Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer
File: qadVVe1wZy9x1S9lk7kbRCC6pws.cer (raw, json)
Hash identifier: flRECkvN86QXMiFx7pWc92zm0eB1IigHOtiEPPuYqh4=
Subject key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C2C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 10:56:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 142011
IP: 203.89.151.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146476 (0x23c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 10:56:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91E4519, serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:2e:93:23:6a:0f:87:f6:e8:ba:3a:5a:2f:
cc:da:6e:41:6b:e5:ae:27:0a:70:d0:d6:c2:88:1c:
12:ce:a0:94:e6:9e:7e:83:5f:f9:1f:2c:8e:24:53:
5b:d6:46:5f:fa:7d:fc:e6:a5:7c:6a:dc:ec:ab:01:
9f:cc:9e:46:16:d8:2e:13:b6:68:65:53:9d:11:43:
44:3c:2d:44:70:bd:a1:3b:5d:8f:df:83:f1:b4:56:
c8:aa:57:c3:e7:9f:da:6e:95:1e:de:d1:49:5b:41:
19:f4:38:61:42:3b:de:fb:f4:be:33:27:7f:b6:c3:
4a:cb:56:ba:5f:b3:8b:4d:38:78:17:7c:1f:14:3d:
e9:e2:31:52:25:1a:38:ce:93:3d:0a:d6:52:2a:ec:
2b:46:db:ca:c4:53:31:bf:6b:8d:f7:3c:da:9e:b4:
43:a7:a4:92:3a:3c:6d:03:f1:f8:20:db:a6:ea:3b:
dd:63:05:cf:90:7a:0b:c0:70:0d:6e:8d:f3:c2:76:
97:91:c6:a8:d4:2c:ee:6e:0b:31:48:0d:13:fe:07:
4a:97:77:38:d8:73:30:6b:2c:21:14:83:ad:30:47:
2f:0a:f8:91:ad:a9:f4:f1:7c:02:a0:50:ed:19:53:
33:a5:66:cb:f8:a3:11:9a:f4:91:d2:51:ec:71:ab:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142011
sbgp-ipAddrBlock: critical
IPv4:
203.89.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d2:fd:e9:af:12:4a:4d:1f:b3:ad:8a:17:e0:f0:01:79:80:
98:ff:09:ff:a0:7f:23:69:3c:f7:9a:44:31:ba:a9:5e:9b:e9:
5a:6c:27:3e:2d:8b:6a:94:41:bd:b3:f9:86:87:9c:04:2c:b2:
bb:c0:fb:4f:a7:a5:30:2e:ee:e0:b2:18:89:2f:92:39:2a:f6:
d0:7e:21:d7:4e:fa:a7:f7:38:87:b2:6b:3f:28:2c:ee:ea:c1:
8e:69:54:c9:ef:44:47:52:13:b7:44:64:27:c3:3e:14:a1:eb:
00:17:5b:a0:3f:a4:76:80:2f:a8:c4:6c:35:cc:9a:b5:8f:f7:
80:7c:6c:be:19:65:b1:be:43:6f:8e:c7:84:64:88:0c:76:af:
96:a2:ba:a4:1a:f9:c1:06:e7:f7:44:75:c6:a4:de:bc:1a:bd:
12:ee:85:91:ad:17:6f:47:0c:b3:5a:74:b9:5c:7a:d4:40:4f:
75:1e:59:17:ba:5c:d0:b8:a5:19:78:e6:ea:35:24:fe:70:02:
70:6f:f6:86:7b:be:0b:1f:35:ba:2d:34:80:ac:31:ce:8f:63:
7f:af:22:de:66:83:76:26:66:49:09:6a:df:d1:c7:1f:81:e5:
bc:f0:66:6f:24:20:8a:82:61:2e:16:50:aa:08:1b:a4:68:78:
e7:0f:bf:63
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAjwsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQwMjEwNTY0NloXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTQ1MTkxMTAvBgNVBAUTKEE5QTc1NTU1RUQ3MDY3MkY3MUQ1MkY2
NTkzQjkxQjQ0MjBCQUE3MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDzqC6TI2oPh/boujpaL8zabkFr5a4nCnDQ1sKIHBLOoJTmnn6DX/kfLI4kU1vW
Rl/6ffzmpXxq3OyrAZ/MnkYW2C4TtmhlU50RQ0Q8LURwvaE7XY/fg/G0VsiqV8Pn
n9pulR7e0UlbQRn0OGFCO9779L4zJ3+2w0rLVrpfs4tNOHgXfB8UPeniMVIlGjjO
kz0K1lIq7CtG28rEUzG/a433PNqetEOnpJI6PG0D8fgg26bqO91jBc+QegvAcA1u
jfPCdpeRxqjULO5uCzFIDRP+B0qXdzjYczBrLCEUg60wRy8K+JGtqfTxfAKgUO0Z
UzOlZsv4oxGa9JHSUexxq+o5AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUqadVVe1w
Zy9x1S9lk7kbRCC6pwswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU0NTE5LzA0MjY0OTFFOENBRTExRUJBQTFCMUY1RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFNDUxOS8wNDI2NDkxRThDQUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUx
d1p5OXgxUzlsazdrYlJDQzZwd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiq7MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1mXMA0GCSqG
SIb3DQEBCwUAA4IBAQB90v3prxJKTR+zrYoX4PABeYCY/wn/oH8jaTz3mkQxuqle
m+labCc+LYtqlEG9s/mGh5wELLK7wPtPp6UwLu7gshiJL5I5KvbQfiHXTvqn9ziH
sms/KCzu6sGOaVTJ70RHUhO3RGQnwz4UoesAF1ugP6R2gC+oxGw1zJq1j/eAfGy+
GWWxvkNvjseEZIgMdq+WorqkGvnBBuf3RHXGpN68Gr0S7oWRrRdvRwyzWnS5XHrU
QE91HlkXulzQuKUZeObqNST+cAJwb/aGe74LHzW6LTSArDHOj2N/ryLeZoN2JmZJ
CWrf0ccfgeW88GZvJCCKgmEuFlCqCBukaHjnD79j
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:59:49 2025 by rpki-client