Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer (raw, json)
Hash identifier: ISKaVPKZQojGFFmJvctro781AAimoGptEjM/2XA0QnY=
Subject key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0226E8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Jan 2025 21:35:09 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 38017
AS: 139674
IP: 103.147.56.0/23
IP: 202.59.128.0/20
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141032 (0x226e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 2 21:35:09 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91CB816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:a0:84:cc:56:17:63:4c:f6:34:4f:e6:31:
99:10:ea:1d:d0:76:48:2b:b0:54:49:82:db:bc:a1:
49:a4:48:63:3a:cc:ee:3d:b9:d9:37:66:78:66:a1:
96:98:9c:d2:b7:2c:f5:83:74:fd:45:7c:02:e0:61:
52:b1:7e:81:c8:06:9f:f2:fc:97:4b:03:05:ba:72:
b2:21:81:e6:3b:ea:ca:bb:4c:b5:8b:9d:98:26:a0:
df:ab:39:ae:ea:d6:ec:4e:8c:66:2e:c2:78:ab:57:
84:e7:f6:c0:50:46:72:b6:f9:f0:68:79:e9:0d:71:
f0:82:a0:32:55:9e:e1:02:be:39:c6:7d:f6:d2:00:
6d:04:34:b1:e6:9a:12:41:41:9a:cc:f8:46:e2:ff:
4f:55:e1:6b:8a:9d:43:89:1a:a4:dd:08:8e:74:57:
98:d1:8a:84:65:7e:ff:d8:fc:cd:86:52:de:8e:61:
bb:12:07:4b:25:ba:5b:fa:8c:38:c8:6d:94:45:bb:
9a:f3:97:26:25:35:18:df:1c:fe:3f:86:c5:d0:97:
b9:56:9b:b7:7d:f4:da:db:89:d7:01:e4:8f:f5:19:
a2:ad:52:fe:e9:4b:86:b5:21:a5:87:a3:47:9e:a3:
c2:68:27:09:b1:2c:09:cf:22:da:f9:3c:83:56:99:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38017
139674
sbgp-ipAddrBlock: critical
IPv4:
103.147.56.0/23
202.59.128.0/20
Signature Algorithm: sha256WithRSAEncryption
61:27:ac:77:bd:10:d9:b6:06:f4:90:59:1d:1d:79:15:16:e5:
2d:b9:87:ac:13:00:2b:b3:f4:5a:28:6e:ae:c3:fd:0d:c6:ae:
5f:30:a1:54:31:b9:38:f7:52:a7:e9:78:06:1a:68:fe:b9:a2:
84:07:5e:cd:ec:3e:52:21:d5:ec:75:e7:13:a0:b6:f4:90:4e:
ca:b4:91:88:d5:44:90:b3:0a:00:87:57:6d:01:03:47:11:f0:
70:28:51:72:d8:b5:61:a4:6d:60:19:26:cf:9c:78:bb:e4:c2:
b3:4f:4c:85:c2:5e:66:0c:83:e3:4e:6a:4e:15:ee:73:3e:9b:
5c:d4:06:bb:63:1f:83:fa:28:c0:85:c5:fd:7a:ba:63:62:bd:
46:4b:e0:2a:dc:d8:c0:70:e5:6f:ff:3c:1c:a2:35:46:8d:eb:
ca:b0:1b:31:4d:07:84:1b:0a:bf:c4:23:6a:ba:6d:21:c8:12:
f6:3b:de:88:d3:de:dd:1f:98:81:bf:7d:c7:dd:3d:89:d8:0e:
ae:35:be:78:65:f6:0b:1a:78:2f:c8:71:22:43:10:65:4b:a0:
2a:7a:3d:1a:a6:be:0d:06:37:e7:12:99:da:b1:0b:b1:87:db:
22:c5:d9:33:2f:9c:98:45:d1:de:3d:d9:ac:ef:b3:58:a4:e2:
e9:4c:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:21 2025 by rpki-client