![](/console.gif)
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
File: rC4NP0JyIX_vudMtzhozLelqOF4.cer (raw, json)
Hash identifier: 4R+1jPip1FbYB7UqGblyydtYU1Da0R9pHiFgt0iNsVo=
Subject key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021EB4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 Nov 2024 21:00:48 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 139799
IP: 103.145.92.0/23
IP: 2405:7f40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138932 (0x21eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 29 21:00:48 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91DD5E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:ca:62:52:a0:47:4f:97:81:03:de:cf:da:
7d:3a:b9:eb:35:62:90:62:46:04:32:9b:4f:9b:72:
84:3f:5a:de:6a:b9:c1:a6:d4:91:03:6b:02:a5:ea:
7e:e4:ab:a8:96:34:06:e7:4e:bd:f3:85:a4:94:1e:
e1:ae:5e:40:e6:d8:f0:0a:8e:c9:a8:67:61:5c:75:
99:47:1a:3e:a6:2e:57:29:f4:f7:d1:8d:14:5e:78:
3d:75:6e:f2:91:ec:2a:02:11:7d:2c:4d:52:10:99:
b7:d1:9f:9e:1b:92:3f:ea:a4:db:e4:81:46:96:9c:
b5:7b:56:70:3d:da:c9:c2:5d:3e:ab:9a:a2:88:11:
d5:9e:b4:b8:4b:9a:c5:e2:8e:48:be:bb:a9:c3:40:
67:dc:ce:64:97:b2:e0:2f:65:fb:d8:d0:96:14:08:
d4:b2:81:05:a7:76:af:de:b8:91:d6:23:91:34:38:
ee:c9:48:8c:a8:70:cf:55:8a:5d:c6:18:e0:04:e7:
c0:e0:57:e8:d1:e1:9d:7f:fe:ec:85:22:f0:6b:d1:
57:3c:9a:c3:2c:f1:b1:d5:7d:92:4c:77:6b:1b:98:
12:d4:d1:5a:db:0d:08:0d:a9:16:ce:b9:a2:e9:8a:
c6:c7:1f:76:36:40:e3:c2:97:44:68:a8:24:bd:94:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139799
sbgp-ipAddrBlock: critical
IPv4:
103.145.92.0/23
IPv6:
2405:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
a8:55:f4:f5:86:ef:38:02:cc:0c:dd:95:c4:e4:8c:cb:0f:ba:
24:8a:cf:cd:9f:47:84:f4:93:99:23:7c:a4:02:62:cf:08:31:
f9:13:fc:e7:a8:2b:53:63:e2:bd:8f:9d:54:08:45:ad:56:11:
15:19:bd:b2:5c:de:66:3a:77:9c:90:6c:1c:ef:f1:fe:b1:10:
5c:7c:f7:82:bd:1a:12:a6:9c:07:ed:5c:c0:5e:e9:56:3e:a1:
88:23:b7:da:9c:96:a3:e1:a1:6c:c2:81:68:b3:36:6d:96:35:
60:a6:75:36:b2:99:76:8f:81:a6:32:58:a9:e6:0a:9e:cb:57:
3f:b1:c2:ad:8f:55:a5:f2:14:17:68:23:03:53:e3:26:d0:bd:
87:40:82:b3:01:7c:d4:09:17:02:0c:a8:10:d9:0b:06:ca:dd:
30:ce:78:e6:b4:43:71:b8:19:60:bf:56:a1:4a:99:1a:3e:51:
6e:fe:60:f6:0d:e6:53:dd:75:6d:f1:31:2b:cd:af:79:8d:ff:
bc:e6:4c:e1:5a:62:73:b1:bf:cc:32:40:72:7b:2a:64:d8:44:
f3:f7:f2:20:33:c1:33:cf:a9:27:bd:9f:33:78:3c:dc:40:6b:
2c:b3:bb:85:f8:f9:0f:b1:1e:dc:b2:54:c4:1d:3d:44:a9:b0:
a3:e3:9a:c7
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAh60MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyOTIxMDA0OFoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREQ1RTExMTAvBgNVBAUTKEFDMkUwRDNGNDI3MjIxN0ZFRkI5RDMy
RENFMUEzMzJERTk2QTM4NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE5cpiUqBHT5eBA97P2n06ues1YpBiRgQym0+bcoQ/Wt5qucGm1JEDawKl6n7k
q6iWNAbnTr3zhaSUHuGuXkDm2PAKjsmoZ2FcdZlHGj6mLlcp9PfRjRReeD11bvKR
7CoCEX0sTVIQmbfRn54bkj/qpNvkgUaWnLV7VnA92snCXT6rmqKIEdWetLhLmsXi
jki+u6nDQGfczmSXsuAvZfvY0JYUCNSygQWndq/euJHWI5E0OO7JSIyocM9Vil3G
GOAE58DgV+jR4Z1//uyFIvBr0Vc8msMs8bHVfZJMd2sbmBLU0VrbDQgNqRbOuaLp
isbHH3Y2QOPCl0RoqCS9lAY7AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUrC4NP0Jy
IX/vudMtzhozLelqOF4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURENUUxLzE2NUI3QkY2QkM2RTExRUFBNUNCMDM3REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERDVFMS8xNjVCN0JGNkJDNkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBK
eUlYX3Z1ZE10emhvekxlbHFPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiIXMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5FcMA0EAgAC
MAcDBQAkBX9AMA0GCSqGSIb3DQEBCwUAA4IBAQCoVfT1hu84AswM3ZXE5IzLD7ok
is/Nn0eE9JOZI3ykAmLPCDH5E/znqCtTY+K9j51UCEWtVhEVGb2yXN5mOneckGwc
7/H+sRBcfPeCvRoSppwH7VzAXulWPqGII7fanJaj4aFswoFoszZtljVgpnU2spl2
j4GmMlip5gqey1c/scKtj1Wl8hQXaCMDU+Mm0L2HQIKzAXzUCRcCDKgQ2QsGyt0w
znjmtENxuBlgv1ahSpkaPlFu/mD2DeZT3XVt8TErza95jf+85kzhWmJzsb/MMkBy
eypk2ETz9/IgM8Ezz6knvZ8zeDzcQGsss7uF+PkPsR7cslTEHT1EqbCj45rH
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:33 2025 by rpki-client