Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer (raw, json)
Hash identifier: 7TbFrQb3OsnawL2rOJj4ypy5qb+R4w0m9ByFTWNMiRs=
Subject key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0246F2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 17 May 2025 07:42:38 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 141392
IP: 103.158.19.0/24
IP: 2001:df5:3c80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149234 (0x246f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 17 07:42:38 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:41:fd:83:d3:f1:4d:ab:e1:83:98:93:3e:
1e:ed:52:5c:0b:c1:d9:8d:e9:39:df:7c:16:ac:fc:
1c:ee:30:18:1b:17:22:19:c3:a6:cc:55:b7:67:74:
b9:d1:e5:50:c7:62:69:c3:d6:ac:6f:43:21:ef:d4:
06:60:de:3a:c4:41:29:b4:c8:52:4a:8e:0a:cc:09:
89:6c:31:6c:4b:18:fe:f5:0e:55:af:a8:a4:1e:85:
4f:3f:31:a6:42:59:18:dd:64:f4:0b:70:d1:dd:0d:
6b:08:cc:ac:c1:ce:ed:a3:3a:11:d0:97:12:ae:e4:
30:5b:90:b2:aa:4c:3e:cc:04:4b:bd:46:09:e7:eb:
87:63:68:3c:50:89:c5:b7:97:2c:3b:15:35:48:6c:
18:4e:2c:9b:a0:91:6d:5d:9a:c1:64:35:95:62:48:
13:5b:1e:26:20:f7:cf:a7:e1:63:07:d5:72:02:02:
ab:90:d2:bc:80:02:78:e8:4d:cf:fe:fb:78:9e:31:
69:c8:bb:be:fd:b8:e0:22:dc:4e:c4:18:66:de:f6:
23:1a:b8:24:15:ae:cc:fe:32:28:51:c1:8e:9a:29:
c8:b1:4b:0d:38:c7:e0:97:1b:8b:93:74:0e:d6:ea:
b7:e0:1d:80:1b:26:99:ac:a0:aa:e2:60:a9:a4:9d:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141392
sbgp-ipAddrBlock: critical
IPv4:
103.158.19.0/24
IPv6:
2001:df5:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
04:a5:e6:3e:9d:24:f4:e3:56:58:f9:99:27:17:7f:4d:37:e5:
53:78:79:70:eb:8c:0a:b9:71:ab:78:95:83:43:f4:2a:bb:78:
5f:64:fe:e4:20:fe:aa:a6:57:66:c2:5c:13:63:4b:3c:57:d8:
76:8c:f7:e3:da:b3:bb:c8:e6:54:e6:7d:6f:dc:75:75:82:22:
ed:e8:78:7b:c0:e3:bb:c5:e5:0e:37:62:73:2b:bf:21:58:b5:
77:12:3b:20:28:34:8b:59:6f:34:34:e8:57:87:d6:0a:54:bf:
2a:51:1f:ec:c9:0e:63:84:7c:6d:3b:f1:e1:b9:f0:f7:d1:25:
22:49:ea:07:48:d6:5f:f7:02:70:aa:db:85:3d:0e:96:79:da:
e5:59:bf:35:83:9b:dc:3c:2f:1b:1d:ba:07:99:b7:27:17:5b:
b9:c6:9d:64:b1:95:04:bb:a3:ee:a8:3c:ed:63:30:5d:fc:7b:
6b:65:e9:57:2b:14:ea:5f:10:c2:45:03:be:f9:b0:2e:06:0e:
19:56:1d:89:ab:7f:46:cb:43:52:0d:e5:08:dc:98:e3:02:95:
2b:a4:f1:0d:6b:d8:b1:86:70:7a:b7:5d:dd:04:c0:a1:cc:2a:
e9:29:87:93:eb:72:9c:99:da:9a:63:53:6d:02:38:15:b2:f0:
e6:fd:b5:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 30 09:00:30 2025 by rpki-client