
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/moOQ_87kYoLKpxzdePBmlPjT1bY.cer
File: moOQ_87kYoLKpxzdePBmlPjT1bY.cer (raw, json)
Hash identifier: EtPANxfboNkbS2xJfX4bNwq0fzdwP6v9JGgC0ydpvjM=
Subject key identifier: 9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025269
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Jul 2025 03:31:19 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 142149
IP: 103.166.236.0/24
IP: 103.167.181.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152169 (0x25269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 03:31:19 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A918B531, serialNumber=9A8390FFCEE46282CAA71CDD78F06694F8D3D5B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:2e:c8:ee:d2:29:f6:b6:0b:c1:33:91:fe:
ef:b1:61:1d:ab:df:ea:89:5b:89:b6:d2:05:c3:53:
93:a1:1b:9f:3d:49:6b:e2:c3:6f:7a:ea:dd:e8:a9:
3b:87:38:bc:f6:df:f2:1a:42:c6:44:92:fe:77:8c:
8c:81:7b:fd:6b:5c:94:19:87:ec:f8:2a:79:b1:f2:
1d:7c:67:bd:d7:cb:69:f3:40:f0:44:37:1c:93:f0:
56:83:5d:b4:fd:8e:72:4e:24:a2:f6:29:5d:42:d1:
de:a1:a6:af:81:4b:6f:4c:46:c4:2f:9d:42:93:a3:
f5:eb:4c:4d:0b:e9:cd:d5:cd:d4:be:5f:16:11:51:
06:6f:60:d0:d5:30:af:79:1b:f5:02:f7:a4:97:01:
70:db:f8:d2:1c:8c:b5:e0:32:d5:ba:98:86:78:2e:
ba:16:d3:46:18:ca:2d:77:00:80:ed:ed:fe:c8:0a:
74:87:de:0e:58:7a:68:9f:a0:1c:7c:7b:7a:16:63:
2d:4e:52:f1:0b:ee:61:32:a3:75:5d:cd:e4:da:a0:
5c:5a:16:0e:33:2d:98:5e:1f:07:b1:3b:39:55:eb:
9c:b8:44:e9:ce:41:89:70:1d:4c:8e:e8:f9:92:e3:
5b:f6:07:72:fe:44:ac:a3:72:ae:5f:1d:80:a9:93:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:83:90:FF:CE:E4:62:82:CA:A7:1C:DD:78:F0:66:94:F8:D3:D5:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B531/0184945256F511F0B8394B84C4F9AE02/moOQ_87kYoLKpxzdePBmlPjT1bY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142149
sbgp-ipAddrBlock: critical
IPv4:
103.166.236.0/24
103.167.181.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:eb:72:96:40:d7:88:38:33:05:47:d4:0c:ca:62:72:84:b5:
38:76:ff:60:b2:bf:c4:31:e0:08:d2:7f:65:89:5c:3c:a5:e0:
6b:c3:d4:af:aa:5c:81:7b:89:0d:59:81:29:97:b3:f5:20:2d:
89:a8:92:5d:c2:59:dc:c8:db:58:b2:b5:d1:a4:17:d8:26:ce:
f0:63:a6:43:3f:c7:5c:67:1d:49:af:61:82:e8:22:49:d9:98:
f6:69:29:9a:f6:bb:7f:66:e4:64:f9:79:3c:63:16:93:0e:ad:
d8:72:13:61:f8:e0:57:22:f3:1d:33:48:9f:a4:cd:f7:ba:d4:
1d:fd:0a:98:de:75:eb:48:da:01:b9:37:ff:00:6c:82:6f:e8:
48:44:48:29:52:84:0a:a6:40:86:3e:15:4e:c3:4f:f8:4a:3f:
67:86:5d:30:58:6e:08:3f:02:d2:10:f0:b0:d3:17:e2:ce:02:
17:3c:01:49:71:33:7c:d3:10:01:82:2e:88:1c:b9:dd:0d:b9:
77:ee:52:ba:b8:03:bd:97:3a:64:42:1f:f3:7f:b8:34:b2:05:
4b:1b:40:47:7b:4c:0a:af:ea:17:7f:f4:f9:b8:98:dd:82:a9:
1c:e6:04:7e:65:2d:c9:7e:28:a9:77:6c:00:de:04:6c:6a:6d:
fc:e0:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:38:03 2025 by rpki-client