$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OILvzAfeSNIv8spYHxrH_k3h_U.cer File: 3OILvzAfeSNIv8spYHxrH_k3h_U.cer (raw, json) Hash identifier: P3y1xN4N0TWXlyBrZntd/mOKTIgGSy9xumCVccPvad0= Subject key identifier: DC:E2:0B:BF:30:1F:79:23:48:BF:CB:29:60:7C:6B:1F:F9:37:87:F5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02DF42 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.mft caRepository: rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 20 Oct 2026 08:54:57 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 103.30.240.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188226 (0x2df42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Oct 20 08:54:57 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A915037C, serialNumber=DCE20BBF301F792348BFCB29607C6B1FF93787F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4c:81:6d:e1:75:11:1b:d3:11:fa:1a:02:ce: 18:77:6c:d9:67:75:03:c6:55:ff:34:fe:1a:ea:05: ad:fc:4d:ad:76:a0:db:97:41:ef:9f:7a:ad:dc:60: a7:88:20:0a:0b:ea:f2:af:a9:58:f8:64:99:69:aa: 71:05:70:07:f5:7c:d3:ef:84:84:3e:70:96:37:97: 4f:c2:b3:9d:43:21:fc:8e:f7:bf:e8:96:65:48:f9: bf:18:e0:4b:49:39:a9:a6:83:e0:65:6c:1e:5c:f9: 7d:37:80:68:3e:54:0d:ad:d4:15:69:a7:e7:a1:d2: ea:df:f8:8f:52:15:11:08:a5:47:28:71:de:cc:16: f3:c9:65:b8:53:a1:1e:2f:af:d6:c2:3f:20:8f:03: c3:81:b2:a8:07:73:9e:6e:d5:a7:49:0d:24:2c:8b: 3d:aa:f4:1e:48:bb:e9:b5:ee:23:f2:54:54:66:41: 0e:63:42:f0:62:53:b2:b9:e2:2a:ef:bd:ca:22:5d: fa:c8:fa:63:17:03:65:eb:2e:b8:5d:32:c6:64:8b: c9:32:b1:c0:d7:8b:f4:3c:66:93:22:d6:05:9d:85: 89:42:25:fd:3d:8a:03:80:7d:f3:f3:0b:39:57:dc: e7:c2:1b:0f:29:8f:18:de:d2:63:da:c1:a4:5f:2a: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E2:0B:BF:30:1F:79:23:48:BF:CB:29:60:7C:6B:1F:F9:37:87:F5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915037C/EA7CC5E6CC6311F1AA3EDD620D66CEF9/3OILvzAfeSNIv8spYHxrH_k3h_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.240.0/22 Signature Algorithm: sha256WithRSAEncryption bc:38:d9:c8:25:31:b1:e0:77:6e:1d:16:39:e4:65:f9:43:32: 07:85:84:9a:32:a4:87:e4:40:f5:c8:2e:8e:54:e5:2b:bf:a2: d7:ea:77:07:74:00:3d:95:a0:7b:d6:93:6a:a3:c8:30:32:ed: 49:3d:83:95:6c:97:bf:b5:52:0a:ac:ac:8c:b4:d3:af:20:3c: fd:f2:69:af:c8:a0:1b:2f:3c:78:98:b1:b0:a1:80:80:a3:ee: 2a:5e:86:7d:7b:0a:43:49:b4:d4:a8:fb:88:92:12:c0:64:64: df:a1:14:fe:4e:b8:87:ee:cb:d7:8c:7f:21:d3:74:e0:93:d4: d9:d9:3a:56:f6:63:ca:9e:e4:e5:15:da:fa:33:a5:58:b0:35: e3:a9:9a:06:d5:a3:eb:a6:8c:05:cf:ad:96:a0:38:59:55:73: 38:77:c9:ef:8e:aa:19:c3:57:f5:94:0d:90:cd:ee:e9:cd:a9: a9:b5:dd:f2:d5:90:df:b3:e6:5f:7b:0d:79:7c:9a:ed:e6:d1: 94:34:63:a7:f8:ab:7b:b8:60:91:ce:4f:1b:c4:ff:1a:f7:34: 93:9f:e0:be:09:d8:57:12:49:2e:c5:14:0e:70:fb:bc:8f:48: 25:08:cd:28:48:6c:6e:a1:7f:e2:af:60:14:16:f8:8f:26:84: d5:89:b6:09 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAt9CMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTAyMDA4NTQ1N1oXDTI3MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTAzN0MxMTAvBgNVBAUTKERDRTIwQkJGMzAxRjc5MjM0OEJGQ0Iy OTYwN0M2QjFGRjkzNzg3RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrTIFt4XURG9MR+hoCzhh3bNlndQPGVf80/hrqBa38Ta12oNuXQe+feq3cYKeI IAoL6vKvqVj4ZJlpqnEFcAf1fNPvhIQ+cJY3l0/Cs51DIfyO97/olmVI+b8Y4EtJ Oammg+BlbB5c+X03gGg+VA2t1BVpp+eh0urf+I9SFREIpUcocd7MFvPJZbhToR4v r9bCPyCPA8OBsqgHc55u1adJDSQsiz2q9B5Iu+m17iPyVFRmQQ5jQvBiU7K54irv vcoiXfrI+mMXA2XrLrhdMsZki8kyscDXi/Q8ZpMi1gWdhYlCJf09igOAffPzCzlX 3OfCGw8pjxje0mPawaRfKmG9AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU3OILvzAf eSNIv8spYHxrH/k3h/UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUwMzdDL0VBN0NDNUU2Q0M2MzExRjFBQTNFREQ2MjBENjZDRUY5LzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MDM3Qy9FQTdDQzVFNkNDNjMxMUYxQUEzRURENjIwRDY2Q0VGOS8zT0lMdnpB ZmVTTkl2OHNwWUh4ckhfazNoX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJnHvAwDQYJKoZIhvcNAQELBQADggEBALw42cglMbHgd24dFjnk ZflDMgeFhJoypIfkQPXILo5U5Su/otfqdwd0AD2VoHvWk2qjyDAy7Uk9g5Vsl7+1 UgqsrIy0068gPP3yaa/IoBsvPHiYsbChgICj7ipehn17CkNJtNSo+4iSEsBkZN+h FP5OuIfuy9eMfyHTdOCT1NnZOlb2Y8qe5OUV2vozpViwNeOpmgbVo+umjAXPrZag OFlVczh3ye+OqhnDV/WUDZDN7unNqam13fLVkN+z5l97DXl8mu3m0ZQ0Y6f4q3u4 YJHOTxvE/xr3NJOf4L4J2FcSSS7FFA5w+7yPSCUIzShIbG6hf+KvYBQW+I8mhNWJ tgk= -----END CERTIFICATE-----Generated at Sun Nov 15 09:54:00 2026 by rpki-client