Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer (raw, json)
Hash identifier: AvKTTRctAjpN1VOMwUtOd/HbGhOwaQZcqlCNsffA/Ck=
Subject key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025F3D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 24 Aug 2025 23:24:18 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154161
IP: 45.119.120.0/23
IP: 2001:df6:6c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 15:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155453 (0x25f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 23:24:18 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:2a:ee:d6:06:f0:b0:1d:2c:16:92:80:87:
60:ad:7a:7c:50:2f:cd:c3:8b:bd:4b:c7:01:44:ec:
9f:be:cc:0a:95:39:73:e6:08:e8:ca:3d:01:53:b0:
ab:64:47:f4:b1:0a:04:85:80:cb:c9:bd:8f:b2:d1:
52:6e:6c:ff:c4:9f:a3:4d:f6:63:57:a8:0d:1b:f9:
fa:9b:93:dd:f4:7e:2d:49:c7:e8:6f:34:55:57:fe:
fb:29:b3:25:60:46:51:2a:0c:a4:54:45:01:9b:c1:
52:89:3b:01:92:81:a0:61:58:85:e0:4d:ce:45:b4:
c7:92:6e:2c:36:bc:29:99:d3:19:fa:6e:91:f8:68:
6e:7f:46:a9:35:75:7a:60:b8:c6:e8:c6:59:1d:ac:
f7:a7:ae:27:94:2f:bb:17:e1:bf:be:64:9e:47:ab:
cc:28:1a:7c:7f:b0:92:8d:da:c6:4c:69:e4:24:6e:
d7:94:ff:09:a5:d7:ce:cd:4b:73:90:96:0b:61:1e:
32:2f:6b:7b:e0:1a:e6:03:85:3e:e2:10:d1:b5:64:
66:e9:13:56:20:98:58:88:81:6c:fa:0a:8a:71:38:
30:7f:25:cd:6b:88:a7:b4:29:2c:9b:5c:71:fd:9b:
6e:42:c7:05:fb:de:11:ad:59:51:c4:54:8a:8d:4e:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154161
sbgp-ipAddrBlock: critical
IPv4:
45.119.120.0/23
IPv6:
2001:df6:6c0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:fc:cf:48:56:29:da:b3:ff:f4:8c:0e:e5:c7:bb:6a:50:22:
63:68:06:41:3b:26:ed:e1:07:32:ce:18:dd:83:dc:a8:7c:08:
6e:b3:d9:0f:59:ab:fa:f2:a8:1a:73:90:ad:ca:0b:be:e0:85:
67:91:5b:e7:a7:fd:77:a0:fe:55:77:cd:10:da:ae:b7:63:30:
06:3d:8b:d9:1a:95:9c:73:fa:bd:a2:39:7e:97:82:0f:06:d5:
0f:c6:c7:5b:17:d7:b0:34:9a:ef:d6:c9:25:89:72:8d:df:b9:
1c:bf:cd:58:2d:9a:5f:f3:ba:61:76:29:0b:23:68:79:56:59:
17:63:ea:e0:8b:f3:08:1a:a7:d3:4b:23:26:77:49:42:1a:d3:
dc:37:88:6c:26:d6:e2:52:ed:0c:17:0c:e0:0b:06:8d:34:36:
ac:cc:bf:e1:77:6e:5a:c4:c7:fa:4b:c0:ab:50:1c:12:50:4d:
7a:b6:d7:6b:13:3b:7d:cc:90:af:73:d1:bb:c4:84:f6:9c:19:
91:9c:16:02:93:43:8b:ee:2c:cc:75:6e:f4:6c:08:fe:51:6a:
4c:d3:79:c9:2b:e6:d9:49:72:17:3a:be:fa:82:30:fe:e3:ad:
c7:20:d7:a1:b9:9a:a6:98:7b:01:d1:29:01:08:bc:e9:15:42:
a9:34:4a:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 18 17:18:47 2025 by rpki-client