Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
File:                     0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer (raw, json)
Hash identifier:          0t2bUmPsGi6bzcQSazexAKEwyP3/9oIpV48vm8SfU+8=
Subject key identifier:   D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02043F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Aug 2024 16:48:52 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 18020
                          AS: 38544
                          AS: 45251
                          AS: 45454
                          AS: 55449
                          AS: 55803
                          IP: 49.156.24.0/21
                          IP: 101.0.64.0/18
                          IP: 103.14.64.0/22
                          IP: 103.18.196.0/22
                          IP: 103.208.216.0/22
                          IP: 103.237.108.0/22
                          IP: 103.250.20.0/22
                          IP: 110.173.128.0/19
                          IP: 111.67.0.0/19
                          IP: 111.118.160.0/20
                          IP: 116.90.0.0/18
                          IP: 125.214.64.0/20
                          IP: 137.59.248.0/22
                          IP: 150.129.12.0/22
                          IP: 163.53.248.0/22
                          IP: 175.41.40.0/22
                          IP: 182.160.128.0/18
                          IP: 202.4.224.0/20
                          IP: 202.45.150.0/23
                          IP: 202.130.44.0/22
                          IP: 203.16.60.0/23
                          IP: 203.19.59.0/24
                          IP: 203.98.69.0 -- 203.98.71.255
                          IP: 203.98.73.0/24
                          IP: 203.98.75.0/24
                          IP: 203.98.79.0 -- 203.98.80.255
                          IP: 203.98.83.0 -- 203.98.86.255
                          IP: 203.98.88.0/24
                          IP: 203.98.91.0 -- 203.98.93.255
                          IP: 203.98.95.0/24
                          IP: 203.123.59.0/24
                          IP: 223.27.0.0/19
                          IP: 2400:a600::/32
                          IP: 2401:fc00::/32
                          IP: 2401:fe00::/32
                          IP: 2402:9400::/32
                          IP: 2407:7800::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132159 (0x2043f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Aug  1 16:48:52 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A916B33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2b:68:fc:81:20:c7:84:ac:89:b6:1a:0d:56:
                    9c:64:82:5d:03:eb:65:a2:1f:24:12:9e:a5:f5:3b:
                    a5:fa:cd:cb:9b:cb:2a:37:11:b7:70:fd:2f:43:3a:
                    e8:50:4c:06:d9:13:cc:61:2e:1b:d9:70:ce:96:df:
                    5c:cb:25:0a:4f:10:77:2c:68:5c:ab:2d:22:24:5d:
                    08:da:06:82:58:86:b6:6b:a4:32:ae:9b:eb:88:24:
                    47:ff:6c:14:8b:87:0e:56:0e:68:a1:77:55:35:7d:
                    0c:18:00:00:ac:5f:8c:a7:ed:1a:80:fb:02:1c:cf:
                    46:6a:ff:06:13:0f:93:cd:6e:4a:6e:d7:36:76:50:
                    e7:80:11:58:fe:09:02:2b:90:50:ac:df:48:6c:35:
                    e7:95:71:03:68:f2:e8:f7:12:87:94:e4:26:eb:5c:
                    11:24:1d:6b:dd:5e:28:65:92:39:1f:33:d6:fb:4b:
                    d7:7a:1d:39:5f:38:60:07:cb:84:47:04:4e:0f:72:
                    5b:22:4e:4f:c4:da:c4:97:c2:1d:70:65:34:76:c5:
                    a5:62:9b:8e:b5:10:34:a8:a7:c6:f0:57:3e:f2:97:
                    ac:76:fe:67:e9:5e:2c:81:ef:d2:c8:a7:cf:d0:4e:
                    bf:8d:ce:63:73:54:c6:3f:83:8a:07:81:3e:ce:d6:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18020
                  38544
                  45251
                  45454
                  55449
                  55803

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.24.0/21
                  101.0.64.0/18
                  103.14.64.0/22
                  103.18.196.0/22
                  103.208.216.0/22
                  103.237.108.0/22
                  103.250.20.0/22
                  110.173.128.0/19
                  111.67.0.0/19
                  111.118.160.0/20
                  116.90.0.0/18
                  125.214.64.0/20
                  137.59.248.0/22
                  150.129.12.0/22
                  163.53.248.0/22
                  175.41.40.0/22
                  182.160.128.0/18
                  202.4.224.0/20
                  202.45.150.0/23
                  202.130.44.0/22
                  203.16.60.0/23
                  203.19.59.0/24
                  203.98.69.0-203.98.71.255
                  203.98.73.0/24
                  203.98.75.0/24
                  203.98.79.0-203.98.80.255
                  203.98.83.0-203.98.86.255
                  203.98.88.0/24
                  203.98.91.0-203.98.93.255
                  203.98.95.0/24
                  203.123.59.0/24
                  223.27.0.0/19
                IPv6:
                  2400:a600::/32
                  2401:fc00::/32
                  2401:fe00::/32
                  2402:9400::/32
                  2407:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:8e:e2:81:3a:89:83:c1:02:39:6c:2d:b0:f8:34:d9:8f:
         6f:8f:fd:69:4b:d7:3f:04:06:c5:e9:aa:f1:b4:75:56:0e:94:
         2c:ef:75:f1:cb:7b:61:fe:52:b4:6e:be:6b:1c:41:69:81:a7:
         90:17:06:82:84:c2:0f:85:59:75:a9:90:85:d1:c3:fe:37:bf:
         ea:c7:b6:83:94:4a:cf:be:84:b8:d1:fa:ae:07:59:75:d0:6b:
         a9:22:df:59:92:77:b4:4b:4a:8f:01:6d:53:6a:4a:13:55:5b:
         22:f6:8e:aa:81:94:c9:3a:36:7d:01:92:34:58:8d:35:a5:73:
         49:b8:81:a4:ee:56:3d:0d:6a:fd:28:b3:7a:b2:a8:6f:dc:7e:
         dd:5a:8c:60:c0:24:ec:70:74:5c:24:4e:a7:cc:51:eb:49:d7:
         7c:ed:6a:30:bc:90:05:f0:02:19:23:6d:89:d6:6c:51:32:eb:
         6d:88:ce:d1:d1:b8:ef:03:3d:b1:8c:5e:0e:e2:4b:9b:dd:1c:
         b3:54:a7:11:d4:51:a0:eb:45:eb:22:30:75:24:51:62:7b:1f:
         6f:bc:4b:06:8a:bd:f6:bc:d2:d6:84:15:0c:6b:f4:b9:51:d2:
         19:1c:ef:ff:a4:22:45:a7:b6:b4:e7:5e:20:85:98:d0:d0:1c:
         60:b4:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:07 2025 by rpki-client