Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
File: uc1X4v9PWLuVmpVBoxz99ml2GLI.cer (raw, json)
Hash identifier: Ci55T6nbzQTDU/oY0P3rw7qaAu7rcdT2WNyhOfhpKSo=
Subject key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023CE7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Apr 2025 06:18:44 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135044
IP: 163.223.234.0/23
IP: 2001:df5:5040::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146663 (0x23ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 4 06:18:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:a8:4a:f6:33:62:6c:67:8e:0c:9c:37:05:
35:37:f2:3a:ac:6b:19:1f:23:fb:b5:e1:f9:16:44:
22:95:3a:b1:86:80:f0:09:e0:a5:d0:cb:49:70:b8:
a5:7d:75:3d:c6:f5:f5:21:03:20:5e:63:46:41:53:
74:6a:7d:d5:3b:62:04:da:4f:07:f6:36:0d:68:c6:
15:e4:1f:a2:eb:c8:8d:d5:ed:a3:4b:12:90:cf:93:
a4:b0:d5:fe:82:f6:3c:04:24:db:88:37:40:5a:16:
79:36:05:3e:f7:11:08:63:68:a3:1d:ef:fb:91:60:
5e:4d:70:37:28:69:a8:34:ce:4c:dd:04:a5:3d:5c:
f4:21:ac:8a:9d:e1:c0:5f:b8:a9:e3:a2:31:64:c4:
45:8a:5e:53:87:b4:d5:0e:0b:77:a8:3c:3e:60:80:
0e:46:56:30:d4:96:d6:17:3d:e1:34:c2:6e:44:67:
c3:18:60:ff:b7:ed:06:68:ac:4e:f3:ac:2a:27:64:
96:46:2d:8d:c7:58:57:c2:bf:40:10:58:df:d2:ae:
91:db:4d:d2:b4:b5:4e:ae:c0:2a:ab:21:5f:0c:ab:
a7:78:40:f0:9a:cd:db:89:cd:db:82:98:2d:29:64:
d8:15:a9:3d:bc:27:84:5e:50:4c:ba:bd:4a:fc:17:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135044
sbgp-ipAddrBlock: critical
IPv4:
163.223.234.0/23
IPv6:
2001:df5:5040::/48
Signature Algorithm: sha256WithRSAEncryption
b1:1d:5e:f6:a9:25:55:48:2b:a1:5e:29:93:2a:b0:98:ae:b6:
d0:65:67:ab:86:12:3c:d1:dc:94:c7:de:b1:5b:16:54:c9:7f:
d8:08:25:98:83:2c:71:4d:f4:fe:cd:c4:3f:2c:0e:91:bb:38:
04:0a:0d:83:4f:ca:09:39:46:05:99:18:2a:06:7d:68:93:8d:
4c:50:ba:ae:12:a6:11:2a:38:23:6a:84:88:cd:d6:42:54:fa:
8d:d5:a8:fa:66:ee:2d:6a:44:68:76:d6:0c:53:4c:32:fd:16:
b1:00:44:30:30:5a:5e:25:7c:f1:ed:70:95:de:b5:30:38:f1:
c6:61:4c:b0:7e:ae:a6:6e:49:fc:05:e4:5b:e6:ea:bf:32:7b:
28:0c:62:3a:55:a6:1b:f0:15:b1:d3:90:7c:ac:fe:5c:eb:81:
b9:54:51:3b:47:09:9a:87:00:68:fd:27:59:1e:85:97:4f:bb:
ea:20:0d:37:6e:12:29:12:5f:5e:37:c8:22:70:cc:18:c3:94:
dd:2a:5e:b5:4d:ab:f7:13:be:96:84:6e:aa:59:41:89:28:04:
b1:55:88:ab:74:ee:db:4c:24:5b:79:16:3e:11:77:ad:fc:99:
12:0e:5b:a2:6b:c9:37:f2:03:a1:0d:f9:fe:39:f0:e8:29:5e:
48:b0:77:b7
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjznMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQwNDA2MTg0NFoXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEUwMjMxMTAvBgNVBAUTKEI5Q0Q1N0UyRkY0RjU4QkI5NTlBOTU0
MUEzMUNGREY2Njk3NjE4QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXKqhK9jNibGeODJw3BTU38jqsaxkfI/u14fkWRCKVOrGGgPAJ4KXQy0lwuKV9
dT3G9fUhAyBeY0ZBU3RqfdU7YgTaTwf2Ng1oxhXkH6LryI3V7aNLEpDPk6Sw1f6C
9jwEJNuIN0BaFnk2BT73EQhjaKMd7/uRYF5NcDcoaag0zkzdBKU9XPQhrIqd4cBf
uKnjojFkxEWKXlOHtNUOC3eoPD5ggA5GVjDUltYXPeE0wm5EZ8MYYP+37QZorE7z
rConZJZGLY3HWFfCv0AQWN/SrpHbTdK0tU6uwCqrIV8Mq6d4QPCazduJzduCmC0p
ZNgVqT28J4ReUEy6vUr8F7bBAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUuc1X4v9P
WLuVmpVBoxz99ml2GLIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFMDIzL0E2NTRGRUYwMTExQzExRjBCMTVBRjk3MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RTAyMy9BNjU0RkVGMDExMUMxMUYwQjE1QUY5NzBDNEY5QUUwMi91YzFYNHY5
UFdMdVZtcFZCb3h6OTltbDJHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg+EMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBo9/qMA8EAgAC
MAkDBwAgAQ31UEAwDQYJKoZIhvcNAQELBQADggEBALEdXvapJVVIK6FeKZMqsJiu
ttBlZ6uGEjzR3JTH3rFbFlTJf9gIJZiDLHFN9P7NxD8sDpG7OAQKDYNPygk5RgWZ
GCoGfWiTjUxQuq4SphEqOCNqhIjN1kJU+o3VqPpm7i1qRGh21gxTTDL9FrEARDAw
Wl4lfPHtcJXetTA48cZhTLB+rqZuSfwF5Fvm6r8yeygMYjpVphvwFbHTkHys/lzr
gblUUTtHCZqHAGj9J1kehZdPu+ogDTduEikSX143yCJwzBjDlN0qXrVNq/cTvpaE
bqpZQYkoBLFViKt07ttMJFt5Fj4Rd638mRIOW6JryTfyA6EN+f458OgpXkiwd7c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:46:27 2025 by rpki-client