Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer
File: 2ur7NxZLPyAVggaTIx8kACrcIRM.cer (raw, json)
Hash identifier: BZMH+oX8U4nsuX1YI41t2rPX7ObUFsHSovkyC3waIwg=
Subject key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B621
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/62/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Thu 21 May 2026 12:35:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 24242
IP: 103.136.144.0/22
IP: 2404:9540::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 12:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177697 (0x2b621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 21 12:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:92:ea:d3:ba:3a:c3:c1:ef:85:c5:80:50:
cd:b8:49:98:a6:2d:29:08:06:e5:65:fe:2e:73:94:
98:6c:ad:65:6d:37:d4:6e:ec:31:09:0f:26:21:f7:
e6:bb:75:58:d7:26:29:55:b9:2c:1c:a0:fc:34:f6:
b8:a0:9d:1d:c2:f9:aa:bb:56:58:4c:2e:7f:11:99:
f7:76:05:bb:ad:69:39:c1:69:a6:28:0d:31:13:12:
e9:45:ec:5d:11:06:bc:ca:a4:7b:1c:37:76:40:16:
a0:15:e7:42:d0:d5:c7:93:75:d2:78:b7:02:c1:2d:
4c:ee:f7:86:c4:fc:cb:d7:87:ae:a3:e5:7a:a7:32:
36:2d:1e:e1:6f:c9:ff:6a:f1:3f:18:9b:65:94:7c:
ff:ab:3b:94:3a:c4:fa:38:78:39:15:ce:9e:1e:eb:
2b:0b:ce:5a:7b:da:9c:df:5a:94:68:29:15:93:23:
52:8e:96:e8:45:ae:c6:06:b8:9d:db:2b:d1:ba:eb:
62:3b:f8:a5:22:bf:e8:ce:b1:e6:1f:6b:9d:cb:49:
a5:22:58:13:28:ec:47:af:51:5d:1b:35:f1:27:0f:
59:c5:cb:36:54:06:d1:ce:e8:14:79:84:f4:c4:a4:
63:13:ba:b5:3b:ca:ca:4b:12:8c:16:71:bb:45:fb:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/62/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24242
sbgp-ipAddrBlock: critical
IPv4:
103.136.144.0/22
IPv6:
2404:9540::/32
Signature Algorithm: sha256WithRSAEncryption
80:3d:a8:46:ee:c7:99:34:e4:d6:94:74:79:9e:f9:59:6c:5b:
c1:d9:26:a2:44:59:71:9f:27:a7:1a:dc:ad:d9:f4:31:48:04:
e0:6d:69:6e:03:f9:20:05:e4:e3:19:eb:69:42:aa:cf:39:be:
7a:f1:9c:26:a3:95:c3:68:01:f5:95:18:c7:37:8f:18:51:f8:
30:03:c4:69:bb:9f:2d:a8:f6:8e:f6:3b:6f:a4:9d:3b:f2:14:
31:92:ab:80:b2:58:82:87:e6:d3:31:38:bf:4b:29:80:b9:86:
6e:2d:fb:16:cd:3c:ee:84:1f:c3:54:94:d1:db:36:7a:0f:f8:
b6:01:76:80:c2:86:de:9a:7c:b8:d7:47:fa:59:6d:96:ca:48:
dd:af:d9:3c:a1:48:d4:40:7d:dd:88:b8:d8:b6:87:80:09:2c:
9c:85:c1:cb:e0:e3:79:4c:c5:ee:79:2d:50:c1:fd:57:e0:d7:
a5:f8:97:cb:9a:fc:6d:b5:fa:43:de:0d:d2:fd:64:8c:84:38:
6e:e1:f8:96:9f:35:e3:aa:a0:80:a4:a6:e8:de:e0:32:a9:fb:
2b:1f:2e:59:48:7d:33:b8:5e:1c:0d:23:1b:64:5d:2a:bd:85:
29:5f:e8:f0:36:3b:3b:1a:a1:25:09:30:a3:0b:49:11:eb:e5:
5e:79:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:57:36 2026 by rpki-client