Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
File: h1thdAzTcL1LSk9q6gqGCDiNuoo.cer (raw, json)
Hash identifier: zOWAlpa7ZqNeEfzqTU6Hp+FzZ2yke8dLE7EnRQhsU0o=
Subject key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Apr 2025 15:45:01 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 153667
IP: 163.223.34.0/23
IP: 2001:df5:3140::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147338 (0x23f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 17 15:45:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:46:ad:87:7d:16:f4:13:16:3b:2f:ec:96:
75:bd:3c:5b:ed:b6:13:c8:37:9f:4c:eb:21:18:02:
86:c0:5b:a1:55:5f:48:d3:d5:ca:fd:d6:e7:c2:d8:
16:22:76:c0:14:32:6f:16:d1:e1:03:a2:82:86:f6:
f2:a7:78:41:52:2c:69:ae:7b:a8:9e:e4:48:2d:e5:
02:89:92:56:b4:67:58:ba:d7:ad:b1:84:58:54:13:
b3:1d:95:c2:4d:f2:22:f3:99:f2:8c:d2:e3:86:e8:
b9:7e:1f:29:2d:00:9d:aa:b9:0b:bb:97:81:f2:fd:
34:b0:60:c0:74:95:9f:cf:26:a2:9b:81:db:81:4f:
de:e5:b2:0c:a9:43:93:42:23:6d:97:94:ae:46:c2:
fd:74:1e:8e:71:09:8a:e9:0a:c1:a5:0f:f9:0e:ae:
36:a0:d2:d1:66:1d:f6:18:73:f1:c5:27:72:34:af:
ef:2c:47:5f:9a:ec:f1:e3:95:f9:c4:c9:c5:be:a2:
66:ef:81:93:55:c5:22:23:12:4a:a2:0f:d6:c5:02:
92:57:fe:57:74:05:79:24:9a:7f:8c:d4:c4:c5:5a:
97:2e:31:e3:ef:85:cc:f8:40:34:df:03:5e:ad:3f:
46:37:52:90:df:ad:ab:8a:33:5d:cc:90:37:4c:47:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153667
sbgp-ipAddrBlock: critical
IPv4:
163.223.34.0/23
IPv6:
2001:df5:3140::/48
Signature Algorithm: sha256WithRSAEncryption
2a:3a:8f:f2:85:c1:3e:2e:04:ef:26:5a:06:01:40:09:35:2d:
6a:9c:4c:be:b7:7c:b8:dd:90:8b:98:50:e1:a8:0d:76:ee:53:
15:83:c2:e5:05:d3:b2:0b:a5:a7:70:e4:b3:3e:d5:f1:84:ce:
23:54:50:a1:86:c0:35:76:a1:91:7d:83:0b:90:7a:5d:f5:d1:
f1:6d:fc:82:bb:73:3b:93:20:dc:65:22:c1:24:1b:ea:64:15:
8e:65:0d:d4:0e:41:44:fe:e5:ca:0e:30:d0:8f:47:cf:36:d8:
70:b1:36:fa:fb:08:13:e8:06:b9:9d:d6:f9:58:5d:70:0b:7f:
ef:e3:d8:31:4f:79:d6:c6:be:0c:31:08:7b:df:ac:91:c2:b9:
ae:34:8c:61:ea:d6:8c:e1:97:35:39:b9:b4:ac:d2:7b:21:f8:
5a:53:82:cc:aa:3b:cc:5d:25:c4:08:5e:14:59:46:98:68:70:
3a:7e:e9:2a:49:85:14:2b:42:f6:0b:18:e9:f1:e5:62:94:f1:
f4:c3:87:87:41:55:84:67:58:58:7f:37:b9:dd:cc:e1:e3:71:
5e:87:dd:b0:1f:73:bf:98:ef:87:31:df:c4:2d:74:52:ec:af:
0e:b6:47:d0:0d:a8:7c:5c:0b:4a:33:fb:21:43:ab:40:87:2c:
eb:80:3a:f7
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAj+KMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQxNzE1NDUwMVoXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjU4NTIxMTAvBgNVBAUTKDg3NUI2MTc0MENEMzcwQkQ0QjRBNEY2
QUVBMEE4NjA4Mzg4REJBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNdUath30W9BMWOy/slnW9PFvtthPIN59M6yEYAobAW6FVX0jT1cr91ufC2BYi
dsAUMm8W0eEDooKG9vKneEFSLGmue6ie5Egt5QKJkla0Z1i6162xhFhUE7MdlcJN
8iLzmfKM0uOG6Ll+HyktAJ2quQu7l4Hy/TSwYMB0lZ/PJqKbgduBT97lsgypQ5NC
I22XlK5Gwv10Ho5xCYrpCsGlD/kOrjag0tFmHfYYc/HFJ3I0r+8sR1+a7PHjlfnE
ycW+ombvgZNVxSIjEkqiD9bFApJX/ld0BXkkmn+M1MTFWpcuMePvhcz4QDTfA16t
P0Y3UpDfrauKM13MkDdMR0SpAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUh1thdAzT
cL1LSk9q6gqGCDiNuoowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI1ODUyL0U5NTRGRDc4MUJBMjExRjA4QjI5RTkyQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyNTg1Mi9FOTU0RkQ3ODFCQTIxMUYwOEIyOUU5MkNDNEY5QUUwMi9oMXRoZEF6
VGNMMUxTazlxNmdxR0NEaU51b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlhDMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBo98iMA8EAgAC
MAkDBwAgAQ31MUAwDQYJKoZIhvcNAQELBQADggEBACo6j/KFwT4uBO8mWgYBQAk1
LWqcTL63fLjdkIuYUOGoDXbuUxWDwuUF07ILpadw5LM+1fGEziNUUKGGwDV2oZF9
gwuQel310fFt/IK7czuTINxlIsEkG+pkFY5lDdQOQUT+5coOMNCPR8822HCxNvr7
CBPoBrmd1vlYXXALf+/j2DFPedbGvgwxCHvfrJHCua40jGHq1ozhlzU5ubSs0nsh
+FpTgsyqO8xdJcQIXhRZRphocDp+6SpJhRQrQvYLGOnx5WKU8fTDh4dBVYRnWFh/
N7ndzOHjcV6H3bAfc7+Y74cx38QtdFLsrw62R9ANqHxcC0oz+yFDq0CHLOuAOvc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:52:18 2025 by rpki-client