Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
File: bthM_0l2uSPjFQlkdt1mI-Sci3k.cer (raw, json)
Hash identifier: /ssHEZKS3DcB+nWljHerFz/iGy2/nFDAVb11BdQ7dyA=
Subject key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0253C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 04 Jul 2025 23:37:37 +0000
Certificate not after: Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 151642
IP: 103.244.226.0/23
IP: 2001:df2:c1c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152521 (0x253c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 4 23:37:37 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:eb:f4:eb:c9:2f:91:9d:05:7c:70:eb:36:
40:f3:09:f5:0e:4d:09:79:90:02:04:a2:14:cd:17:
80:12:21:40:b4:92:6c:23:b4:29:fa:0b:c1:d9:43:
cd:1a:70:1d:51:8e:02:0d:92:e4:7e:00:d5:63:be:
74:9b:91:39:cd:46:5a:36:e4:a2:73:36:45:bf:d7:
b4:94:aa:d2:eb:0b:e5:dc:24:c3:94:5e:e3:c6:56:
e5:24:75:98:cd:a9:e5:a9:68:a5:35:0d:6c:ad:f9:
e0:a5:98:88:60:0e:a9:a3:60:c5:a8:8b:10:72:9f:
62:25:f6:e8:f2:14:96:a7:13:ef:30:89:c7:ee:88:
3e:53:ae:ea:87:f0:22:63:32:ca:3b:36:30:b2:af:
b2:70:d4:87:e0:fe:42:23:c5:d5:e9:79:6e:e8:d7:
fb:85:0a:d2:fd:e8:99:3e:88:ea:9a:09:82:8b:41:
08:0b:42:23:7a:c8:a2:cb:3f:d6:48:fa:3c:48:14:
e6:8a:bf:07:c9:d4:4c:ba:4b:63:c9:9c:60:39:dd:
52:ad:d6:9e:e5:09:d6:97:68:97:33:b3:f2:a3:6d:
82:81:a4:6a:0c:c6:c4:d1:ba:18:6b:f7:6a:29:58:
0d:e9:4b:f3:e1:29:05:db:63:eb:41:73:f2:6d:7f:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151642
sbgp-ipAddrBlock: critical
IPv4:
103.244.226.0/23
IPv6:
2001:df2:c1c0::/48
Signature Algorithm: sha256WithRSAEncryption
35:ce:ec:13:86:42:e8:f3:61:8b:a1:bc:f8:03:6d:77:82:d0:
84:df:84:9a:71:63:1c:f9:4c:ed:93:0c:4b:65:25:92:87:00:
5f:c0:9e:fb:79:6c:f3:b7:16:03:a8:fe:a1:5c:bc:b6:ce:7a:
22:34:70:e9:bf:b3:31:15:1b:b0:45:46:b6:7d:42:4e:9c:4d:
22:82:29:09:5d:6a:22:fd:21:14:a9:6e:72:db:14:aa:88:48:
ea:38:25:c2:0f:da:cb:32:a7:85:12:cc:46:c7:c7:8a:e1:52:
c8:39:b0:4c:12:5a:ae:7c:df:e9:b8:f0:70:53:93:23:59:7d:
48:36:3b:41:ba:9e:3f:2d:75:14:73:b8:63:6a:43:54:8b:20:
2d:4d:26:88:91:f3:ff:09:7c:ba:65:f1:f5:fc:05:21:a2:ac:
e2:83:f5:75:49:19:c3:9d:5a:dc:19:9a:d0:11:c8:bf:4a:00:
45:91:84:80:40:07:19:3f:bb:54:83:e5:62:0e:ca:fc:8a:0a:
0f:65:6c:da:76:38:bd:43:39:04:89:c9:6f:09:13:87:1b:10:
d9:00:06:e6:11:d8:b0:63:90:76:42:08:3f:94:92:0c:60:56:
15:af:8a:da:df:e9:85:21:1c:6f:b2:3f:f8:3f:8a:c5:94:a0:
a7:7e:9f:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 7 04:10:30 2025 by rpki-client