
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
File: oXyIfuladLPXOMFccI_s_Wu4xmo.cer (raw, json)
Hash identifier: nEoMq8C7MQAg8Ba0OCOJ3YIrGLdqOr4OVcDage2MsnA=
Subject key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023E63
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Apr 2025 17:12:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135273
AS: 138016
IP: 103.211.244.0/22
IP: 146.196.88.0/22
IP: 2404:a340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147043 (0x23e63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 17:12:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:95:ef:0d:c0:76:40:9a:a9:0f:0d:4f:2c:
76:c9:65:34:00:0b:4f:f7:ce:f0:19:9f:95:04:c2:
a3:ba:dd:ec:08:29:bd:88:f0:45:ed:c9:7d:5e:9e:
09:e2:4a:82:0b:72:e5:70:2b:50:46:51:a4:88:55:
6e:e5:cc:8c:39:d7:05:5e:d0:74:88:c6:0b:80:55:
2d:8a:a7:d3:81:f4:7d:37:7d:6c:67:10:4c:06:f7:
65:d5:1e:69:e2:91:27:0b:0e:ca:f4:e6:78:20:1e:
8a:41:f8:dd:45:9e:07:bb:ea:ab:83:b0:3c:85:4e:
85:66:4a:42:c8:72:07:42:6e:d8:30:f9:f7:43:34:
6b:0f:a4:5d:a0:81:8d:94:1d:7f:ab:36:e6:38:71:
db:13:fc:f6:88:c7:e2:94:a3:24:e1:66:a9:25:11:
9b:c7:8d:f8:88:df:0b:24:36:b3:19:3c:90:fb:e8:
10:33:b6:82:99:c7:97:4d:14:c8:01:ef:f4:39:af:
d4:8d:3a:c7:97:94:e7:cf:3d:4e:9b:be:c2:f2:8f:
c6:ac:e9:0d:ab:a5:05:85:b5:cc:9e:35:aa:4b:c7:
71:10:2a:a9:26:eb:38:72:63:d5:2d:1b:06:78:a9:
d2:c3:26:e0:d6:65:30:ca:6d:d7:d9:3c:d3:c6:de:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135273
138016
sbgp-ipAddrBlock: critical
IPv4:
103.211.244.0/22
146.196.88.0/22
IPv6:
2404:a340::/32
Signature Algorithm: sha256WithRSAEncryption
65:99:cb:4c:8e:f9:9c:c0:c7:f8:5c:75:2b:13:3a:8e:04:a9:
8b:6b:6c:11:52:aa:f0:ce:f2:68:19:05:85:8f:44:6b:be:e1:
46:b2:4b:1a:65:f8:40:4b:21:50:3b:31:95:80:3b:3b:36:9c:
80:ed:b9:43:54:58:fa:54:60:0e:16:dd:7e:0c:f3:8a:01:83:
e2:df:e7:39:43:79:d2:46:fb:2d:f2:13:e0:5b:24:4b:64:e3:
11:33:ad:04:36:34:c0:63:1a:f0:69:ba:d9:c6:47:dd:3c:b7:
72:2e:0a:04:f2:f0:bb:cd:2f:7c:24:7d:a1:5c:a4:65:ea:f0:
75:ef:71:61:a2:3e:c3:e9:7e:3e:63:b6:2b:9b:f7:be:d1:db:
25:35:3e:4c:cd:82:f2:36:19:2d:d6:da:39:51:bb:4e:7f:48:
dc:dc:76:a3:ed:e6:f4:0e:11:9a:33:e2:ed:27:82:c9:2e:af:
59:1b:ed:68:70:e3:56:1f:e6:dc:4b:31:c3:66:aa:22:dc:32:
62:8c:9a:25:3c:35:fd:9b:b3:da:8f:aa:4d:b2:71:2b:df:83:
e9:03:1a:10:ce:15:35:1d:84:ed:86:17:ac:4b:59:67:53:7f:
30:f9:52:98:38:2c:d2:8e:c2:b1:23:93:7e:61:10:85:d9:1b:
59:77:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:47:22 2025 by rpki-client