Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer (raw, json)
Hash identifier: imqSK0mfE9pbHhwnn3mdX4Gvo2Cd4fsp99a9hPw0LTg=
Subject key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025432
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Jul 2025 13:25:37 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 131332
IP: 103.24.134.0/24
IP: 103.163.4.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152626 (0x25432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 8 13:25:37 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:67:2f:73:aa:d1:18:14:ba:f9:30:fc:35:
6f:06:c4:bd:4b:7e:df:53:33:a2:15:cf:99:3f:c4:
a1:12:8a:c3:cc:90:61:99:b0:e3:36:33:85:90:33:
f9:e9:01:8a:51:dd:7f:8f:16:2d:52:28:41:8e:41:
16:d7:61:ed:84:6e:a8:ed:c9:84:4f:d0:f2:9b:55:
bc:04:00:e2:15:89:df:5a:be:c2:53:7b:ae:a2:bf:
63:ff:bf:10:be:55:3b:54:c8:f7:cc:8c:8b:ff:b8:
35:fa:21:8a:44:9e:0c:0e:e3:12:c3:30:7b:c1:46:
c0:20:f9:78:9a:f2:7b:55:cd:13:9a:94:b4:05:8a:
2c:76:31:d0:57:98:35:58:5e:14:a8:71:19:47:86:
bf:bc:c3:37:8a:32:67:4b:ec:b9:04:36:df:9c:03:
3b:23:f3:b6:3c:99:a8:9c:c9:1a:93:21:77:df:d2:
19:18:28:90:b3:99:4f:94:b6:cf:c3:ce:bb:b3:15:
43:24:3a:3a:a7:28:be:74:8c:6f:f1:7d:33:bc:a0:
06:e0:97:1b:f0:d3:ef:53:11:0f:28:2c:a7:f7:5c:
b1:ea:e4:fb:53:8c:e9:a2:52:93:a5:9c:ab:79:d3:
d8:bb:41:41:18:76:ba:2a:86:79:da:e0:ea:7f:76:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131332
sbgp-ipAddrBlock: critical
IPv4:
103.24.134.0/24
103.163.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cf:48:ad:c3:02:af:92:82:6a:2e:6a:2b:26:0f:bb:86:14:
c5:a8:cb:92:ed:31:c8:4a:ab:c0:26:ad:92:31:03:28:cb:2e:
c4:88:80:aa:fa:e4:b9:9d:d3:1b:94:ff:fb:6a:fe:9c:3f:38:
aa:87:8e:17:28:e1:78:1a:71:98:2b:3e:b6:70:5a:14:fb:02:
e5:db:10:4c:bb:1e:85:39:a8:e1:38:71:e1:1c:f1:6d:fb:73:
f1:17:de:fa:25:cf:42:cb:4b:84:59:fe:7a:5a:4a:9c:8c:b0:
4f:0f:47:0b:1b:db:de:d3:f9:9e:2a:b0:c6:67:dd:1e:6d:60:
cc:58:9c:cb:d2:34:e2:ff:d7:23:75:ce:25:df:e5:96:3c:e2:
d8:28:29:bd:ea:7d:d7:37:08:8d:ed:72:0b:a8:0e:d1:19:85:
76:e2:52:9f:25:43:5e:21:05:80:74:be:3e:7f:33:02:d2:3a:
fd:dc:69:21:63:74:fb:f0:2f:09:bb:d3:31:dc:2e:5e:4c:92:
9e:7c:26:64:b5:be:e6:06:9d:a8:d4:3f:de:ad:87:bb:97:73:
99:10:cc:3d:fc:5a:77:74:d8:f4:11:55:e3:55:03:b7:42:72:
10:50:e3:64:e7:00:ad:f2:be:37:cc:dd:0b:82:ea:20:8e:dd:
e4:e4:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:13 2025 by rpki-client