Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
File: 1Hn1NF93o5en0pzMzvEk3B3_cro.cer (raw, json)
Hash identifier: MyemAlrjlLd0JNRoYlR43b1cZl56TF6m2TfpV5zHCbM=
Subject key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02216E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Dec 2024 00:53:02 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 131254
IP: 202.137.224.0/24
IP: 2001:df3:9e00::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139630 (0x2216e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 9 00:53:02 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9199A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:68:24:e4:9f:47:df:15:34:ce:e4:48:07:
53:0a:77:c6:a7:d5:e1:da:5f:e0:37:bf:be:8f:d3:
0c:d1:cd:bf:5c:e5:b8:0d:3d:22:49:c4:e3:ec:cf:
6e:de:a8:20:61:fc:4d:27:1e:f6:43:cf:58:1f:6c:
1d:53:94:a0:ff:89:65:78:50:09:35:e8:a4:6b:bb:
57:b2:b2:6a:ee:40:6f:83:24:24:6e:03:6d:60:8b:
e9:e4:2e:60:54:a8:36:92:89:c3:0f:0c:c3:97:8a:
cf:f5:5e:b9:35:46:a4:a7:02:f8:3e:af:5c:ef:a5:
71:57:08:47:58:bf:c2:57:92:f8:91:2b:d0:79:92:
70:9e:41:0f:a1:5b:40:2a:1f:90:e6:b6:f0:95:77:
b9:36:4c:60:47:b7:55:c3:a0:97:17:db:7e:11:16:
dc:50:73:f2:15:f8:a5:67:d4:46:bf:47:50:81:fe:
6f:6b:a1:75:2c:01:3d:ce:04:0e:01:9b:57:58:b4:
4d:90:bf:42:7e:c9:07:f8:6f:bf:03:0f:4e:ea:ad:
5f:cf:a7:c5:8f:93:e3:c1:ed:e3:19:ec:f3:09:5f:
1e:44:a3:48:e3:57:d9:12:f4:9b:b4:6d:e4:a6:cf:
08:a9:9b:f1:07:b4:4e:29:03:ba:79:12:32:70:95:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131254
sbgp-ipAddrBlock: critical
IPv4:
202.137.224.0/24
IPv6:
2001:df3:9e00::/48
Signature Algorithm: sha256WithRSAEncryption
cd:b3:09:96:f5:32:5f:b4:09:38:ba:a9:f6:d3:a3:c9:c3:3b:
f8:d5:31:34:bb:dc:37:21:9d:73:a3:d5:19:d5:fa:fe:b8:b4:
6a:6b:ea:3c:6b:8d:15:34:ee:0d:bd:9c:9c:8c:28:9a:15:ac:
df:2d:13:81:44:ca:73:67:05:f8:0e:6e:63:f0:2f:25:8f:24:
9f:a9:11:e1:51:97:d7:5b:75:1d:92:a9:2e:79:e6:86:bb:17:
f6:c3:5a:c7:68:82:7e:4d:b2:b9:6e:60:5e:ff:43:85:49:40:
ef:f8:cb:36:10:62:30:07:f3:b3:ee:d7:41:fd:85:24:0a:c2:
6f:bd:95:d8:9a:5f:ac:8c:d0:a5:61:8a:77:af:9b:8c:99:92:
31:5d:fa:ef:17:39:95:55:94:55:f9:be:64:a4:cf:6c:2a:b4:
49:7d:c5:b7:2e:47:ef:50:5f:ba:8c:05:a5:3d:ab:4c:e1:5c:
79:d9:73:51:b9:0d:d1:ca:ba:a9:22:27:9e:e0:b0:4c:ce:11:
37:9a:76:f9:9e:91:35:db:34:ef:7b:83:f3:96:04:b4:0b:ef:
69:e2:16:34:6e:e7:56:5f:57:dc:ce:35:6e:69:9f:f0:99:ba:
44:f2:54:aa:3d:c6:36:c5:86:ce:2c:1d:1e:35:a6:27:38:33:
dd:30:92:3e
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAiFuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwOTAwNTMwMloXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUND
Q0NFRjEyNERDMURGRjcyQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD1o2gk5J9H3xU0zuRIB1MKd8an1eHaX+A3v76P0wzRzb9c5bgNPSJJxOPsz27e
qCBh/E0nHvZDz1gfbB1TlKD/iWV4UAk16KRru1eysmruQG+DJCRuA21gi+nkLmBU
qDaSicMPDMOXis/1Xrk1RqSnAvg+r1zvpXFXCEdYv8JXkviRK9B5knCeQQ+hW0Aq
H5DmtvCVd7k2TGBHt1XDoJcX234RFtxQc/IV+KVn1Ea/R1CB/m9roXUsAT3OBA4B
m1dYtE2Qv0J+yQf4b78DD07qrV/Pp8WPk+PB7eMZ7PMJXx5Eo0jjV9kS9Ju0beSm
zwipm/EHtE4pA7p5EjJwlb6dAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU1Hn1NF93
o5en0pzMzvEk3B3/crowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk5QTcwL0NEQkIxODk2RDdEOTExRUM5QzI2NTc1NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5
M281ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgC2MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyongMA8EAgAC
MAkDBwAgAQ3zngAwDQYJKoZIhvcNAQELBQADggEBAM2zCZb1Ml+0CTi6qfbTo8nD
O/jVMTS73DchnXOj1RnV+v64tGpr6jxrjRU07g29nJyMKJoVrN8tE4FEynNnBfgO
bmPwLyWPJJ+pEeFRl9dbdR2SqS555oa7F/bDWsdogn5NsrluYF7/Q4VJQO/4yzYQ
YjAH87Pu10H9hSQKwm+9ldiaX6yM0KVhinevm4yZkjFd+u8XOZVVlFX5vmSkz2wq
tEl9xbcuR+9QX7qMBaU9q0zhXHnZc1G5DdHKuqkiJ57gsEzOETeadvmekTXbNO97
g/OWBLQL72niFjRu51ZfV9zONW5pn/CZukTyVKo9xjbFhs4sHR41pic4M90wkj4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:11 2025 by rpki-client