Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer
File: -LGWnnogmA-I6xCFb5oqWhkT3VE.cer (raw, json)
Hash identifier: cyqHkWKEOwcBpr9WEXEtq0yk2RQYm6eYGMS5n2JWHeI=
Subject key identifier: F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C5E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 04:47:19 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 137071
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142430 (0x22c5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 04:47:19 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91A38BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:eb:c3:9d:9a:d5:f3:78:9e:62:49:68:75:
65:62:1d:8c:12:2d:b7:7b:55:93:1a:1b:6e:84:56:
97:88:78:21:9d:b4:58:78:ea:ae:e8:79:85:98:30:
e1:97:4c:74:38:e1:e2:28:ff:c3:7e:1d:31:82:25:
74:91:5f:62:5b:4f:f6:48:b5:ac:b6:b7:5c:58:b7:
36:50:99:b3:f1:2c:d6:16:d9:a6:cc:c0:57:c1:37:
f0:d6:20:13:8b:6a:b7:34:c1:d8:30:fd:e9:02:4f:
dd:79:c9:37:5e:a1:96:3b:9d:c5:c9:2e:22:7b:e4:
5a:1b:de:89:f0:37:2c:a2:9d:84:f1:dd:a5:54:07:
c4:16:71:44:ec:e4:37:42:76:3f:df:83:c9:69:81:
de:c6:46:ca:54:a1:df:c9:f5:81:0c:cf:57:c9:50:
7f:ea:ce:3d:0c:cb:1e:c3:ae:61:d7:d8:5a:2f:a4:
a6:a4:0c:e2:f8:9d:8b:d3:5e:9e:1b:1d:d7:b5:50:
e2:3c:94:ab:e5:d8:9b:5f:6f:bd:6d:36:cf:7f:99:
ea:cb:87:21:62:90:53:79:38:fb:b2:32:d0:44:8b:
0c:05:98:c3:fd:cf:dc:13:18:c8:e2:a8:be:2b:43:
e2:61:f7:4e:d8:bf:ef:f2:7d:61:82:bf:e6:10:5f:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137071
Signature Algorithm: sha256WithRSAEncryption
39:e3:1d:06:5f:a4:3e:92:dc:ec:35:81:6e:43:35:2e:3b:c2:
a1:d7:ae:6e:7f:66:d9:48:51:e1:29:7d:32:42:46:9c:ed:89:
fa:65:18:7f:72:b7:ec:e2:6c:82:81:98:60:96:d0:9a:da:65:
e2:81:4f:37:c1:04:f3:50:76:d2:85:2f:a7:0d:8b:11:8e:6a:
e3:11:bd:ec:9e:4b:25:7f:48:5c:86:26:75:57:1f:02:1a:b8:
65:8b:84:74:ab:18:a5:0a:e7:54:cc:06:ef:07:8b:ba:bf:7a:
aa:d2:a7:db:ba:1e:91:f1:0d:0d:a3:25:df:62:64:23:02:79:
c8:df:c1:4f:11:5e:19:db:4c:b5:04:bf:4c:aa:f3:76:4f:ff:
4b:7b:be:4c:4a:75:be:4c:85:af:09:4a:90:4b:fa:17:c2:35:
10:4b:76:b3:c1:19:4f:8f:35:69:bb:eb:e1:aa:44:40:21:f4:
7d:d1:66:fb:1b:9f:11:77:2c:bb:ee:a4:84:e6:8b:f7:b6:9a:
c2:f9:d8:4e:12:f1:be:02:9a:59:15:67:5c:0d:a9:95:aa:10:
ef:1b:d1:1a:ac:7b:84:03:28:79:0b:08:9f:0a:ff:48:06:96:
8e:cd:88:19:25:bc:e8:bb:6e:62:69:cc:ee:9f:ba:86:ca:a8:
38:b5:e4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:08 2025 by rpki-client