Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer (raw, json)
Hash identifier: UoCh8NsYFahu5PzJUML5l7DMXs7vZo2PJwLHDx5cE+4=
Subject key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024693
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 May 2025 00:02:32 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 138538
AS: 138966
IP: 103.113.92.0/22
IP: 2402:b940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149139 (0x24693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 16 00:02:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:dc:df:e5:62:0d:c0:d1:84:9e:5c:ce:0b:
79:b2:11:f0:91:c4:e1:a3:18:ef:a7:47:e9:d3:49:
b6:17:bb:3f:dd:db:10:e3:25:78:41:c9:6f:d5:d7:
ca:53:08:59:95:d2:e8:d2:00:48:82:82:54:0e:57:
33:67:a1:66:0a:b2:4f:8d:f1:b0:b2:80:ad:ec:c8:
66:9f:e5:9b:f2:33:b0:a3:dc:7e:cc:9f:eb:d0:a7:
16:b6:7d:01:86:a1:c0:d5:a4:24:03:ea:e6:e7:85:
3d:1f:9a:bf:bd:23:6c:70:0f:e6:bb:33:0c:bd:c5:
d4:eb:5d:fa:a1:52:b4:67:e1:53:ea:4e:2c:a3:48:
a6:34:8b:25:ae:a9:5e:70:48:e1:b9:94:84:0c:44:
65:62:d5:5d:03:64:06:17:bb:9e:a8:af:4d:8d:d5:
14:84:e3:55:c3:a1:c4:3f:2f:84:b3:46:b3:ab:33:
a4:b0:48:63:9a:e8:1b:77:46:d3:c5:19:ea:9b:6d:
f5:7c:b7:6a:a1:0d:80:f9:9a:06:03:83:cd:89:98:
35:07:f1:63:0d:1b:cc:c0:d6:c8:b5:90:57:e9:6e:
aa:37:b5:40:6a:ec:f5:8d:d9:3c:c2:a3:5f:b0:10:
71:49:e1:4f:bb:c8:ea:98:15:93:88:f6:ca:23:c5:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138538
138966
sbgp-ipAddrBlock: critical
IPv4:
103.113.92.0/22
IPv6:
2402:b940::/32
Signature Algorithm: sha256WithRSAEncryption
11:a3:b2:d7:63:81:33:e3:bc:a0:dc:7d:ba:fa:30:8a:54:63:
db:41:29:86:b9:7a:ca:4a:2a:92:35:51:a2:72:64:1e:b7:5e:
cb:f0:ad:b5:f3:5b:15:92:02:97:24:a8:a1:8c:46:b2:0c:e6:
f6:91:37:9c:b4:c5:8f:a3:5c:8a:80:6d:8c:e4:1e:11:79:77:
6d:b0:91:46:0f:59:f3:4f:f6:ba:ae:67:e3:6a:59:dd:2c:c6:
1e:cc:9d:7a:0c:20:ba:bc:6b:3d:d1:27:9b:ae:f3:f1:2d:ed:
1c:32:9e:89:92:4a:f9:56:20:9e:75:e1:96:dc:35:7c:e5:f2:
f4:03:dc:a1:f2:7e:7c:ae:02:62:2a:01:71:0e:59:22:94:e6:
23:79:bf:58:57:ac:ed:1a:b5:35:d4:69:23:3c:f9:f5:9c:8c:
4e:9a:7f:44:45:52:b8:a2:4a:d3:6f:a4:fa:7d:bb:7b:15:4a:
0e:01:aa:78:95:09:6a:2f:a8:cb:cf:99:6e:b9:67:47:13:c6:
90:8b:3b:4f:e3:d7:bf:db:f8:66:63:0c:54:98:4d:74:6a:8c:
d0:3f:38:af:64:db:af:36:30:ce:27:e8:e7:25:1a:c6:ab:c0:
e4:09:65:5c:d8:5e:1c:81:76:ac:f8:2a:7c:1c:28:55:0a:1b:
ff:72:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:52:45 2025 by rpki-client