Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
File: oRR-hHvP7urdnompeo2fM2ecp-I.cer (raw, json)
Hash identifier: rYryt6PLAuejGX7NzrQVEKzZeYmMD7BOjqPMcpqq5ok=
Subject key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C8B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Jun 2025 06:12:41 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 103.187.26.0/23
IP: 2001:df0:b6c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Jun 2025 22:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150667 (0x24c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 06:12:41 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91EAD80, serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:b3:b1:db:41:dd:87:fd:c5:0c:d3:5f:89:
25:13:ce:2e:30:e0:69:ec:47:7c:93:1e:bc:50:e6:
55:e3:14:d2:63:41:93:c6:c1:3d:05:11:b6:3e:f0:
d8:46:e5:e6:f2:ca:94:1e:8d:1b:4c:b3:1f:fc:03:
96:59:8e:70:bd:86:01:96:56:0b:76:55:2f:4e:09:
33:e6:bd:59:2d:ea:e9:85:5e:d7:6f:5a:df:f2:bc:
63:a9:1f:51:c0:b7:6e:69:fd:90:91:de:96:3f:67:
e9:64:f9:1c:be:93:6a:2f:d3:10:59:ed:5d:1c:15:
ef:2e:98:65:5c:8b:08:cb:00:dc:a5:bd:f0:46:e5:
48:ab:a7:f0:e6:4b:1e:56:8c:da:06:fb:a5:24:04:
37:c9:cc:1e:30:28:d5:e7:5f:cb:53:fa:a7:f5:b8:
42:4c:46:b7:ac:f2:84:62:80:6b:9b:ac:07:25:7e:
5b:f4:7b:8c:a8:55:61:23:cf:1e:e0:5d:f6:93:79:
1a:71:f9:75:00:bb:fe:e1:6a:8d:84:c3:20:44:26:
c1:79:a3:da:55:06:d9:c6:11:bb:be:44:40:09:6e:
ea:21:47:a4:ff:a3:fa:db:8f:07:3f:4c:c4:18:88:
05:e4:8b:c8:c3:f4:14:ba:4c:30:45:fd:6a:41:5a:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.26.0/23
IPv6:
2001:df0:b6c0::/48
Signature Algorithm: sha256WithRSAEncryption
98:75:07:00:72:bc:75:71:2c:74:e6:0d:f0:88:af:b3:33:f8:
23:5c:1b:55:76:93:96:b8:63:d3:dd:44:4c:26:6b:1a:c4:a5:
b6:28:35:1e:94:04:ee:04:9f:f1:69:96:35:28:99:f5:81:ef:
93:b9:77:2a:2f:2e:8f:4c:f6:03:34:f8:2d:2d:a1:90:a9:ba:
09:3b:a0:83:91:d9:d2:82:74:06:5d:26:54:c7:05:9e:70:ce:
12:cc:c9:d1:da:5f:22:fc:d6:ba:15:df:7d:96:0c:dd:18:b5:
ce:23:33:89:7b:3e:7a:d0:53:07:1d:79:8d:ce:b3:4d:31:33:
2c:c7:47:7c:42:5c:57:0e:03:b6:b2:07:7d:a6:89:8f:02:4c:
1c:1f:06:44:0c:b9:12:92:52:ef:36:b0:7e:1c:12:25:b7:ab:
56:dc:22:7f:63:c0:0d:41:47:0b:b8:f3:2b:51:f7:1b:c7:03:
67:77:f8:95:ab:4a:8d:1e:22:c7:27:3f:19:ca:b5:2d:42:a0:
64:02:05:0e:0e:ae:c5:0a:04:40:94:db:4c:b5:ca:5a:13:ac:
c4:04:a7:b7:72:78:fd:e2:84:6a:d7:b4:5c:a8:ac:a8:57:c4:
28:bf:4b:e6:61:0b:7e:6e:08:29:a7:33:9a:f3:34:4f:4d:ac:
0e:0e:be:6d
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAkyLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYwNTA2MTI0MVoXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUFEODAxMTAvBgNVBAUTKEExMTQ3RTg0N0JDRkVFRUFERDlFODlB
OTdBOEQ5RjMzNjc5Q0E3RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDktrOx20Hdh/3FDNNfiSUTzi4w4GnsR3yTHrxQ5lXjFNJjQZPGwT0FEbY+8NhG
5ebyypQejRtMsx/8A5ZZjnC9hgGWVgt2VS9OCTPmvVkt6umFXtdvWt/yvGOpH1HA
t25p/ZCR3pY/Z+lk+Ry+k2ov0xBZ7V0cFe8umGVciwjLANylvfBG5Uirp/DmSx5W
jNoG+6UkBDfJzB4wKNXnX8tT+qf1uEJMRres8oRigGubrAclflv0e4yoVWEjzx7g
XfaTeRpx+XUAu/7hao2EwyBEJsF5o9pVBtnGEbu+REAJbuohR6T/o/rbjwc/TMQY
iAXki8jD9BS6TDBF/WpBWhvXAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUoRR+hHvP
7urdnompeo2fM2ecp+IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVBRDgwL0QyMjNDNUFFOTRDOTExRUY5MkNENzI1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQUQ4MC9EMjIzQzVBRTk0QzkxMUVGOTJDRDcyNThDNEY5QUUwMi9vUlItaEh2
UDd1cmRub21wZW8yZk0yZWNwLUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFnuxowDwQCAAIwCQMHACABDfC2wDANBgkqhkiG9w0BAQsFAAOC
AQEAmHUHAHK8dXEsdOYN8IivszP4I1wbVXaTlrhj091ETCZrGsSltig1HpQE7gSf
8WmWNSiZ9YHvk7l3Ki8uj0z2AzT4LS2hkKm6CTugg5HZ0oJ0Bl0mVMcFnnDOEszJ
0dpfIvzWuhXffZYM3Ri1ziMziXs+etBTBx15jc6zTTEzLMdHfEJcVw4DtrIHfaaJ
jwJMHB8GRAy5EpJS7zawfhwSJberVtwif2PADUFHC7jzK1H3G8cDZ3f4latKjR4i
xyc/Gcq1LUKgZAIFDg6uxQoEQJTbTLXKWhOsxASnt3J4/eKEate0XKisqFfEKL9L
5mELfm4IKaczmvM0T02sDg6+bQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 04:12:20 2025 by rpki-client