Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
File:                     LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer (raw, json)
Hash identifier:          uJIwQRov9g8tKGsKKRcB4Fha36UGuQRzgK/GeL4aldk=
Subject key identifier:   2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029FF8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 27 Feb 2026 04:40:37 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 132617
                          IP: 103.245.23.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172024 (0x29ff8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:40:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:20:a8:6d:c0:bf:6b:a7:49:04:b7:fa:0b:
                    3f:6c:b8:9d:9f:b9:42:4b:d9:03:6f:53:60:63:ca:
                    93:6c:a9:05:af:98:8b:8f:25:7e:26:74:ba:86:5f:
                    43:14:f5:aa:39:c7:f7:be:7c:38:0a:da:15:d5:29:
                    96:78:49:f7:7f:2e:47:b1:02:d7:3c:98:90:56:52:
                    5e:ac:5b:62:46:76:7a:3b:cb:e7:e0:33:a0:dd:e0:
                    22:3c:af:eb:cf:24:fd:6a:24:ab:92:d6:76:5a:a3:
                    b7:78:35:bc:a7:da:b2:08:de:17:b1:32:56:fc:34:
                    e4:31:97:72:4e:1d:d8:a0:fe:ea:46:d8:0b:4f:43:
                    d2:fc:73:60:b5:5d:c9:3c:33:d8:ac:e4:73:6b:39:
                    1c:0a:09:d4:10:8e:66:98:21:f6:07:86:10:2a:04:
                    0a:07:81:3f:52:5d:48:01:1d:e3:31:d6:2a:39:56:
                    40:96:66:39:7d:e2:73:ec:4b:cc:63:a0:88:76:a7:
                    e2:df:f1:01:ef:9e:6a:84:a5:e9:11:71:a1:fe:73:
                    3b:56:55:86:3d:ff:6c:e5:b1:3c:98:1d:01:51:00:
                    13:ff:56:1d:b2:60:3f:55:13:c4:0f:ec:62:80:8d:
                    f0:f7:00:fe:80:62:ad:9f:98:94:ec:2f:ab:aa:73:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132617

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:ee:b2:26:15:2b:c6:04:85:a9:5e:53:e9:a4:3d:0c:a6:
         a2:92:1f:95:07:b5:f3:88:2a:27:98:ea:7d:70:b6:ca:14:39:
         e1:fc:ae:91:4c:27:a7:04:ea:9c:58:24:f2:72:13:7b:07:d5:
         68:a3:77:6b:58:90:b9:19:31:aa:aa:d4:63:5f:1a:d6:aa:8c:
         2e:2b:ee:d6:df:5d:1a:0c:9e:31:08:c4:f5:70:f8:cd:a9:55:
         f6:66:40:57:d4:19:1a:ee:42:75:56:6b:10:8e:f4:55:bf:40:
         2b:f5:4d:ce:30:fa:2a:13:aa:1b:32:15:6a:7f:d9:fb:7c:75:
         85:4a:ec:73:e4:f7:07:41:73:95:39:fe:15:44:95:c1:52:1e:
         1f:f6:3b:30:08:cb:b6:65:03:1d:6c:dc:0c:e3:c7:ab:d9:a2:
         d8:74:5e:f0:f7:2a:ae:3c:ab:fb:95:e5:e3:d6:9e:f2:a6:9b:
         73:1f:31:79:4c:12:b3:ea:85:7f:20:5a:2e:91:61:9d:52:5a:
         82:c4:aa:5f:3b:80:3b:fb:8e:a1:b8:21:8d:c7:fe:a5:1f:05:
         cd:26:76:f4:15:8a:f6:24:2d:6f:e3:de:d6:94:14:75:d5:f8:
         83:8d:dc:fa:fc:99:8c:04:9c:5e:67:7d:4f:5b:4e:5a:4f:61:
         0c:90:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:15 2026 by rpki-client