
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9150E4D0000/0/AS24322.asa
File: AS24322.asa (raw, json)
Hash identifier: L2LGSEWrjKF5UzAEAhvYLjmjqRVRN449fVZnedOshAA=
Subject key identifier: D8:AC:75:06:CE:75:FD:68:A7:DD:01:37:12:92:C1:D7:59:E6:46:BD
Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial: 1DB3F532F567197E03FEE55F8E399F5E87FCB968
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/AS24322.asa
Signing time: Mon 21 Sep 2026 20:46:57 +0000
ASPA not before: Mon 21 Sep 2026 20:41:57 +0000
ASPA not after: Mon 20 Sep 2027 20:46:57 +0000
Customer ASID: 24322
Providers: AS: 136582
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 11:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b3:f5:32:f5:67:19:7e:03:fe:e5:5f:8e:39:9f:5e:87:fc:b9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Validity
Not Before: Sep 21 20:41:57 2026 GMT
Not After : Sep 20 20:46:57 2027 GMT
Subject: CN=D8AC7506CE75FD68A7DD01371292C1D759E646BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:56:bc:54:cc:aa:02:e1:97:3e:ce:6c:51:
7c:e8:d7:91:b2:fd:5d:47:c2:a4:21:b1:c6:85:6f:
1d:86:aa:61:1b:3a:f8:df:17:f0:5a:10:13:21:b0:
d3:0e:b2:ea:42:a8:20:b0:97:d5:08:a8:d9:67:7d:
9d:e5:5f:24:64:dc:8e:c2:17:77:b5:47:5e:55:c5:
30:b0:13:7e:b9:63:a6:bc:77:5b:00:cb:a5:fa:55:
93:4a:33:b5:e6:c1:77:14:da:ec:f6:74:ae:8b:69:
f1:26:47:40:cf:ab:a6:42:b0:55:0c:f4:b5:7a:6f:
39:81:52:32:3d:3c:58:0b:6e:f3:f9:09:02:00:4a:
9a:1f:fe:c0:ee:78:be:21:8b:4b:1d:45:cd:ba:f6:
c6:7a:a5:84:fb:6d:25:af:79:3e:bf:30:ae:5e:8e:
28:20:32:32:fa:ba:c1:7d:f9:13:db:77:ab:be:c5:
2d:37:47:3a:c5:c7:46:7b:86:4b:f1:2c:ed:c1:37:
0d:a8:85:f8:3c:d3:97:3c:de:86:fd:1d:72:fa:8b:
c4:d5:47:e4:93:9c:a8:f0:11:da:2f:f8:f1:51:0a:
98:53:1f:54:03:9e:86:a2:ab:59:08:b1:7e:64:e1:
61:f8:31:fa:80:03:f3:a9:59:4b:7d:e5:55:bc:a0:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:75:06:CE:75:FD:68:A7:DD:01:37:12:92:C1:D7:59:E6:46:BD
X509v3 Authority Key Identifier:
keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/AS24322.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24322
Signature Algorithm: sha256WithRSAEncryption
5d:13:de:2d:66:ef:67:63:89:98:27:fc:c9:c7:6d:d0:ef:0e:
96:eb:97:e0:1d:2b:f1:38:be:89:3e:53:2f:1b:a9:5f:ad:44:
d1:01:e3:07:a1:69:80:72:93:1b:25:2d:a0:99:53:fd:cf:11:
e8:47:c6:3a:71:82:e6:f5:05:ab:2a:38:7a:f7:60:2a:eb:2f:
09:52:74:24:03:4a:fb:19:36:eb:81:21:ee:63:a0:76:d4:8a:
dc:a5:60:b6:6f:20:83:f0:93:b0:02:12:59:f7:18:8c:2f:76:
ca:15:54:32:a5:96:5e:65:13:b6:43:8b:ec:e0:23:ff:60:c8:
d8:c1:23:f6:5b:83:65:c9:ee:2e:b1:e0:4f:4a:3a:d9:e3:ee:
e7:3e:03:57:0a:f6:cf:bf:65:f7:62:30:19:27:61:fd:90:23:
23:3d:13:05:ef:67:03:72:56:b1:dc:7f:2e:7d:c9:44:1b:17:
a3:f2:85:2e:47:98:dd:ba:3b:db:7a:ce:24:06:71:13:f6:eb:
84:93:b0:01:b5:73:97:ec:3c:e9:51:16:b1:66:9c:ea:c3:a4:
04:93:7c:21:c2:40:4b:27:ab:ed:e4:c2:c0:e0:ec:53:91:dc:
41:c4:d7:27:67:b4:d0:78:f6:20:ef:c9:99:3e:0c:58:a9:08:
43:a4:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:55:09 2026 by rpki-client