Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer
File: cGjaz2pbXiZfvAzluaSV8Im24FA.cer (raw, json)
Hash identifier: CJGXl0Ut2kzkX4fmdPDA/mta5c2YTkuogRxjw9B12tE=
Subject key identifier: 70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D9EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 00:36:26 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142418
IP: 163.128.247.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186858 (0x2d9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 00:36:26 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A914DB80, serialNumber=7068DACF6A5B5E265FBC0CE5B9A495F089B6E050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:69:09:9b:b5:0b:ef:89:84:46:5e:6e:4a:cf:
5b:7c:65:2e:42:21:f8:ba:35:09:63:74:1b:b2:38:
dd:d5:ad:98:b1:e4:33:eb:75:2b:76:38:fc:3f:8d:
2b:ff:72:1f:fa:29:08:6d:16:d1:5a:86:fb:ce:df:
bb:9d:b4:f4:4a:ff:65:83:00:09:ea:65:ac:75:c3:
5f:15:cb:9d:47:ac:83:9a:f6:e9:54:9a:01:4e:9c:
20:c7:6e:19:77:62:fe:4b:b4:54:89:e6:ee:0c:b1:
3b:78:19:bb:b8:8d:0d:6b:bd:c8:f2:36:aa:75:47:
86:56:95:7b:43:76:39:0c:de:c3:26:39:c5:6b:d3:
dc:ab:05:b2:eb:aa:00:08:3c:ea:fb:2e:18:48:7a:
81:0e:66:62:81:c5:14:91:a0:87:cd:79:14:6e:22:
09:bc:62:f8:34:dc:38:6f:1e:b5:06:d3:6e:dd:cf:
45:74:80:bc:d9:e9:b7:da:9c:67:c9:8c:a2:9e:ce:
f1:22:b2:9d:ad:66:4e:b0:0b:82:47:70:80:28:11:
24:5b:6b:43:f4:b0:10:37:c5:14:fa:38:98:51:66:
a3:37:fd:1a:b2:06:54:4a:c8:03:c4:d8:1b:36:6c:
00:dc:70:73:4a:c6:7d:11:a6:06:12:fc:98:4d:bd:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142418
sbgp-ipAddrBlock: critical
IPv4:
163.128.247.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d7:9a:d1:cf:3e:b5:46:e3:cf:ac:0e:a1:2d:43:c6:96:25:
62:2c:45:0d:f2:3b:51:b2:bf:ff:66:47:3c:80:17:3d:99:77:
5e:59:d9:31:b5:66:5f:74:90:b2:49:cc:09:76:2b:1c:14:33:
c4:66:b9:de:d2:63:d7:92:e6:c1:bb:98:90:a0:db:36:2f:28:
80:fa:0d:63:a1:3f:47:2b:63:40:5e:24:23:d5:bc:17:aa:6d:
1c:72:81:ac:37:7e:96:79:72:23:c7:58:30:1b:52:74:50:37:
0b:57:d0:6e:55:ad:42:06:c6:be:8c:9c:8f:d0:11:6e:2e:67:
cc:6c:f6:83:ff:20:78:02:c6:94:be:f6:3e:21:52:77:0e:d9:
aa:81:e2:2e:ac:10:a9:e4:74:ef:5b:79:c9:be:28:d6:ed:92:
0f:07:91:15:0d:4d:c6:02:aa:98:b0:46:6a:12:39:67:32:f6:
70:54:61:25:b5:8b:ca:e6:8b:1b:44:73:cf:55:7d:ad:8d:37:
66:91:06:d1:b6:66:36:74:9b:c3:de:a4:a0:49:be:30:a4:9d:
c9:42:21:94:54:8d:bb:76:a0:e5:ee:f3:fc:35:2f:e2:70:0e:
71:b5:c6:52:d3:25:22:22:ed:cd:20:c3:97:5f:e1:56:8a:af:
5e:f9:6b:9f
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAtnqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MTAwMTAwMzYyNloXDTI3MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNERCODAxMTAvBgNVBAUTKDcwNjhEQUNGNkE1QjVFMjY1RkJDMENF
NUI5QTQ5NUYwODlCNkUwNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsaQmbtQvviYRGXm5Kz1t8ZS5CIfi6NQljdBuyON3VrZix5DPrdSt2OPw/jSv/
ch/6KQhtFtFahvvO37udtPRK/2WDAAnqZax1w18Vy51HrIOa9ulUmgFOnCDHbhl3
Yv5LtFSJ5u4MsTt4Gbu4jQ1rvcjyNqp1R4ZWlXtDdjkM3sMmOcVr09yrBbLrqgAI
POr7LhhIeoEOZmKBxRSRoIfNeRRuIgm8Yvg03DhvHrUG027dz0V0gLzZ6bfanGfJ
jKKezvEisp2tZk6wC4JHcIAoESRba0P0sBA3xRT6OJhRZqM3/RqyBlRKyAPE2Bs2
bADccHNKxn0RpgYS/JhNvZ91AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUcGjaz2pb
XiZfvAzluaSV8Im24FAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTREQjgwLzFGODkyRDQ0QkQzMDExRjE5QjE1ODlDQzUxMTFGOTcwLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0REI4MC8xRjg5MkQ0NEJEMzAxMUYxOUIxNTg5Q0M1MTExRjk3MC9jR2phejJw
YlhpWmZ2QXpsdWFTVjhJbTI0RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAixSMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo4D3MA0GCSqG
SIb3DQEBCwUAA4IBAQCG15rRzz61RuPPrA6hLUPGliViLEUN8jtRsr//Zkc8gBc9
mXdeWdkxtWZfdJCyScwJdiscFDPEZrne0mPXkubBu5iQoNs2LyiA+g1joT9HK2NA
XiQj1bwXqm0ccoGsN36WeXIjx1gwG1J0UDcLV9BuVa1CBsa+jJyP0BFuLmfMbPaD
/yB4AsaUvvY+IVJ3DtmqgeIurBCp5HTvW3nJvijW7ZIPB5EVDU3GAqqYsEZqEjln
MvZwVGEltYvK5osbRHPPVX2tjTdmkQbRtmY2dJvD3qSgSb4wpJ3JQiGUVI27dqDl
7vP8NS/icA5xtcZS0yUiIu3NIMOXX+FWiq9e+Wuf
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:43:52 2026 by rpki-client