Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7OetELMy6GcCsRgUVWTmwIS5x0Q.cer
File:                     7OetELMy6GcCsRgUVWTmwIS5x0Q.cer (raw, json)
Hash identifier:          fXZUfugyLo74ppmEH5bNYC5yC9dZfoDH2rvphKsFDPA=
Subject key identifier:   EC:E7:AD:10:B3:32:E8:67:02:B1:18:14:55:64:E6:C0:84:B9:C7:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C1EF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 02 Jul 2026 04:15:22 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 139787
                          IP: 103.145.60.0/23
                          IP: 2001:df1:fd80::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180719 (0x2c1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  2 04:15:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A919AAA00000, serialNumber=ECE7AD10B332E86702B118145564E6C084B9C744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:8a:99:4e:ea:48:41:ee:96:b0:d3:f5:0a:
                    d0:b0:28:55:29:a8:b8:41:10:76:6d:93:2f:fe:c2:
                    4e:a5:1c:4a:2e:8b:1c:54:da:4f:7c:48:f2:e6:26:
                    e1:bc:7d:ff:6a:a4:48:25:e3:2d:01:f4:e0:a2:67:
                    23:63:71:dd:66:21:f6:5f:7c:be:89:6e:68:c5:d3:
                    8b:88:d2:f9:ea:b8:e3:eb:be:4e:84:e3:d8:9b:0b:
                    e3:a0:c6:98:04:fe:20:a2:44:86:46:4b:12:79:b7:
                    f5:5a:a2:a1:8f:be:55:62:74:4d:73:5f:5b:63:93:
                    e2:a8:24:0a:41:6d:dd:47:c3:b7:f7:9e:0d:d6:af:
                    75:4e:b8:29:48:2d:bd:ff:7c:d5:27:64:04:52:ad:
                    cb:43:4c:e0:46:28:51:b9:81:d3:26:72:59:2a:39:
                    54:67:f1:b4:f8:9b:b5:36:4a:b9:31:4e:ee:6a:1a:
                    83:d1:28:d3:20:48:c8:ec:a8:80:97:e0:7c:23:63:
                    d0:0d:56:33:15:98:22:58:bb:f7:1b:3f:4a:d4:4e:
                    ca:92:1b:0e:47:16:11:b5:d7:fa:40:dc:9e:cf:ad:
                    42:47:94:38:22:9b:51:77:b3:cc:66:9b:7e:d4:94:
                    9e:4d:f3:3f:43:3d:ed:8f:a0:2b:e9:1b:81:33:37:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:AD:10:B3:32:E8:67:02:B1:18:14:55:64:E6:C0:84:B9:C7:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139787

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.60.0/23
                IPv6:
                  2001:df1:fd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:47:bb:3d:f2:ca:e4:bf:3c:71:fc:63:24:9b:d5:d9:8a:
         4f:cb:ec:89:37:9c:01:6f:81:cf:ac:1f:70:8d:67:40:25:ba:
         21:84:40:8e:ba:2c:50:c9:2b:5e:ae:c2:a3:46:3b:77:c5:87:
         87:37:91:c3:c6:7d:03:eb:94:89:19:48:34:2d:df:6f:e5:57:
         f2:76:b2:b8:e2:82:76:77:00:f9:b7:42:7f:d6:24:e4:51:40:
         aa:f2:dc:0f:23:7f:46:37:98:13:4e:d3:8a:78:26:08:cf:e6:
         24:b7:d9:5a:82:0d:be:f8:5e:d4:c4:9d:7f:75:8c:03:50:80:
         8e:d6:e0:c9:2a:7d:d1:9b:e5:02:96:12:1c:d9:36:43:0a:c0:
         7a:e0:29:eb:ba:c2:91:98:9e:43:0c:fe:46:48:ce:96:96:fd:
         bc:3f:ef:80:f4:2f:63:4c:56:c8:a3:aa:f3:ae:6a:41:5f:ba:
         d9:88:32:95:25:fc:01:1d:3e:f7:30:43:e8:24:4d:25:30:6a:
         a6:c2:1c:f5:fe:07:48:c8:db:4b:0d:04:6d:6f:4d:ca:b2:ca:
         65:61:ca:9b:9b:f1:9c:59:d5:7a:05:2b:9b:eb:f1:c1:01:b0:
         f6:9f:dc:25:ef:e7:7a:c5:45:17:63:9a:d6:72:e6:69:63:02:
         46:d0:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:18 2026 by rpki-client