Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
File: QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer (raw, json)
Hash identifier: J5kVNfIUwie0aM+lzGTfcwvUYyV40dHwXOyZL0lDt6A=
Subject key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025A0D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
Certificate not before: Fri 01 Aug 2025 04:58:30 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 38895
IP: 27.0.0.0/22
IP: 43.198.0.0 -- 43.221.255.255
IP: 43.249.44.0/22
IP: 43.251.180.0/22
IP: 103.78.120.0/22
IP: 103.102.160.0/22
IP: 103.246.148.0/22
IP: 116.206.72.0/22
IP: 126.190.0.0/15
IP: 126.210.0.0/16
IP: 126.226.0.0/16
IP: 126.228.0.0/16
IP: 126.231.0.0/16
IP: 126.242.0.0/15
IP: 203.83.220.0/22
IP: 220.36.0.0/15
IP: 2406:da00::/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154125 (0x25a0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 04:58:30 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:63:48:d7:4d:f6:67:8b:ee:0b:67:0d:e3:
41:48:aa:3a:82:2d:3d:a3:7d:85:b0:c9:24:e0:66:
ea:f1:56:94:bc:1d:34:72:04:ca:14:20:ce:87:55:
e3:1b:a0:6a:41:04:7e:79:80:a2:36:7a:82:05:50:
24:ea:89:d3:7f:f3:67:d1:e4:7d:10:95:af:01:0d:
20:ea:3c:a1:f4:a6:69:8f:04:9a:e3:a2:e5:66:20:
c4:b3:53:af:ee:4a:b0:3f:86:4c:4f:18:4e:96:ed:
24:62:b3:2c:1c:7a:dd:0a:27:f8:78:6b:de:6a:96:
ac:eb:b7:f3:42:99:8a:24:3e:27:b0:53:93:25:6e:
36:01:03:02:6a:9f:9f:3b:cc:31:44:17:b1:d5:39:
00:7f:82:d4:b2:43:09:c9:08:9e:2a:e8:e2:8f:7a:
28:92:0c:57:0a:15:85:42:53:0f:6b:a3:d9:ce:0a:
d0:ca:b2:95:d4:31:04:d3:69:93:70:21:ea:8d:ba:
24:0e:60:67:5f:52:28:92:ef:11:95:08:57:33:00:
48:42:9f:8d:c2:94:1b:38:81:d0:aa:8a:d3:2b:ef:
ec:ee:fa:3e:c1:32:37:a5:cc:78:12:90:7d:1d:96:
f4:49:95:9d:62:76:aa:30:34:30:9c:24:bb:ef:42:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/08c2f264-23f9-49fb-9d43-f8b50bec9261/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38895
sbgp-ipAddrBlock: critical
IPv4:
27.0.0.0/22
43.198.0.0-43.221.255.255
43.249.44.0/22
43.251.180.0/22
103.78.120.0/22
103.102.160.0/22
103.246.148.0/22
116.206.72.0/22
126.190.0.0/15
126.210.0.0/16
126.226.0.0/16
126.228.0.0/16
126.231.0.0/16
126.242.0.0/15
203.83.220.0/22
220.36.0.0/15
IPv6:
2406:da00::/24
Signature Algorithm: sha256WithRSAEncryption
0c:41:e9:ea:4c:c8:b2:a0:98:10:57:60:38:18:a8:da:68:2a:
e4:e4:ff:a0:f9:40:26:60:63:91:f1:c4:06:dd:73:8c:88:93:
ed:c5:7c:72:a9:fc:14:bd:1c:1b:74:d7:28:11:80:33:45:e2:
da:9d:15:1d:13:3d:d3:de:d7:d6:05:24:98:60:77:1e:85:d4:
76:02:92:1d:f3:20:90:12:76:62:5d:35:33:38:a0:b2:81:bc:
8f:20:07:ca:a6:f3:df:87:10:48:38:c0:5a:fc:a9:81:e0:50:
09:6f:06:d5:b1:25:63:89:99:82:60:81:87:4f:a6:fb:8a:0d:
69:7d:9f:40:ff:6a:78:e7:ea:e4:46:49:43:e4:52:b5:a4:3f:
5a:74:b3:70:19:c3:31:3d:97:a3:4d:0d:fe:74:29:fd:68:d7:
36:b0:89:86:db:21:7f:ff:d7:f4:5f:3e:40:9f:16:5c:ff:e0:
fa:f2:45:02:50:fd:55:55:60:69:70:f1:68:14:14:a5:a7:a2:
00:f0:03:72:81:5e:f7:77:d1:93:1a:37:14:c6:02:3e:b1:f6:
a8:ed:32:f6:c2:81:78:76:03:4d:43:85:54:ec:ca:4e:2a:56:
16:3c:2a:29:0a:12:0f:94:d3:75:80:13:20:62:a1:0e:48:d0:
ab:f1:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:53:40 2025 by rpki-client