Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
File: FOvueS5AUhzVGx8DIDp_jiq7EtI.cer (raw, json)
Hash identifier: p2lXeKVkCrkMf47iWb5OygLvAYH+txfgeL65yG3eBKo=
Subject key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024041
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Apr 2025 19:46:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 134837
IP: 103.149.186.0/23
IP: 2001:df3:3780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147521 (0x24041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 19:46:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:09:83:16:00:48:14:19:34:30:da:80:0c:
20:3c:f8:56:39:86:1d:73:e4:e4:4b:0e:e4:51:e9:
9e:07:5d:ac:48:32:78:b7:3a:eb:88:b8:79:28:cb:
28:e5:43:07:5c:1b:10:0a:df:8a:b6:00:f4:36:e1:
af:77:1d:ec:2d:d1:43:c2:4b:74:fb:7e:b3:85:91:
44:0e:34:b3:e3:43:8e:20:1d:6c:43:6c:06:aa:e7:
bb:79:30:63:fa:9a:91:55:4a:d3:44:6d:0c:e7:30:
de:07:03:1e:36:62:a1:30:90:5d:26:07:c2:06:ee:
ee:27:86:f8:08:87:09:51:72:a4:38:c0:6f:e2:ae:
13:a2:b0:19:1a:00:59:06:4a:e5:e5:f7:cb:f4:cf:
86:a2:0c:17:66:7b:45:17:e7:a3:c0:e5:1b:4a:34:
2a:6b:6c:4d:86:42:d8:c6:65:f7:dd:55:68:cc:f1:
75:78:d4:92:21:63:b4:d9:ac:a2:fb:de:3d:3d:a0:
44:91:c7:f9:8e:cc:9e:82:2a:23:97:cc:43:60:9e:
3f:ba:84:ad:fe:95:75:dd:6b:25:9b:75:ab:3c:bc:
a6:9d:e6:77:04:13:07:eb:6c:cf:49:93:a8:12:1a:
5c:99:46:4c:08:5e:94:68:86:07:64:cb:42:b4:dd:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134837
sbgp-ipAddrBlock: critical
IPv4:
103.149.186.0/23
IPv6:
2001:df3:3780::/48
Signature Algorithm: sha256WithRSAEncryption
27:2a:42:8b:d2:e1:62:51:a4:f2:8c:c0:68:be:e0:0e:45:9c:
d8:bb:cb:31:ec:59:b2:06:b1:e0:bb:63:15:1e:4f:c9:27:60:
34:a5:80:79:38:e2:01:c7:03:ca:1d:a3:76:50:fb:29:ff:bc:
28:66:f9:a7:61:95:41:e9:da:a3:74:ae:5c:b7:49:fa:8e:69:
97:dc:55:13:59:8c:09:1f:7b:48:ba:9a:ce:48:bc:89:c6:92:
70:6e:18:ec:b1:7e:c5:bf:02:f8:71:ec:0c:36:89:17:ab:08:
48:38:1c:44:57:6a:79:6d:70:f5:79:4f:ee:89:e5:1e:f2:06:
d0:4b:7b:fb:a5:6b:8d:03:e4:cf:dc:3e:95:7e:fc:9c:7d:66:
d3:4d:63:2f:77:01:0b:d6:ab:b7:19:8b:43:39:3a:d1:ff:fc:
df:f6:cc:b2:e5:d8:a2:cd:c3:97:69:58:bd:f3:44:52:33:33:
b7:cf:28:7f:88:c4:3b:e8:3e:73:77:f1:ac:1b:c0:b0:c7:58:
6e:08:d7:c7:23:21:be:99:e9:bb:67:2c:44:66:90:6f:36:09:
97:3c:26:89:63:e7:18:81:c2:03:3a:88:cd:b0:57:a4:5f:c5:
d8:19:49:f1:2c:2f:38:ac:66:90:40:b1:b2:08:86:cb:40:5a:
fe:47:e4:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:37:59 2025 by rpki-client