Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer
File: o85utTGolR0ko33yegHrOWUdfso.cer (raw, json)
Hash identifier: y/hx3c8wm5QOeMqFo6VxAk5gX1qX+oS7X8gekYj5K2w=
Subject key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DE86
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Manifest: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/59/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Thu 15 Oct 2026 14:23:29 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 103.121.208.0/22
IP: 2403:71c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188038 (0x2de86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 15 14:23:29 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:d2:f5:9d:97:6f:f0:70:57:6f:69:6e:19:
63:f3:09:15:95:3b:17:eb:a1:34:df:5a:b1:56:d3:
d4:c3:28:55:44:73:dd:6d:65:94:3f:d2:cc:df:69:
ea:15:a0:08:9e:dd:7a:9e:15:85:98:24:ab:8c:52:
a5:fd:85:42:88:c1:09:40:63:47:ed:3d:ff:0e:74:
96:25:bf:77:12:f3:97:67:93:67:ba:c6:1b:fb:0a:
15:2c:06:2c:52:cc:0e:1c:e5:fc:93:2e:47:2d:87:
f0:4a:bf:3c:ae:d2:b5:88:41:1e:2e:7a:65:b0:41:
7e:3a:ba:e2:bb:d1:d1:5f:43:21:89:3c:f1:37:72:
ab:20:07:17:6d:f3:6b:af:e8:74:9d:9b:ab:e7:dc:
49:73:54:4a:5a:be:77:de:d7:17:24:59:eb:84:6f:
1e:af:e8:1a:e6:af:b6:44:44:6d:6b:a8:f5:9e:eb:
43:31:31:4c:51:1c:f1:12:f0:a8:20:3a:b6:05:46:
0c:4d:e2:6b:07:f9:f0:96:d9:b3:6b:1e:c0:73:e1:
22:f9:88:9d:00:18:7f:65:73:ef:b1:35:69:d7:fc:
f7:e6:0b:90:e1:14:24:f2:7e:bf:86:0f:d9:9e:b3:
b8:1a:b9:7f:4f:58:b0:00:0c:76:25:e4:a9:41:17:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/59/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.208.0/22
IPv6:
2403:71c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:69:36:9e:d3:ce:17:a1:4a:93:22:95:ab:92:e6:58:00:93:
4c:19:3c:fc:93:9f:cc:3b:bd:85:71:9c:db:40:fc:34:73:6b:
38:c9:e3:a8:f3:5b:c0:c1:bb:aa:08:1b:23:77:9d:d7:2f:43:
98:c0:13:31:c2:f5:22:26:fb:35:1e:63:4b:fd:47:59:e1:90:
dc:bc:1e:fd:4f:b5:08:04:53:c6:37:36:1b:e3:77:1d:cd:93:
62:95:cc:0f:6c:68:54:af:02:85:47:96:5f:3d:2f:ba:1c:5e:
1e:0f:e7:87:bd:af:36:dc:50:a7:98:f2:32:0c:bb:74:de:d9:
9c:0f:7d:b3:67:af:60:f8:2d:fd:e0:69:05:28:47:d3:ff:5a:
71:20:64:e8:12:97:74:f3:60:55:c7:ca:60:c9:e6:d8:1c:cd:
c4:42:2e:32:9e:c1:b5:a0:48:e1:5a:ef:19:5c:44:07:a9:13:
2c:a9:8e:ad:fb:83:de:8e:93:fe:7e:3f:6a:90:6b:f0:6e:bf:
ac:41:bf:69:5b:49:2e:e6:a4:ab:8f:b7:88:a6:87:01:bc:13:
6d:20:4d:6f:7e:8e:76:06:3f:1b:c3:14:81:c9:93:f2:4b:4c:
5e:29:e3:cc:9a:95:f7:5d:ed:da:f7:c3:67:da:a5:78:cf:e8:
6c:06:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:06 2026 by rpki-client