Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
File: QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer (raw, json)
Hash identifier: Wk42WQu3c5aKQMw8Rj8HeiEGbzttB2ei4cVrxgQ6PaE=
Subject key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023A4A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
Certificate not before: Thu 27 Mar 2025 21:42:22 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 38895
IP: 27.0.0.0/22
IP: 43.198.0.0 -- 43.221.255.255
IP: 43.249.44.0/22
IP: 103.246.148.0/22
IP: 203.83.220.0/22
IP: 2406:da00::/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145994 (0x23a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 27 21:42:22 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:63:48:d7:4d:f6:67:8b:ee:0b:67:0d:e3:
41:48:aa:3a:82:2d:3d:a3:7d:85:b0:c9:24:e0:66:
ea:f1:56:94:bc:1d:34:72:04:ca:14:20:ce:87:55:
e3:1b:a0:6a:41:04:7e:79:80:a2:36:7a:82:05:50:
24:ea:89:d3:7f:f3:67:d1:e4:7d:10:95:af:01:0d:
20:ea:3c:a1:f4:a6:69:8f:04:9a:e3:a2:e5:66:20:
c4:b3:53:af:ee:4a:b0:3f:86:4c:4f:18:4e:96:ed:
24:62:b3:2c:1c:7a:dd:0a:27:f8:78:6b:de:6a:96:
ac:eb:b7:f3:42:99:8a:24:3e:27:b0:53:93:25:6e:
36:01:03:02:6a:9f:9f:3b:cc:31:44:17:b1:d5:39:
00:7f:82:d4:b2:43:09:c9:08:9e:2a:e8:e2:8f:7a:
28:92:0c:57:0a:15:85:42:53:0f:6b:a3:d9:ce:0a:
d0:ca:b2:95:d4:31:04:d3:69:93:70:21:ea:8d:ba:
24:0e:60:67:5f:52:28:92:ef:11:95:08:57:33:00:
48:42:9f:8d:c2:94:1b:38:81:d0:aa:8a:d3:2b:ef:
ec:ee:fa:3e:c1:32:37:a5:cc:78:12:90:7d:1d:96:
f4:49:95:9d:62:76:aa:30:34:30:9c:24:bb:ef:42:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38895
sbgp-ipAddrBlock: critical
IPv4:
27.0.0.0/22
43.198.0.0-43.221.255.255
43.249.44.0/22
103.246.148.0/22
203.83.220.0/22
IPv6:
2406:da00::/24
Signature Algorithm: sha256WithRSAEncryption
2a:a7:f9:fc:d9:fd:d3:50:20:06:b2:71:37:e8:1a:63:cf:49:
06:d6:8e:80:57:cc:ad:7c:da:f2:be:27:ad:70:5d:6c:a3:c6:
1f:7a:a7:91:5a:c0:21:68:8f:b6:45:ab:da:70:17:9c:40:c7:
42:06:6e:6d:0a:57:7c:c6:f0:2b:33:dc:73:fa:e7:f1:2b:28:
08:f5:80:0d:e9:f7:2c:73:e5:fa:f3:27:82:92:e8:79:4f:04:
3b:1d:1d:c4:06:20:8d:f8:d1:80:e5:79:52:07:58:a6:66:2f:
9b:fc:40:87:97:6b:f3:03:d9:72:99:e1:84:85:b0:8e:3d:df:
6d:db:bc:7b:6c:55:9f:25:7c:d1:5b:dc:b3:9c:8a:a0:05:75:
ad:c6:b1:eb:22:c9:ef:d2:1c:99:83:0b:70:7c:f4:61:3d:38:
b3:3e:a5:0c:e5:42:e9:9a:3f:1b:07:54:df:50:95:5e:6b:dd:
fa:99:f6:e7:eb:ea:84:59:e3:ac:cc:c7:f7:ab:69:86:ff:d8:
0b:86:c3:d3:64:bd:a6:6c:6b:5f:76:15:fe:04:d2:3c:1b:30:
4d:e9:ee:e0:e3:5c:ab:73:92:74:81:c2:ac:a9:ea:ba:70:c8:
10:19:0c:d3:d0:e0:bb:86:f2:a5:75:f6:4d:a4:86:6e:a8:39:
7e:99:17:77
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgIDAjpKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMyNzIxNDIyMloXDTI2MDUwMTAwMDAwMFowSjEVMBMG
A1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0RDJDNjZEMkUx
MDQzNkZFNjVFOTNFOEMxQkQ0QTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzBNjSNdN9meL7gtnDeNBSKo6gi09o32FsMkk4Gbq8VaUvB00cgTKFCDO
h1XjG6BqQQR+eYCiNnqCBVAk6onTf/Nn0eR9EJWvAQ0g6jyh9KZpjwSa46LlZiDE
s1Ov7kqwP4ZMTxhOlu0kYrMsHHrdCif4eGveapas67fzQpmKJD4nsFOTJW42AQMC
ap+fO8wxRBex1TkAf4LUskMJyQieKujij3ookgxXChWFQlMPa6PZzgrQyrKV1DEE
02mTcCHqjbokDmBnX1Ioku8RlQhXMwBIQp+NwpQbOIHQqorTK+/s7vo+wTI3pcx4
EpB9HZb0SZWdYnaqMDQwnCS770IUSwIDAQABo4IDijCCA4YwHQYDVR0OBBYEFEB2
glUk0sZtLhBDb+Zek+jBvUo3MB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBdwYIKwYBBQUHAQsEggFpMIIBZTBjBggr
BgEFBQcwBYZXcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6
b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJl
YzkyNjEvZGM1Y2I4NmEtYjcyZC00ZWNhLWIzNTEtYzUwMGFjZTI4YzY1Lm1mdDBw
BggrBgEFBQcwDYZkaHR0cHM6Ly9ycGtpLXJyZHAudXMtZWFzdC0yLmFtYXpvbmF3
cy5jb20vcnJkcC8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv
bm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAl+8wSwYI
KwYBBQUHAQcBAf8EPDA6MCoEAgABMCQDBAIbAAAwCgMDASvGAwMBK9wDBAIr+SwD
BAJn9pQDBALLU9wwDAQCAAIwBgMEACQG2jANBgkqhkiG9w0BAQsFAAOCAQEAKqf5
/Nn901AgBrJxN+gaY89JBtaOgFfMrXza8r4nrXBdbKPGH3qnkVrAIWiPtkWr2nAX
nEDHQgZubQpXfMbwKzPcc/rn8SsoCPWADen3LHPl+vMngpLoeU8EOx0dxAYgjfjR
gOV5UgdYpmYvm/xAh5dr8wPZcpnhhIWwjj3fbdu8e2xVnyV80Vvcs5yKoAV1rcax
6yLJ79IcmYMLcHz0YT04sz6lDOVC6Zo/GwdU31CVXmvd+pn25+vqhFnjrMzH96tp
hv/YC4bD02S9pmxrX3YV/gTSPBswTenu4ONcq3OSdIHCrKnqunDIEBkM09Dgu4by
pXX2TaSGbqg5fpkXdw==
-----END CERTIFICATE-----
Generated at Fri May 30 08:21:01 2025 by rpki-client