Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
File: sRoiVto9XbOPPn6bWct0YsnnsqY.cer (raw, json)
Hash identifier: hdhGoHHOnowi1ngofD6cqk7B2iqj6pHYdSHSRz2ipeE=
Subject key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7AAE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 08:48:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 146.171.0.0/16
IP: 192.161.128.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31406 (0x7aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 1 08:48:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:d2:61:35:44:f7:88:91:4e:07:79:c7:91:
e8:f5:08:71:d8:12:ab:22:db:22:f1:00:f2:b3:d7:
52:69:18:7f:f2:6f:c7:54:05:00:d8:c3:f5:16:7e:
d0:e8:34:1e:d7:b7:d8:67:50:34:09:85:e6:f5:75:
9e:53:fe:44:55:92:1f:86:46:c0:69:ec:ba:d3:79:
bb:c1:8a:de:71:c5:12:ff:18:5e:c6:b1:8c:31:43:
b7:ed:38:2d:3a:47:9e:af:cc:2f:80:ef:06:b1:75:
ab:d1:05:2a:bc:37:7b:91:76:58:fc:59:a9:f1:cf:
ef:82:1a:07:91:93:f7:58:58:58:8b:ed:90:42:58:
32:53:4d:0b:2f:2e:c3:68:8a:84:da:b9:dd:d2:0e:
b2:67:35:b8:7f:29:74:c0:05:5f:66:ba:d2:b6:3c:
2e:f2:9a:8a:d5:3e:1a:34:ed:d4:b9:53:5c:9a:36:
c3:2d:fa:28:32:92:28:f6:d9:6d:33:ce:3f:72:fd:
de:0c:54:34:01:1b:a1:a4:58:cd:83:27:65:c0:cf:
d7:27:62:8b:b3:0d:19:39:bf:06:62:f6:4f:db:82:
d1:96:0e:ea:8a:83:4e:a8:df:4a:63:3e:a4:80:c3:
3f:d4:eb:6f:17:64:10:a3:c0:2c:39:5b:9a:d0:d3:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.171.0.0/16
192.161.128.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:83:6e:27:d4:6e:4f:1f:32:18:1d:af:c7:bc:c1:d0:7a:14:
7d:f4:aa:d5:a2:43:96:eb:51:de:34:5b:a9:36:e9:57:42:08:
d0:96:37:b6:3e:fc:01:8d:c3:40:3a:ec:b0:ea:df:7f:1a:01:
b2:9d:bd:ef:e5:e1:13:cf:2f:da:c5:3d:3b:d7:bf:33:0b:3b:
9e:68:56:1a:2a:27:6d:ec:4a:47:87:e1:c0:9e:8d:8b:58:7b:
c4:1f:a4:47:16:f3:1c:80:1c:0c:93:6c:03:b2:1d:af:c5:48:
fa:f7:ae:05:cc:f2:d5:a1:7e:db:b7:76:e8:5a:2c:a4:fa:9d:
4d:64:79:c3:19:30:3c:72:68:95:16:41:19:4e:04:08:0e:c4:
3e:ab:96:9e:0f:04:63:ae:f6:be:ce:23:43:0c:c9:5a:04:f4:
1a:9f:15:9e:ef:82:c1:39:ab:3a:12:48:53:f8:8f:9b:7a:2b:
47:34:3f:62:45:a1:1f:f8:d4:2c:7d:d3:a5:01:20:a4:0e:cc:
ba:b3:26:66:e7:dd:d6:78:89:61:64:31:6a:03:54:99:88:7d:
70:fd:8c:09:2e:a2:63:f6:9b:96:24:54:fb:d6:71:50:97:0a:
df:e6:74:6a:0f:9a:1f:9c:03:44:95:5f:4d:61:5e:10:56:a7:
3b:92:cc:4b
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICeq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNTAxMDg0ODAzWhcNMjcwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFDQ0NGNDExMC8GA1UEBRMoQjExQTIyNTZEQTNENURCMzhGM0U3RTlC
NTlDQjc0NjJDOUU3QjJBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AM4j0mE1RPeIkU4HeceR6PUIcdgSqyLbIvEA8rPXUmkYf/Jvx1QFANjD9RZ+0Og0
Hte32GdQNAmF5vV1nlP+RFWSH4ZGwGnsutN5u8GK3nHFEv8YXsaxjDFDt+04LTpH
nq/ML4DvBrF1q9EFKrw3e5F2WPxZqfHP74IaB5GT91hYWIvtkEJYMlNNCy8uw2iK
hNq53dIOsmc1uH8pdMAFX2a60rY8LvKaitU+GjTt1LlTXJo2wy36KDKSKPbZbTPO
P3L93gxUNAEboaRYzYMnZcDP1ydii7MNGTm/BmL2T9uC0ZYO6oqDTqjfSmM+pIDD
P9TrbxdkEKPALDlbmtDTP1cCAwEAAaOCAvgwggL0MB0GA1UdDgQWBBSxGiJW2j1d
s48+fptZy3RiyeeypjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NDRjQvQTI0NDFCRDhGMEYxMTFGMEJENkRGNTU1NDM2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNDQ0Y0L0EyNDQxQkQ4RjBGMTExRjBCRDZERjU1NTQzNkY1NkJDL3NSb2lWdG85
WGJPUFBuNmJXY3QwWXNubnNxWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQVMBMw
EQQCAAEwCwMDAJKrAwQBwKGAMA0GCSqGSIb3DQEBCwUAA4IBAQB/g24n1G5PHzIY
Ha/HvMHQehR99KrVokOW61HeNFupNulXQgjQlje2PvwBjcNAOuyw6t9/GgGynb3v
5eETzy/axT07178zCzueaFYaKidt7EpHh+HAno2LWHvEH6RHFvMcgBwMk2wDsh2v
xUj6964FzPLVoX7bt3boWiyk+p1NZHnDGTA8cmiVFkEZTgQIDsQ+q5aeDwRjrva+
ziNDDMlaBPQanxWe74LBOas6EkhT+I+beitHND9iRaEf+NQsfdOlASCkDsy6syZm
593WeIlhZDFqA1SZiH1w/YwJLqJj9puWJFT71nFQlwrf5nRqD5ofnANElV9NYV4Q
Vqc7ksxL
-----END CERTIFICATE-----
Generated at Wed May 13 03:08:31 2026 by rpki-client