Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer
File: J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer (raw, json)
Hash identifier: WBx+mfMTWNEFxH4AKISJxY5LFgLjM42MCKqAKzq3Ing=
Subject key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02615A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Aug 2025 23:01:45 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 151483
IP: 103.230.128.0/23
IP: 2401:11a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 22:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155994 (0x2615a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 30 23:01:45 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91BF781, serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:89:7f:f8:0e:d2:eb:1d:97:c1:d7:13:41:
b4:cb:36:25:72:3e:92:cd:f2:7f:da:0b:d6:0c:8b:
90:4b:c7:c7:80:47:82:f9:73:a7:3f:10:4c:51:a5:
89:cd:e0:32:48:24:5b:3a:3e:d6:ad:84:ff:cd:f0:
7c:0f:69:20:8f:c2:bf:11:b4:4b:eb:78:99:81:64:
a3:31:46:87:66:73:ca:90:74:22:72:bd:f1:78:ed:
e8:79:6b:75:a6:37:66:13:11:ad:07:da:65:dd:63:
bb:25:36:94:83:b7:70:34:b2:0d:1a:0c:d4:1a:98:
68:59:40:6c:be:de:75:38:be:2f:f6:78:1a:7d:25:
72:57:7b:69:69:0f:ea:ae:71:5a:f7:7e:c8:e0:1f:
44:5b:9d:f3:28:48:e5:18:98:b3:a2:1d:92:6a:8f:
a6:63:a6:3f:9a:bd:77:a4:bd:df:26:c7:40:fb:32:
ed:ff:13:8c:97:70:50:a8:7e:3e:59:6d:34:72:b7:
a6:2b:9a:2a:37:c9:31:65:65:c3:33:06:b7:a3:a1:
dd:4a:6a:5d:89:60:25:19:bf:00:82:8c:e2:0b:fa:
50:94:f4:6b:9f:aa:39:5c:a7:0f:6e:0b:63:db:d0:
39:84:d0:c5:4a:63:c9:50:46:8e:2c:c8:e9:ac:a0:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151483
sbgp-ipAddrBlock: critical
IPv4:
103.230.128.0/23
IPv6:
2401:11a0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b4:9a:f0:b0:43:f4:20:8c:3e:72:ff:4f:8a:3b:9a:cc:ef:
11:67:ba:32:0b:59:86:85:31:dc:68:d7:fc:63:e1:21:63:c3:
a4:6e:7b:5e:9c:34:33:3a:3b:dc:49:5b:9d:b9:ec:05:05:5f:
19:a8:21:63:cf:59:dd:ed:a3:fd:4c:b7:77:42:53:7b:71:ef:
06:cb:82:3b:fd:76:64:be:21:ec:0f:87:c4:ba:17:35:2c:92:
4c:76:11:94:08:be:35:e1:20:ba:92:20:bc:1f:f9:0a:16:b4:
52:26:0d:41:85:ee:9e:8f:7e:5d:4f:12:7b:76:d7:c9:01:f6:
91:41:c4:ff:66:b5:91:54:6f:76:a3:09:5c:e4:83:8c:74:0b:
30:6d:e6:47:ee:10:fb:2e:7b:85:77:ae:b0:97:51:e8:48:4b:
a1:26:37:20:ea:1c:b4:d2:32:26:d9:6d:d6:60:ad:9b:bc:20:
69:ec:7d:56:85:8a:08:6c:c6:b6:30:ea:93:e0:e5:78:9c:47:
24:52:75:c7:8f:de:00:85:6d:2b:e7:4c:dc:75:32:90:9b:f3:
70:cc:bd:6d:ec:d0:cc:b9:d4:18:c3:7c:0c:f0:38:ea:1e:c3:
25:1f:1f:dd:ee:4a:1f:32:fb:f0:99:8f:e1:80:d5:fd:fa:d8:
7f:5e:87:62
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAmFaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDgzMDIzMDE0NVoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkY3ODExMTAvBgNVBAUTKDI3NjlBNEZBOTIyOTdEQ0IxREY4OTZE
QUU2MzczOTk2RkQzMTgwNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwwIl/+A7S6x2XwdcTQbTLNiVyPpLN8n/aC9YMi5BLx8eAR4L5c6c/EExRpYnN
4DJIJFs6PtathP/N8HwPaSCPwr8RtEvreJmBZKMxRodmc8qQdCJyvfF47eh5a3Wm
N2YTEa0H2mXdY7slNpSDt3A0sg0aDNQamGhZQGy+3nU4vi/2eBp9JXJXe2lpD+qu
cVr3fsjgH0RbnfMoSOUYmLOiHZJqj6Zjpj+avXekvd8mx0D7Mu3/E4yXcFCofj5Z
bTRyt6Yrmio3yTFlZcMzBrejod1Kal2JYCUZvwCCjOIL+lCU9Gufqjlcpw9uC2Pb
0DmE0MVKY8lQRo4syOmsoEKJAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUJ2mk+pIp
fcsd+Jba5jc5lv0xgG4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJGNzgxLzc1MDcwQTRBOTZBRDExRUU5RjVGODQ1REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCRjc4MS83NTA3MEE0QTk2QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJ
cGZjc2QtSmJhNWpjNWx2MHhnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk+7MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ+aAMA0EAgAC
MAcDBQAkARGgMA0GCSqGSIb3DQEBCwUAA4IBAQAftJrwsEP0IIw+cv9PijuazO8R
Z7oyC1mGhTHcaNf8Y+EhY8OkbntenDQzOjvcSVuduewFBV8ZqCFjz1nd7aP9TLd3
QlN7ce8Gy4I7/XZkviHsD4fEuhc1LJJMdhGUCL414SC6kiC8H/kKFrRSJg1Bhe6e
j35dTxJ7dtfJAfaRQcT/ZrWRVG92owlc5IOMdAswbeZH7hD7LnuFd66wl1HoSEuh
Jjcg6hy00jIm2W3WYK2bvCBp7H1WhYoIbMa2MOqT4OV4nEckUnXHj94AhW0r50zc
dTKQm/NwzL1t7NDMudQYw3wM8DjqHsMlHx/d7kofMvvwmY/hgNX9+th/Xodi
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:44:38 2025 by rpki-client