
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/1/AS153346.asa
File: AS153346.asa (raw, json)
Hash identifier: rAU+nhqV6DoL50iYgf+3duDnIh+fo6Vc/7vgCwv8AHo=
Subject key identifier: D6:43:1F:A3:80:73:9A:35:B4:2F:24:A9:1E:2D:2C:68:DD:D8:4D:70
Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial: 6D71849CDBB50942982717A489E8DDBCF4FD20BF
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/AS153346.asa
Signing time: Fri 11 Sep 2026 04:32:07 +0000
ASPA not before: Fri 11 Sep 2026 04:27:07 +0000
ASPA not after: Fri 10 Sep 2027 04:32:07 +0000
Customer ASID: 153346
Providers: AS: 134090
AS: 136557
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 06:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:71:84:9c:db:b5:09:42:98:27:17:a4:89:e8:dd:bc:f4:fd:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Validity
Not Before: Sep 11 04:27:07 2026 GMT
Not After : Sep 10 04:32:07 2027 GMT
Subject: CN=D6431FA380739A35B42F24A91E2D2C68DDD84D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:b8:bd:fc:6c:5d:11:2b:37:66:3e:8e:a7:
f4:95:9a:79:10:24:c3:75:79:5f:0c:4e:bf:02:3e:
09:b8:4d:c8:e4:45:78:bc:94:3d:68:92:3e:af:08:
a3:4b:6f:4c:e6:52:d9:33:38:2a:2a:54:20:86:4e:
58:03:ce:a8:d5:fb:5c:69:b9:c9:7b:8e:46:8d:b5:
f8:11:5d:09:92:c1:80:6f:42:bb:c1:da:04:95:9d:
87:de:0b:7d:f7:fb:3e:4f:34:09:45:b9:8b:e4:16:
18:8e:cf:94:6c:3e:c6:00:72:ea:54:af:03:f7:54:
44:b9:8c:55:1b:a7:db:53:37:70:88:85:d3:03:58:
b7:89:74:de:5f:94:a2:f7:0a:8d:99:aa:c0:df:cd:
30:27:bf:3a:52:10:d7:bb:ab:24:66:26:b9:66:99:
93:e1:bd:76:3c:c9:77:12:90:12:7d:20:f0:71:88:
5f:0a:3e:c7:47:66:d0:1a:de:c9:53:91:c5:1f:b7:
2e:ea:13:9b:37:e8:e2:7c:fa:06:5e:9a:1e:25:11:
d4:dd:08:d3:2e:d2:97:13:42:f6:d4:b5:c7:34:ce:
36:16:f2:09:32:a7:c8:40:02:7c:4c:10:db:e7:3d:
9c:17:c1:e0:47:27:77:78:26:f8:73:85:59:4a:40:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:1F:A3:80:73:9A:35:B4:2F:24:A9:1E:2D:2C:68:DD:D8:4D:70
X509v3 Authority Key Identifier:
keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/AS153346.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153346
Signature Algorithm: sha256WithRSAEncryption
a8:af:3e:36:f8:1f:95:72:5d:b5:d2:24:d7:59:90:2e:ec:ae:
54:79:c8:fb:d0:77:17:cc:7b:78:ad:f4:a5:64:28:6b:ae:30:
09:b5:ee:c0:31:b4:68:d1:ba:29:f5:75:bb:10:5f:57:b7:97:
f9:f4:34:d8:a1:44:63:d5:17:91:10:15:98:55:55:6e:b9:cc:
74:fe:d4:cd:72:3e:28:79:9d:7d:af:1c:be:96:6a:7b:14:d2:
88:d6:1e:6c:92:41:70:f7:49:ac:0e:2a:d7:74:2a:1f:30:88:
d9:1b:98:67:3a:05:2f:04:8f:15:c0:bb:f4:5f:08:f4:e4:a8:
f7:7a:77:51:a1:e4:42:d6:f3:7b:3f:b1:bf:66:30:de:0f:b4:
09:37:70:80:34:5c:a8:07:41:fe:9b:0c:e5:87:f1:2e:b6:c3:
93:8f:b0:83:5d:54:ac:21:0c:80:ae:b3:ec:6c:26:4a:af:6b:
b9:6c:a5:97:45:4d:fa:36:25:30:6d:48:38:25:89:37:4f:6d:
20:8e:ab:e0:bd:3b:a3:40:fa:21:0b:ca:54:31:52:4a:ab:55:
e7:69:12:6c:e7:dd:65:9b:15:bf:63:2a:36:33:25:f0:d0:32:
99:70:37:0a:a8:e4:64:10:67:d1:7e:47:d8:fc:a8:1f:c8:8d:
f4:83:dd:87
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUbXGEnNu1CUKYJxekiejdvPT9IL8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD
RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MDkxMTA0MjcwN1oX
DTI3MDkxMDA0MzIwN1owMzExMC8GA1UEAxMoRDY0MzFGQTM4MDczOUEzNUI0MkYy
NEE5MUUyRDJDNjhEREQ4NEQ3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALfvuL38bF0RKzdmPo6n9JWaeRAkw3V5XwxOvwI+CbhNyORFeLyUPWiSPq8I
o0tvTOZS2TM4KipUIIZOWAPOqNX7XGm5yXuORo21+BFdCZLBgG9Cu8HaBJWdh94L
fff7Pk80CUW5i+QWGI7PlGw+xgBy6lSvA/dURLmMVRun21M3cIiF0wNYt4l03l+U
ovcKjZmqwN/NMCe/OlIQ17urJGYmuWaZk+G9djzJdxKQEn0g8HGIXwo+x0dm0Bre
yVORxR+3LuoTmzfo4nz6Bl6aHiUR1N0I0y7SlxNC9tS1xzTONhbyCTKnyEACfEwQ
2+c9nBfB4Ecnd3gm+HOFWUpAXg0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTWQx+j
gHOaNbQvJKkeLSxo3dhNcDAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT
+jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky
QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV
OWlTUUJ0aVRodmh4dVdrX28uY2VyMF0GCCsGAQUFBwELBFEwTzBNBggrBgEFBQcw
C4ZBcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3
QjAwMDAvMS9BUzE1MzM0Ni5hc2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCVwIwDQYJKoZIhvcNAQELBQADggEBAKiv
Pjb4H5VyXbXSJNdZkC7srlR5yPvQdxfMe3it9KVkKGuuMAm17sAxtGjRuin1dbsQ
X1e3l/n0NNihRGPVF5EQFZhVVW65zHT+1M1yPih5nX2vHL6WansU0ojWHmySQXD3
SawOKtd0Kh8wiNkbmGc6BS8EjxXAu/RfCPTkqPd6d1Gh5ELW83s/sb9mMN4PtAk3
cIA0XKgHQf6bDOWH8S62w5OPsINdVKwhDICus+xsJkqva7lspZdFTfo2JTBtSDgl
iTdPbSCOq+C9O6NA+iELylQxUkqrVedpEmzn3WWbFb9jKjYzJfDQMplwNwqo5GQQ
Z9F+R9j8qB/IjfSD3Yc=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:13:14 2026 by rpki-client