Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
File: M_QIIWaon_9vMmrgm0S_vvFin-s.cer (raw, json)
Hash identifier: EgmrSSQp0q750V93J+G0xV4Sw/7ur53ic6634fEFiqA=
Subject key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02472E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A91905300000/9/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Mon 19 May 2025 06:43:44 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 9913
IP: 103.233.208.0/22
IP: 202.14.148.0/24
IP: 203.0.80.0/24
IP: 203.1.68.0/23
IP: 203.31.110.0/23
IP: 203.57.23.0/24
IP: 2400:9c20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149294 (0x2472e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 19 06:43:44 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:0a:5a:80:2d:26:c2:12:25:bf:aa:bd:bd:
37:3b:73:29:21:0c:ad:f5:87:37:ea:ea:3c:35:a5:
6c:0b:f9:3a:9a:2f:94:08:a6:54:7c:21:62:59:56:
41:27:96:ee:20:1b:64:3f:35:f9:94:43:80:04:16:
b8:2a:a4:94:35:c8:d2:cf:14:4c:6f:4a:bf:6b:a6:
0c:9a:69:c0:ec:56:e0:95:72:4c:e5:82:0c:43:f2:
79:a3:a0:bf:7d:e5:4a:ee:57:25:1c:08:1c:49:8f:
3e:bb:34:d8:a5:09:a4:c9:ab:8f:28:47:bf:55:a8:
46:b7:49:c8:f2:a1:87:bc:28:71:bf:0d:95:76:29:
4d:fb:1a:2b:3e:82:5a:0c:3d:33:81:a2:28:93:62:
c0:01:ab:4b:6e:e5:47:0b:6f:3f:bd:63:4a:f8:ed:
e0:91:c1:9a:69:97:4e:3f:00:28:e2:5b:54:cd:c5:
67:d5:1c:ae:4c:b8:9b:ec:42:22:8c:6d:01:5a:1d:
23:a2:83:8b:11:61:d1:c8:b3:08:00:67:a5:15:84:
e2:cb:d5:01:89:b4:40:ca:5f:02:58:8e:64:b5:86:
c9:f1:4b:23:54:e6:c9:e8:cd:91:6e:88:fb:54:62:
55:32:f8:8d:77:dc:11:6d:8d:98:59:c3:7f:3e:d7:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9913
sbgp-ipAddrBlock: critical
IPv4:
103.233.208.0/22
202.14.148.0/24
203.0.80.0/24
203.1.68.0/23
203.31.110.0/23
203.57.23.0/24
IPv6:
2400:9c20::/32
Signature Algorithm: sha256WithRSAEncryption
70:9a:92:09:45:ad:0f:d3:a4:b8:72:b9:11:f5:16:44:7d:d1:
f1:ff:76:6f:7c:39:d4:ff:fb:ea:3a:81:9b:db:35:dd:5a:7c:
ca:e8:a9:11:93:92:18:bd:83:b2:dc:03:f3:1d:b9:86:a5:8a:
5d:4c:59:38:8d:f5:a1:bc:89:96:65:92:8d:f4:37:df:a9:16:
63:a9:0c:c8:9e:10:49:b7:22:33:91:d5:ee:f5:60:65:22:11:
b5:5d:8c:00:b3:ce:48:e7:a6:4b:f2:98:e0:60:dd:2b:9b:53:
0b:a1:ba:f8:fb:b9:08:97:ad:14:16:18:25:3a:6b:6d:60:44:
b1:1d:ad:21:ad:8d:0b:35:9b:cf:60:e6:2b:28:a1:a9:62:79:
9c:bb:65:30:79:c0:83:7e:db:18:74:6e:97:0a:5a:26:e1:e4:
31:7e:aa:c1:3c:d3:38:95:3d:fc:95:cb:55:36:05:70:c2:78:
70:d9:59:d4:e0:58:4e:82:45:c7:3d:1c:a0:46:44:98:b3:25:
39:a0:9b:db:94:57:5d:3f:88:bd:e3:fb:bb:2d:03:78:0b:90:
eb:3d:46:62:bf:52:af:97:fe:36:8b:ec:fc:f8:94:9d:be:db:
1c:7e:97:c6:b8:e3:7c:2d:4a:ab:03:4f:6f:f8:24:f7:72:3d:
67:74:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:39:26 2025 by rpki-client