Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer
File: LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer (raw, json)
Hash identifier: rIIc5CrBUIfvfGMJtYKrun6laqYx/aHRxwHwJ0Mtxj4=
Subject key identifier: 2E:01:EC:E1:9E:E0:93:D1:56:E2:EF:AF:B5:02:F8:CB:C2:F4:23:D6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CD30
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft
caRepository: rsync://rsync.cernet.net/repo/cntcl/0/
Notify URL: https://rpki.cernet.net/rrdp/notification.xml
Certificate not before: Fri 14 Aug 2026 01:30:08 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 133111
AS: 133508
AS: 133511 -- 133519
AS: 135501 -- 135508
IP: 43.252.48.0/22
IP: 103.226.80.0/22
IP: 2400:a980::/29
IP: 240d:4000::/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183600 (0x2cd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 14 01:30:08 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9148D520000, serialNumber=2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:12:59:db:6c:02:69:76:21:df:1e:ec:d5:
ec:44:c4:63:8f:8d:28:b5:31:19:01:d0:84:a6:a8:
d8:b4:49:21:74:18:4c:3e:a6:e4:6d:0b:78:b9:dd:
b9:ca:fa:19:cd:ad:b8:67:81:99:50:b2:06:b3:04:
b3:09:7d:07:c5:62:83:c2:09:d6:e1:b3:22:18:a6:
13:f4:5d:ce:57:f8:c2:ab:41:7a:da:c4:a6:63:ef:
7b:64:19:40:b8:d2:78:59:27:d7:e5:7a:64:16:86:
46:a1:9a:31:16:71:d0:03:38:30:14:52:50:d0:cb:
1b:e1:30:1a:f8:d9:a5:35:dc:0a:a7:e0:2b:a8:2c:
9f:00:81:79:4f:5e:b2:e7:45:d6:69:4f:18:3c:2d:
1d:1a:e9:b7:b6:6a:db:26:00:ba:6c:f3:74:ce:8a:
ff:ca:f3:a1:bf:79:fd:74:27:59:8a:56:ee:8c:fe:
94:b8:0c:54:5b:1c:4d:8a:ee:bd:a9:15:13:e2:ca:
e8:3c:f2:a6:58:75:20:80:e9:ef:f4:e1:41:be:05:
0c:45:fd:f9:4a:20:dd:54:f5:d4:a1:75:08:21:bd:
bf:48:e5:0d:8a:24:72:3e:91:80:07:84:d3:53:a3:
a1:b1:83:44:b0:10:20:62:9b:76:a9:a2:cc:62:25:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:EC:E1:9E:E0:93:D1:56:E2:EF:AF:B5:02:F8:CB:C2:F4:23:D6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.cernet.net/repo/cntcl/0/
RPKI Manifest - URI:rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft
RPKI Notify - URI:https://rpki.cernet.net/rrdp/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133111
133508
133511-133519
135501-135508
sbgp-ipAddrBlock: critical
IPv4:
43.252.48.0/22
103.226.80.0/22
IPv6:
2400:a980::/29
240d:4000::/21
Signature Algorithm: sha256WithRSAEncryption
c5:e7:67:30:bb:05:aa:3d:13:78:ce:1f:a8:9a:61:95:43:4e:
04:54:cc:b7:41:36:a6:cb:90:b8:ba:13:fc:bb:e0:62:20:95:
cb:85:0b:83:fd:37:de:a8:21:02:23:e1:d9:7e:e1:9a:85:e8:
49:f6:55:d1:ce:81:0e:f9:66:e7:da:7e:17:09:51:3b:5d:cc:
75:c3:4a:d7:84:30:76:3c:ce:0f:33:f6:9c:a8:d1:16:14:f7:
d3:21:b3:81:99:25:3a:bc:29:b7:f8:d8:6c:0e:cd:57:d4:ea:
e5:4d:30:c8:25:7c:44:63:c5:8a:91:83:fb:d3:75:14:07:95:
fa:c3:4d:23:95:0b:60:16:ac:3a:83:04:b6:b9:e0:60:e3:e4:
e9:6e:02:95:64:61:bc:86:33:51:bc:91:74:62:32:c1:d5:27:
2a:94:1c:bd:bd:88:80:a9:c7:5a:b0:93:86:90:12:cd:0f:55:
1a:0c:f3:61:87:7d:c8:67:06:db:1e:dd:0f:69:29:2c:d9:01:
d2:fa:62:38:c6:24:df:5e:ee:fe:77:ed:66:a4:c1:8a:5d:11:
2f:6f:fc:4a:0b:71:ba:c5:fc:b8:7a:4e:25:4e:cd:5a:39:b1:
50:55:cf:49:0b:ea:42:cc:33:d3:34:1d:e1:78:6f:b6:ad:60:
c1:1a:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:06 2026 by rpki-client