Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer (raw, json)
Hash identifier: swq5TIM8Iu4Vi+ZcnmDPzJZjJj6LI6VUiL4y6Ba8jME=
Subject key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C6D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Jun 2025 22:38:04 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24491
AS: 58930
IP: 202.172.16.0/22
IP: 2404:db80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150637 (0x24c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 22:38:04 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:b6:0a:7a:f8:30:97:d1:18:79:9c:4e:46:
4e:aa:0b:b4:37:5c:4f:df:f8:b5:63:bf:c5:cf:c7:
1c:bc:e0:fa:10:11:0f:29:f7:cb:a5:0a:c2:45:9b:
5b:80:30:27:41:cb:47:44:da:ef:94:79:f8:05:22:
17:c1:fa:f0:1f:d4:81:03:1b:3f:aa:97:4a:c4:39:
08:7a:c7:92:5b:a2:7f:c8:6c:47:ed:9d:79:7c:95:
07:1c:35:6a:d3:3e:f6:a7:0f:b3:1b:ad:66:71:ce:
5a:3c:b0:61:fe:f1:31:2d:f6:d1:18:23:41:fb:86:
0e:e5:93:91:5e:6f:ec:a8:4d:25:4f:4a:1b:c0:dc:
02:97:8e:50:cf:51:0c:e0:f6:f0:2a:a8:89:08:9d:
b0:ee:7b:e8:9a:02:0a:8f:c4:25:91:10:de:0e:c9:
26:4b:f8:20:7f:14:44:20:2d:5b:f6:68:09:cf:15:
f5:ec:d1:83:f6:2b:e7:dc:b6:dd:8b:4c:62:6d:f6:
f8:25:ad:5a:c3:74:80:93:2a:6a:ca:8a:4f:63:39:
b8:26:af:17:04:f9:84:ec:05:55:5f:7b:98:9e:eb:
a4:07:29:bf:cf:16:a1:f9:30:1d:bf:b4:8f:b0:03:
d3:a2:a0:28:9d:85:37:f6:43:70:e5:18:73:6f:11:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24491
58930
sbgp-ipAddrBlock: critical
IPv4:
202.172.16.0/22
IPv6:
2404:db80::/32
Signature Algorithm: sha256WithRSAEncryption
21:a4:24:a1:d3:85:a1:42:66:8a:f4:12:19:87:49:fe:6e:29:
3f:f0:5e:aa:3a:18:c5:86:0b:17:54:9a:9e:c3:9e:5a:56:53:
a6:cb:a9:5f:ff:62:cd:57:28:40:5e:7b:a8:18:e3:16:28:0e:
f4:e9:d9:81:f8:7d:13:2f:0e:8b:57:d6:8e:4c:1d:3a:cb:80:
bd:cc:4c:d8:99:03:c0:30:5d:4e:25:2d:f0:80:2f:a4:c5:9b:
09:da:d7:6f:42:8c:cf:d9:fa:be:a3:d0:62:df:4a:71:07:f1:
a6:80:ba:fc:eb:fc:cd:ad:3f:23:03:df:80:d7:aa:08:35:b5:
6e:d8:6b:63:a0:fb:3a:b4:de:59:11:16:b0:44:0a:f3:89:18:
f6:d9:2e:1f:85:2b:f6:cb:a6:83:8b:34:b8:de:df:20:78:31:
00:a6:ee:e5:6e:fd:0b:1a:76:fb:ba:db:8e:5a:8e:7a:4a:d4:
15:fc:a8:a1:18:2a:e3:bc:32:fb:4b:ad:0e:16:08:bb:57:ee:
34:02:05:06:c4:06:d2:7c:16:5f:f1:ab:ef:21:e2:a7:39:7d:
55:8f:7e:5b:23:1c:8b:a3:2e:25:b0:83:00:57:4a:af:5d:c8:
dc:1d:50:b1:eb:12:3a:61:c8:f9:90:d2:6c:8f:c6:32:69:2e:
31:db:5f:fd
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIDAkxtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYwNDIyMzgwNFoXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjUwRDIxMTAvBgNVBAUTKDJFODI1Q0RGMjQ4QUMyMEEzOUMwNThF
MjM4RkE5MjYxNDkyNEZBMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIsbYKevgwl9EYeZxORk6qC7Q3XE/f+LVjv8XPxxy84PoQEQ8p98ulCsJFm1uA
MCdBy0dE2u+UefgFIhfB+vAf1IEDGz+ql0rEOQh6x5Jbon/IbEftnXl8lQccNWrT
PvanD7MbrWZxzlo8sGH+8TEt9tEYI0H7hg7lk5Feb+yoTSVPShvA3AKXjlDPUQzg
9vAqqIkInbDue+iaAgqPxCWREN4OySZL+CB/FEQgLVv2aAnPFfXs0YP2K+fctt2L
TGJt9vglrVrDdICTKmrKik9jObgmrxcE+YTsBVVfe5ie66QHKb/PFqH5MB2/tI+w
A9OioCidhTf2Q3DlGHNvEbTDAgMBAAGjggMiMIIDHjAdBgNVHQ4EFgQULoJc3ySK
wgo5wFjiOPqSYUkk+g8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI1MEQyLzZGQTEyMUFBQTlBQTExRUI4NTQwNzk0M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCNTBEMi82RkExMjFBQUE5QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lT
S3dnbzV3RmppT1BxU1lVa2stZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICX6sCAwDmMjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsqsEDAN
BAIAAjAHAwUAJATbgDANBgkqhkiG9w0BAQsFAAOCAQEAIaQkodOFoUJmivQSGYdJ
/m4pP/BeqjoYxYYLF1SansOeWlZTpsupX/9izVcoQF57qBjjFigO9OnZgfh9Ey8O
i1fWjkwdOsuAvcxM2JkDwDBdTiUt8IAvpMWbCdrXb0KMz9n6vqPQYt9KcQfxpoC6
/Ov8za0/IwPfgNeqCDW1bthrY6D7OrTeWREWsEQK84kY9tkuH4Ur9sumg4s0uN7f
IHgxAKbu5W79Cxp2+7rbjlqOekrUFfyooRgq47wy+0utDhYIu1fuNAIFBsQG0nwW
X/Gr7yHipzl9VY9+WyMci6MuJbCDAFdKr13I3B1QsesSOmHI+ZDSbI/GMmkuMdtf
/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:31:25 2025 by rpki-client