6b:79:d1:71:9b:1b:b2:6e:49:9d:9c:22:ae:d3:c4:a9:
01:4f:91:8c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzA4MTM1MTMwWhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4NzdBNjExMC8GA1UEBRMoQTNGMTAwNDlBMzkzQUY5RENBNDQ1OTY2
NjQxNjZCODc0MDJGODIyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AN31tc2CDvkKg0CLdCvNu0u8cAN5RKzV1DTfAWTBUNNnUnOh5lzjUzh0zOrah/xf
nwEGhXOmCyo5C1ZjMbknxCpH7uDxD0r7gQU4VMi/0RQXyAQvI03boPBPYAEe/2fT
jWiqfDnM35OOO3IbQQY1LYrEV7WwICrooYyGUSFl3UJ1LYfQftCv+C3BjwDPmPbZ
2m+EozsyYAklukvKpGHmt5fZC7KdOqTFfZtL19vylaltsqH/dZXl1fBRL6U9asDB
CXqlyfQ8RGRgIl/YcjBfhxbaGX5Lh6oPKG7f+cpjC/VEqIzkr2N4Lg+5V3j0+8Gw
hUdVxr1pIqD/VVSCISlTSycCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSj8QBJo5Ov
ncpEWWZkFmuHQC+CKjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc3QTYvQkRFRTdCODg1QzdFMTFGMEE1QzM2MDM2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg3N0E2L0JERUU3Qjg4NUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9U
cjUzS1JGbG1aQlpyaDBBdmdpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVlSjANBgkqhkiG9w0BAQsFAAOCAQEASMdyqn8W0Y2Gn7t1FxC1
1B1dsLG2L2xBOFok+ToVC0W7fHdq6mDFRnp8Mp+bOlq3BSfgMWYMObkuvYdvDgW4
9MhuyncgtXK5uA/Oqlyy2KQtFfIY4vx9aYEgZSlMHh1HA7YZWCsWBRBb8PRRMdaQ
hWmPRH0O033RJG+9kKXetL5dsiEmTiC2mrIkBc1w8TNofgHxmQgQDSrTSbNUGtO8
7JIP7Tlr7ApBAGZAlTcnkI7CaM7JLQVvcB2CUD6YzsYByIgpWspUX00YoJZRb8a/
tJbU7FQMpIV9o5AX2RmMT+7gtQtZiJ+tMYFFDjlredFxmxuybkmdnCKu08SpAU+R
jA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:17:18 2026 by rpki-client