Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
File: EOBQLz04LowVZuzMKhIbbEOd6Xc.cer (raw, json)
Hash identifier: SSMGZz0f9TY1THJ4u2lQTb3V468Nt8V4O1LTX9M/Lno=
Subject key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0245C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 May 2025 04:44:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 137444
IP: 203.20.108.0/23
IP: 2001:df3:9340::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148937 (0x245c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 13 04:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:d0:4e:49:7a:14:74:37:f5:e4:a2:ab:93:
09:1e:46:0c:e8:43:f8:b9:30:06:ab:d0:80:7a:55:
ef:63:6c:11:90:2c:01:c6:07:98:d6:b5:ed:81:e1:
bf:d3:38:53:92:c0:84:a1:20:fa:85:f7:d4:86:e4:
d9:6a:87:4d:9c:a4:93:71:f4:a3:ee:74:f1:28:36:
cf:e4:d8:4b:06:23:f8:8a:01:7a:0f:0b:13:d1:83:
5b:f4:c5:f8:52:de:6c:9d:35:16:56:a5:ba:cf:8c:
a9:e3:b2:18:54:94:d9:f9:3d:95:68:a2:05:40:32:
31:45:a8:5c:2d:63:c8:9d:eb:ac:2e:99:9d:37:57:
ce:a2:54:11:7c:75:5e:ac:b7:0f:0b:33:5e:bb:c3:
2d:31:d4:ce:46:18:a8:49:50:b2:3f:12:07:52:4f:
17:64:00:d6:9e:8a:9c:4b:62:3e:d8:cd:a8:1e:e7:
25:54:40:e5:1e:79:7a:26:6f:78:54:2e:5c:74:2e:
e6:a3:30:36:26:e6:39:e8:66:dd:25:5b:40:af:a9:
f8:de:fe:b4:cb:0b:8f:5c:dd:ce:e9:4f:f6:85:7d:
75:b1:fa:4b:49:20:2c:dc:86:02:1a:1b:02:63:81:
4f:1b:08:2a:ad:30:19:18:72:5f:bc:ee:6c:f5:b2:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137444
sbgp-ipAddrBlock: critical
IPv4:
203.20.108.0/23
IPv6:
2001:df3:9340::/48
Signature Algorithm: sha256WithRSAEncryption
a0:ed:a9:ec:00:e3:6a:fb:c4:32:3c:7c:97:d9:ea:97:c0:b0:
79:d0:62:00:37:4c:cc:20:fd:10:f9:ea:66:6c:b1:d3:2a:a2:
ee:f5:92:cb:ea:52:bd:a7:58:33:12:c3:79:50:c6:97:1a:95:
17:40:83:4f:2c:0b:53:34:60:6b:b6:58:90:64:8c:72:80:c1:
97:25:7c:e7:a0:71:0c:85:8a:44:93:38:d4:d5:a5:8d:9d:55:
f1:57:6a:12:f5:83:ae:87:d3:6d:42:c8:ee:da:f5:68:3d:ac:
f9:fe:f3:5b:30:a7:17:40:ec:25:46:0a:6f:db:e4:b3:af:20:
c9:25:b0:ab:2f:51:04:ed:50:4b:a4:eb:8e:53:57:a2:8a:e4:
aa:22:d3:d5:fa:1d:e6:8c:d1:ad:15:7f:d9:91:6e:8c:74:61:
a3:27:3b:54:de:47:95:00:72:34:12:81:8b:48:4a:89:9f:b5:
51:5d:06:8d:55:2f:c1:09:b8:fe:39:b9:c9:ca:b7:77:22:bf:
e6:14:d0:b1:6d:aa:28:b4:b2:cd:83:1b:ba:90:b6:20:ec:45:
36:8a:b6:2d:98:54:6f:0d:70:f0:c3:9b:09:47:e3:56:0a:ef:
1c:f6:32:13:c1:61:c4:89:8d:03:bf:22:5f:1a:97:67:c8:93:
ba:da:b3:35
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAkXJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUxMzA0NDQ0OVoXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUND
QzJBMTIxQjZDNDM5REU5NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWbtBOSXoUdDf15KKrkwkeRgzoQ/i5MAar0IB6Ve9jbBGQLAHGB5jWte2B4b/T
OFOSwIShIPqF99SG5Nlqh02cpJNx9KPudPEoNs/k2EsGI/iKAXoPCxPRg1v0xfhS
3mydNRZWpbrPjKnjshhUlNn5PZVoogVAMjFFqFwtY8id66wumZ03V86iVBF8dV6s
tw8LM167wy0x1M5GGKhJULI/EgdSTxdkANaeipxLYj7Yzage5yVUQOUeeXomb3hU
Llx0LuajMDYm5jnoZt0lW0Cvqfje/rTLC49c3c7pT/aFfXWx+ktJICzchgIaGwJj
gU8bCCqtMBkYcl+87mz1sl3/AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUEOBQLz04
LowVZuzMKhIbbEOd6XcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY4OTQ5LzNGMjQyQUMyRTRGMzExRUU5OTEwMTQzOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2ODk0OS8zRjI0MkFDMkU0RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHow
NExvd1ZadXpNS2hJYmJFT2Q2WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhjkMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByxRsMA8EAgAC
MAkDBwAgAQ3zk0AwDQYJKoZIhvcNAQELBQADggEBAKDtqewA42r7xDI8fJfZ6pfA
sHnQYgA3TMwg/RD56mZssdMqou71ksvqUr2nWDMSw3lQxpcalRdAg08sC1M0YGu2
WJBkjHKAwZclfOegcQyFikSTONTVpY2dVfFXahL1g66H021CyO7a9Wg9rPn+81sw
pxdA7CVGCm/b5LOvIMklsKsvUQTtUEuk645TV6KK5Koi09X6HeaM0a0Vf9mRbox0
YaMnO1TeR5UAcjQSgYtISomftVFdBo1VL8EJuP45ucnKt3civ+YU0LFtqii0ss2D
G7qQtiDsRTaKti2YVG8NcPDDmwlH41YK7xz2MhPBYcSJjQO/Il8al2fIk7raszU=
-----END CERTIFICATE-----
Generated at Fri May 30 08:26:37 2025 by rpki-client