Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
File: nLES4qnHPxSEW2YBa9-8qIKhp-s.cer (raw, json)
Hash identifier: ESuNwDqw2fnH+ZHR4eJTr8oRyTNg7KGdrnfUs9R7tuA=
Subject key identifier: 9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 52F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 27 Apr 2026 16:03:45 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 193.119.0.0/19
IP: 2001:7fa:10::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21233 (0x52f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Apr 27 16:03:45 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A914EAE40000, serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:2d:ca:b6:43:06:aa:df:2c:31:46:38:45:
9a:22:ff:65:0a:30:37:88:80:a8:db:59:bc:b3:25:
56:af:fc:e4:9a:0b:cd:11:f8:15:64:8f:89:82:b8:
61:32:12:73:fd:05:d2:d0:5c:9a:ae:a9:c6:5f:74:
87:49:24:ee:dc:cb:0f:93:5b:a1:a9:79:d7:4a:5a:
60:c1:45:d2:28:ef:5f:17:3e:98:60:d7:fd:f3:ec:
c0:25:11:12:f6:df:3a:ac:9d:22:1f:43:cd:f0:06:
7a:5b:97:a5:c1:1b:3c:ae:7b:cd:3a:84:33:9b:fc:
d2:7f:8c:ae:73:7c:8a:1e:51:2f:13:41:f4:fc:a0:
35:8c:77:3b:55:15:8f:52:d1:25:57:02:86:e3:94:
5c:aa:9e:91:9d:4d:02:47:d8:3c:f9:af:76:4d:09:
c9:4e:50:8c:2e:9b:87:99:07:cb:58:03:f6:98:05:
fc:2f:d3:4b:40:65:65:e5:fe:12:cb:c8:18:c8:0c:
51:c3:40:47:9f:b8:39:6d:f3:5c:58:97:1a:d7:bf:
31:81:27:84:b2:e3:52:09:4e:34:f5:9f:82:c4:c0:
25:e1:0d:4a:e3:40:66:a1:9d:ad:e0:6e:54:d3:0b:
f5:48:d9:68:2a:f6:f0:4a:53:4c:b7:c2:b0:f9:53:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.119.0.0/19
IPv6:
2001:7fa:10::/48
Signature Algorithm: sha256WithRSAEncryption
1d:8c:e7:54:b3:f8:3f:b1:ab:7a:c9:d5:76:2a:df:45:a4:44:
6c:af:21:9e:e2:8d:06:78:0e:f7:98:47:88:5f:62:64:05:fa:
b2:2b:56:e2:d7:96:6e:a6:52:1f:6f:69:d0:cb:d3:a6:ae:8c:
26:e4:ed:db:c8:b6:50:91:58:2d:10:96:9c:fc:af:9f:2c:8e:
19:c5:99:11:f5:d7:4a:30:93:c9:2c:0b:9f:58:d9:ba:5c:a7:
4b:06:64:f6:0b:23:b1:cf:55:d1:a0:90:3a:68:60:02:67:0c:
4d:e9:96:90:fa:f1:f2:71:e3:63:c6:3c:08:ce:67:07:28:da:
a1:7d:45:66:ec:c8:23:a3:37:74:20:d9:db:bd:be:93:eb:5d:
9d:91:5a:b7:40:22:29:1f:b6:c1:b8:08:05:33:c1:01:18:43:
8f:0f:41:24:b4:84:fb:1a:2d:25:50:87:85:24:35:4f:5d:aa:
5b:c2:f7:b6:73:64:e5:27:9b:6a:4d:e3:ad:14:97:d3:6c:bb:
3c:3d:92:9c:84:d0:fd:21:1d:cb:81:c9:35:26:9d:df:76:66:
a7:bc:45:2d:97:d5:30:d7:66:08:4e:f8:f4:f9:79:c1:63:0a:
82:d1:db:10:f8:ca:3f:86:e1:ea:0f:12:c9:fe:ff:8f:47:bc:
81:b7:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:45 2026 by rpki-client