Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
File: rVo_mWvNoZuP1pKxr8inCuMzPO0.cer (raw, json)
Hash identifier: HwhvzKi109WA3bi1dvEshIDh9qsvz9BSCBlUimdx4VI=
Subject key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AC6A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Apr 2026 01:12:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2569 -- 2570
AS: 4648
AS: 4771
AS: 4834
AS: 9325
AS: 17994
AS: 18006
AS: 18348
AS: 18353
AS: 38479
AS: 38485
AS: 38560
AS: 45222
AS: 55936
AS: 64070
AS: 133124
AS: 133420
AS: 133473
AS: 134444
IP: 45.65.4.0/22
IP: 103.16.20.0/22
IP: 103.232.108.0/22
IP: 103.253.48.0/22
IP: 110.34.48.0/22
IP: 115.188.0.0/15
IP: 122.56.0.0/13
IP: 125.236.0.0/19
IP: 125.236.34.0/24
IP: 125.236.40.0 -- 125.236.45.255
IP: 125.236.48.0 -- 125.236.79.255
IP: 125.236.96.0 -- 125.239.255.255
IP: 202.14.96.0/24
IP: 202.20.32.0/20
IP: 202.27.156.0/22
IP: 202.27.169.0/24
IP: 202.27.176.0 -- 202.27.185.255
IP: 202.27.254.0/23
IP: 202.36.0.0/21
IP: 202.36.30.0/23
IP: 202.36.40.0/24
IP: 202.36.90.0/24
IP: 202.37.45.0/24
IP: 202.37.236.0/22
IP: 202.37.242.0 -- 202.37.247.255
IP: 202.49.49.0/24
IP: 202.49.160.0/22
IP: 202.49.169.0/24
IP: 202.50.74.0/23
IP: 202.50.80.0/22
IP: 202.50.110.0/24
IP: 202.50.116.0/24
IP: 202.50.119.0/24
IP: 202.50.224.0/20
IP: 202.50.245.0/24
IP: 202.55.96.0/20
IP: 203.96.0.0/17
IP: 210.54.0.0/15
IP: 210.86.0.0/17
IP: 219.88.0.0/15
IP: 220.247.132.0/22
IP: 222.152.0.0/14
IP: 2401:4540::/32
IP: 2403:9800::/32
IP: 2404:e200::/32
IP: 2405:e840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175210 (0x2ac6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 14 01:12:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:3d:f8:d0:91:52:ed:95:8f:96:14:d9:bd:
69:d2:e8:62:86:08:10:c6:59:66:d8:1c:48:fd:29:
65:a3:87:da:5f:02:d5:18:d1:a3:bf:52:1a:60:bc:
63:ee:f7:97:10:55:03:bb:a0:55:9d:cc:6a:20:6c:
e0:8c:b2:b1:06:b5:01:f6:df:fb:f5:18:e2:a9:13:
dd:89:cf:d7:69:94:50:7b:99:b5:44:ae:a9:38:50:
a7:04:64:7b:d4:58:f7:53:99:55:76:e5:d4:fb:bf:
d3:6d:da:dd:3a:31:27:f5:69:3b:e3:f5:12:66:78:
64:39:4f:8d:ac:25:cc:8e:fc:ff:af:cd:66:3c:35:
fb:bb:41:ef:6c:91:a5:66:c6:1f:0d:a2:68:79:13:
ae:6e:d3:0c:83:95:f7:9a:91:bb:c4:c9:04:83:b6:
d6:c0:b9:77:f8:f7:b0:ee:65:02:a6:22:61:72:fa:
44:31:87:d0:be:a4:88:72:6c:86:21:4d:bc:26:4c:
66:22:76:03:31:d8:fb:94:aa:40:d8:82:04:77:64:
10:45:d7:73:ed:ed:f1:3f:90:84:dd:aa:a0:64:11:
34:d7:5e:51:89:b3:09:9c:34:e2:68:0b:5d:8a:bd:
22:f8:bc:f3:f1:1d:64:7a:21:a6:b1:6c:d5:a0:69:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2569-2570
4648
4771
4834
9325
17994
18006
18348
18353
38479
38485
38560
45222
55936
64070
133124
133420
133473
134444
sbgp-ipAddrBlock: critical
IPv4:
45.65.4.0/22
103.16.20.0/22
103.232.108.0/22
103.253.48.0/22
110.34.48.0/22
115.188.0.0/15
122.56.0.0/13
125.236.0.0/19
125.236.34.0/24
125.236.40.0-125.236.45.255
125.236.48.0-125.236.79.255
125.236.96.0-125.239.255.255
202.14.96.0/24
202.20.32.0/20
202.27.156.0/22
202.27.169.0/24
202.27.176.0-202.27.185.255
202.27.254.0/23
202.36.0.0/21
202.36.30.0/23
202.36.40.0/24
202.36.90.0/24
202.37.45.0/24
202.37.236.0/22
202.37.242.0-202.37.247.255
202.49.49.0/24
202.49.160.0/22
202.49.169.0/24
202.50.74.0/23
202.50.80.0/22
202.50.110.0/24
202.50.116.0/24
202.50.119.0/24
202.50.224.0/20
202.50.245.0/24
202.55.96.0/20
203.96.0.0/17
210.54.0.0/15
210.86.0.0/17
219.88.0.0/15
220.247.132.0/22
222.152.0.0/14
IPv6:
2401:4540::/32
2403:9800::/32
2404:e200::/32
2405:e840::/32
Signature Algorithm: sha256WithRSAEncryption
5f:aa:cd:53:9e:52:2f:7f:8b:4f:e7:38:0e:fd:12:cf:96:b7:
d0:bd:c3:0d:8d:85:78:29:49:9f:9b:e9:3d:dd:18:72:76:a4:
c4:8a:d3:c4:6b:05:83:1c:e4:43:d7:e5:36:94:ed:b5:e3:e1:
ff:e6:65:04:0f:6c:06:77:64:47:ef:36:de:76:b4:0a:6f:37:
2c:0b:23:60:44:fb:0f:c9:ca:67:8f:83:0b:f4:03:12:13:ae:
0d:ce:c9:d7:34:58:b6:02:48:0f:74:b4:ac:1d:48:35:c7:f8:
da:b2:ed:3e:8c:95:4b:a5:14:b5:a1:4c:af:00:5b:49:a9:85:
97:43:fd:e4:cb:ee:b9:91:cd:39:e7:bf:6e:a8:c2:38:de:49:
10:a3:91:36:d6:4d:22:13:53:40:b9:aa:57:fc:1d:76:49:0b:
0a:22:78:8a:97:f2:71:11:75:7c:0f:74:df:cc:e9:70:ce:87:
bf:44:b1:cf:44:66:af:ff:a8:62:f6:cb:39:00:52:45:ea:3c:
2f:0d:65:c9:97:52:bf:81:90:cb:5f:37:76:43:c4:30:d0:05:
80:eb:4b:9c:31:08:a8:b8:6d:96:97:0a:e7:ad:8e:74:3c:89:
c1:6f:3e:df:84:cc:08:c9:5a:d9:34:c7:df:d5:ec:57:16:4a:
84:3c:4a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:33 2026 by rpki-client