Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer
File: ui7CgastOxZ_EqMb5h7CfRUbHvs.cer (raw, json)
Hash identifier: /A2QTJKctw6weJl+BG68N3Ci4tjAHs5FYglQY5RDa/8=
Subject key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8144
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft
caRepository: rsync://rsync.cernet.net/repo/cernet/1/
Notify URL: https://rpki.cernet.net/rrdp/notification.xml
Certificate not before: Tue 25 Aug 2026 14:07:42 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: IP: 162.105.0.0/16
IP: 166.111.0.0/16
IP: 192.124.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33092 (0x8144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 25 14:07:42 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:e2:7f:7d:ed:57:f7:4f:47:89:ae:88:7d:
8a:1c:10:1f:e1:15:e9:d4:f0:7c:00:4b:c7:c4:08:
54:9d:7d:56:3c:e8:8e:2a:7d:d6:d4:b4:5a:d9:1a:
10:a2:7d:d9:95:07:b1:0a:44:fd:5b:69:d7:c1:8b:
29:7a:05:71:46:55:5c:37:ed:6b:0f:ca:dd:7e:33:
c5:0f:0c:99:18:e8:dc:23:a3:5a:97:c2:59:a1:6e:
24:7f:e6:42:d0:cd:c7:18:ce:05:7e:4b:52:9b:03:
6e:cc:15:3d:18:35:28:69:ea:08:8e:51:32:a4:39:
35:96:3f:62:bb:67:ab:bb:36:cc:21:93:4b:c4:0a:
25:11:4a:b8:12:6a:6e:7f:b7:6c:33:33:ef:86:4b:
b4:31:05:54:b3:41:09:2c:6b:13:f2:77:44:87:7c:
69:ff:ee:6e:dd:ec:e4:3c:f9:4b:ec:a6:f2:33:59:
d5:cd:45:d9:fd:78:95:41:94:e8:86:75:a6:d7:04:
50:4d:4c:44:ae:2c:18:00:52:57:d0:90:d2:9a:e2:
9e:d4:0f:4d:7a:a1:82:9a:76:c8:95:9c:44:06:fd:
c5:e8:b1:b0:db:5e:7b:69:8c:42:74:cc:11:cd:0e:
c7:ae:4a:bb:3b:15:28:e3:fa:35:37:c1:6a:d4:bb:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.cernet.net/repo/cernet/1/
RPKI Manifest - URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft
RPKI Notify - URI:https://rpki.cernet.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.105.0.0/16
166.111.0.0/16
192.124.154.0/24
Signature Algorithm: sha256WithRSAEncryption
be:72:a6:a5:e3:f1:74:4c:0d:42:24:25:db:00:5f:42:3c:ef:
a2:b5:1b:d8:d9:e4:42:5a:26:df:40:7d:89:e2:a4:98:94:c3:
15:2b:f7:d0:e1:fa:80:b1:1f:7b:38:71:d5:19:22:12:a4:a4:
6d:f0:b4:5f:c5:29:b7:84:35:cf:3a:b9:6b:85:e9:7c:c4:59:
87:02:66:65:53:75:82:11:6c:ab:68:93:16:3e:77:67:6d:f1:
99:a6:fe:f6:ef:49:78:11:26:aa:10:56:80:f8:e2:2e:b8:7f:
e0:79:27:cf:40:d6:24:f9:ff:05:da:c5:6a:ca:e6:2a:f1:5a:
27:60:e6:ae:ee:81:90:9f:a3:b8:a8:f0:52:c7:6e:ee:42:22:
92:ed:b4:d0:68:ec:8c:7c:b1:87:ff:60:18:e0:47:60:58:80:
50:85:f9:91:be:a6:3f:88:3d:f1:81:9a:c1:b2:10:94:d7:43:
0b:88:24:2a:cf:4f:70:0d:f5:db:e4:22:8d:49:68:21:38:57:
e0:ee:ab:6e:18:87:8e:b1:51:f2:72:1a:b7:7f:f8:8b:cb:74:
45:21:c4:d7:01:58:fe:61:56:d4:e3:85:f3:c0:a3:50:ef:78:
fc:2d:c8:a9:88:b2:66:60:1c:c4:91:36:09:43:c2:b6:4a:3e:
4a:79:90:53
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIDAIFEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgyNTE0MDc0MloXDTI3MDkzMDAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFCMkQzQjE2N0Yx
MkEzMUJFNjFFQzI3RDE1MUIxRUZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqtXif33tV/dPR4muiH2KHBAf4RXp1PB8AEvHxAhUnX1WPOiOKn3W1LRa
2RoQon3ZlQexCkT9W2nXwYspegVxRlVcN+1rD8rdfjPFDwyZGOjcI6Nal8JZoW4k
f+ZC0M3HGM4FfktSmwNuzBU9GDUoaeoIjlEypDk1lj9iu2eruzbMIZNLxAolEUq4
Empuf7dsMzPvhku0MQVUs0EJLGsT8ndEh3xp/+5u3ezkPPlL7KbyM1nVzUXZ/XiV
QZTohnWm1wRQTUxEriwYAFJX0JDSmuKe1A9NeqGCmnbIlZxEBv3F6LGw2157aYxC
dMwRzQ7Hrkq7OxUo4/o1N8Fq1LtesQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFLou
woGrLTsWfxKjG+Yewn0VGx77MB8GA1UdIwQYMBaAFHQBZagNEHGXCrwJwCtxwax8
HW4OMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy
MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9kQUZscUEwUWNaY0t2QW5BSzNIQnJI
d2RiZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJnNC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIHhBggrBgEFBQcBCwSB1DCB0TAzBggrBgEF
BQcwBYYncnN5bmM6Ly9yc3luYy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvMF8G
CCsGAQUFBzAKhlNyc3luYzovL3JzeW5jLmNlcm5ldC5uZXQvcmVwby9jZXJuZXQv
MS9CQTJFQzI4MUFCMkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCLm1mdDA5
BggrBgEFBQcwDYYtaHR0cHM6Ly9ycGtpLmNlcm5ldC5uZXQvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQAwMAomkDAwCmbwME
AMB8mjANBgkqhkiG9w0BAQsFAAOCAQEAvnKmpePxdEwNQiQl2wBfQjzvorUb2Nnk
Qlom30B9ieKkmJTDFSv30OH6gLEfezhx1RkiEqSkbfC0X8Upt4Q1zzq5a4XpfMRZ
hwJmZVN1ghFsq2iTFj53Z23xmab+9u9JeBEmqhBWgPjiLrh/4Hknz0DWJPn/BdrF
asrmKvFaJ2Dmru6BkJ+juKjwUsdu7kIiku200GjsjHyxh/9gGOBHYFiAUIX5kb6m
P4g98YGawbIQlNdDC4gkKs9PcA312+QijUloIThX4O6rbhiHjrFR8nIat3/4i8t0
RSHE1wFY/mFW1OOF88CjUO94/C3IqYiyZmAcxJE2CUPCtko+SnmQUw==
-----END CERTIFICATE-----
Generated at Sat Aug 29 05:35:59 2026 by rpki-client