Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer
File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer (raw, json)
Hash identifier: YiwvqebDGfGEHz3wLxEr/uqPjSHjTUjinh1c5py9xS8=
Subject key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C83
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Jun 2025 03:58:15 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 135428
IP: 103.138.184.0/24
IP: 103.219.113.0/24
IP: 2001:df2:1300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150659 (0x24c83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 03:58:15 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:ab:2f:b3:88:aa:7f:bb:04:6e:e4:96:63:
9c:37:1a:75:a4:9b:2c:d3:40:e6:1b:7c:64:05:76:
69:04:a4:85:82:35:d9:09:e8:ef:9a:22:b0:70:84:
fe:0f:cb:15:2b:27:50:7e:ca:c5:d5:a1:e7:31:fb:
4d:10:5e:88:0f:fe:21:f7:5c:f6:cc:73:2e:e6:95:
9a:25:68:dd:ad:4b:27:9b:07:88:55:c7:c4:45:61:
f2:01:5e:00:09:67:6b:3b:d2:6f:9b:01:d9:e4:63:
25:08:98:b6:7c:eb:ac:83:ee:bd:50:a7:61:ca:9a:
65:2c:2e:02:c4:0f:c5:e1:ac:7a:dd:e3:86:02:93:
3c:f6:5e:a2:c9:19:1b:3b:f4:ea:15:cd:a9:28:6a:
eb:d1:a1:13:6f:c0:ef:29:e9:75:1f:12:ed:ab:cd:
02:d0:8d:0d:07:e5:92:55:40:59:29:9f:47:07:73:
94:df:4e:f0:9c:e4:89:01:79:64:49:2e:ec:61:e0:
6f:b2:3d:ee:fd:da:c4:ec:de:36:37:e2:12:c9:1f:
05:2a:6f:2c:ce:2e:6c:69:c4:b3:ea:78:6e:75:f9:
57:ca:28:df:ea:a9:7a:d7:cb:4a:22:9d:6d:fd:2d:
7f:6e:19:68:0d:c9:2e:2e:be:68:69:7c:e8:69:06:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135428
sbgp-ipAddrBlock: critical
IPv4:
103.138.184.0/24
103.219.113.0/24
IPv6:
2001:df2:1300::/48
Signature Algorithm: sha256WithRSAEncryption
a6:8d:aa:ca:0a:28:f3:67:74:9b:d4:dc:ae:6a:ec:6e:b0:fa:
f2:29:b8:e7:fa:8d:a3:06:86:a6:67:e9:46:2c:8d:4d:83:41:
01:ed:09:51:11:14:1f:49:e1:08:d3:50:4b:25:41:c8:71:b7:
9c:37:8b:ec:b5:de:95:68:1c:df:3c:76:40:f9:5e:02:88:3a:
e2:6f:8c:e0:e7:78:84:ec:36:ec:cb:b3:d2:66:44:00:48:ea:
7b:1b:8c:29:4b:ff:aa:b4:6a:fe:db:3c:5b:37:dd:40:4d:79:
8f:74:83:3f:5c:bb:14:29:a7:24:fb:28:1a:91:71:d7:f8:27:
2e:36:3f:88:47:a2:25:83:06:d9:c4:bc:d9:cf:73:87:7b:9c:
e6:f7:0c:03:9a:f8:4e:5e:a9:d4:54:af:7e:8a:d4:2f:2c:4f:
8b:d8:e1:16:5f:b7:6b:c9:68:b6:80:d6:a8:13:ad:b2:ce:5c:
24:a1:5a:a5:8c:5e:f8:84:3d:ff:bc:da:80:5e:ed:a1:fd:5f:
c8:f3:86:de:7e:4a:b4:fa:15:33:a5:d2:39:71:ef:f5:99:e2:
39:f4:19:5f:58:19:59:f3:75:94:50:7a:54:60:95:70:3f:f4:
10:99:66:43:95:63:ee:91:e8:f4:29:27:3d:32:8a:39:92:f6:
c2:de:11:aa
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAkyDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYwNTAzNTgxNVoXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZC
RDU5RjJFQ0EwQkU3NjQ4RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCruasvs4iqf7sEbuSWY5w3GnWkmyzTQOYbfGQFdmkEpIWCNdkJ6O+aIrBwhP4P
yxUrJ1B+ysXVoecx+00QXogP/iH3XPbMcy7mlZolaN2tSyebB4hVx8RFYfIBXgAJ
Z2s70m+bAdnkYyUImLZ866yD7r1Qp2HKmmUsLgLED8XhrHrd44YCkzz2XqLJGRs7
9OoVzakoauvRoRNvwO8p6XUfEu2rzQLQjQ0H5ZJVQFkpn0cHc5TfTvCc5IkBeWRJ
Luxh4G+yPe792sTs3jY34hLJHwUqbyzOLmxpxLPqeG51+VfKKN/qqXrXy0oinW39
LX9uGWgNyS4uvmhpfOhpBnQXAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU8BSGAXLU
+4t5Ai+9WfLsoL52SPEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ5NjJCLzNGMEY1Q0VDNzc5QzExRUU4MjIxMzk2N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEOTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhM
VS00dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhEEMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ4q4AwQAZ9tx
MA8EAgACMAkDBwAgAQ3yEwAwDQYJKoZIhvcNAQELBQADggEBAKaNqsoKKPNndJvU
3K5q7G6w+vIpuOf6jaMGhqZn6UYsjU2DQQHtCVERFB9J4QjTUEslQchxt5w3i+y1
3pVoHN88dkD5XgKIOuJvjODneITsNuzLs9JmRABI6nsbjClL/6q0av7bPFs33UBN
eY90gz9cuxQppyT7KBqRcdf4Jy42P4hHoiWDBtnEvNnPc4d7nOb3DAOa+E5eqdRU
r36K1C8sT4vY4RZft2vJaLaA1qgTrbLOXCShWqWMXviEPf+82oBe7aH9X8jzht5+
SrT6FTOl0jlx7/WZ4jn0GV9YGVnzdZRQelRglXA/9BCZZkOVY+6R6PQpJz0yijmS
9sLeEao=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:21:45 2025 by rpki-client