Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
File: 71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer (raw, json)
Hash identifier: SyQmDqcD/Du8KI53RP3IVa0QsQK+z2+jEkhcK8qwAQg=
Subject key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F03
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Nov 2024 20:18:36 +0000
Certificate not after: Sun 30 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 152150
IP: 103.174.46.0/23
IP: 2001:df7:b780::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139011 (0x21f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 30 20:18:36 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=A91B9BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:d8:0c:9f:4c:0a:06:a7:77:93:9a:79:f6:
bc:ad:de:f0:96:6e:90:a6:fb:57:f5:a0:b0:36:f3:
54:08:92:4c:e7:d0:a1:2e:a2:b8:1e:9e:50:47:a8:
06:fb:35:15:d7:e1:28:75:d4:70:db:e3:44:10:6f:
1d:c3:10:1f:ec:fe:5d:c2:71:22:06:98:ec:c3:7e:
ea:55:4e:da:dd:50:13:46:30:5c:9c:1a:1d:e7:89:
32:e6:fc:bb:c0:1e:df:fe:ae:80:e8:fb:8f:dd:7a:
ca:97:9c:1c:a4:a5:c9:62:fd:83:e7:0d:aa:f9:bd:
4a:21:f9:f0:29:43:65:9e:a4:17:45:3d:ff:90:53:
29:d0:20:96:38:68:9d:47:3c:c5:9d:5a:27:64:59:
a8:ee:5b:22:f9:e0:f4:6c:c8:7b:06:86:ec:e8:67:
19:6b:fd:06:1c:1d:9e:38:e7:b9:f7:48:6a:d5:f2:
94:8e:b2:12:80:ee:ee:6b:c8:2a:69:fc:73:ac:fc:
d9:ac:20:ad:c0:3c:db:36:af:50:85:3a:84:af:94:
ac:62:05:ee:d8:9c:5a:b5:e6:e0:b5:6d:a3:3d:ca:
1b:93:c0:e0:65:c6:0b:0c:84:4b:a9:d8:11:02:7c:
fb:01:0f:e2:9d:7a:27:bf:81:74:c5:4b:b2:62:1b:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152150
sbgp-ipAddrBlock: critical
IPv4:
103.174.46.0/23
IPv6:
2001:df7:b780::/48
Signature Algorithm: sha256WithRSAEncryption
af:3f:3c:f4:c9:a4:f7:a2:11:0c:c1:1d:68:1f:d8:b1:59:0a:
5d:90:24:6a:f9:a5:e7:43:75:f3:3b:49:5e:d1:ec:b7:44:d2:
a2:da:66:27:4d:d8:4d:52:d2:bf:43:4b:e6:8b:0c:fc:6e:14:
35:bf:c2:93:a6:74:15:8f:cf:31:cb:6a:c7:02:03:ed:4c:8e:
b0:8e:e3:c4:eb:eb:93:37:37:c1:fa:6b:c0:b8:2f:73:40:52:
98:43:e0:61:1d:ef:49:75:4b:ad:f2:e3:60:24:1d:7a:4a:d0:
64:d5:2e:9b:fa:01:14:a8:24:26:c3:d6:1f:8a:fd:ec:2b:5c:
4c:fc:ba:3f:dc:57:26:c1:3d:86:2e:7e:25:2a:b1:d3:da:84:
db:57:8a:1f:71:b3:df:92:46:ab:2f:d6:21:c1:ff:6b:9a:db:
72:6d:7f:99:92:1c:37:d0:78:11:63:3d:d0:53:54:64:1f:78:
a9:33:e2:79:5f:0c:68:ad:e9:34:a8:7c:a0:cd:a0:85:ca:4f:
e3:2c:c0:f8:8b:05:a4:c3:c7:d1:e6:0d:5f:21:1a:38:41:ce:
a3:b0:0a:5e:55:61:63:94:d9:10:2d:a1:ef:a2:bd:e6:60:07:
0a:2f:78:97:5a:2c:17:b0:ed:b0:dc:81:27:2d:5a:da:63:5a:
42:18:3f:fa
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAh8DMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEzMDIwMTgzNloXDTI1MDMzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjlCQzYxMTAvBgNVBAUTKEVGNUI0OTdGRkQ4QjI1OUVFOUVBMTU3
QjAyMjJCMTEwMjY2Q0Y1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTU9gMn0wKBqd3k5p59ryt3vCWbpCm+1f1oLA281QIkkzn0KEuorgenlBHqAb7
NRXX4Sh11HDb40QQbx3DEB/s/l3CcSIGmOzDfupVTtrdUBNGMFycGh3niTLm/LvA
Ht/+roDo+4/desqXnBykpcli/YPnDar5vUoh+fApQ2WepBdFPf+QUynQIJY4aJ1H
PMWdWidkWajuWyL54PRsyHsGhuzoZxlr/QYcHZ4457n3SGrV8pSOshKA7u5ryCpp
/HOs/NmsIK3APNs2r1CFOoSvlKxiBe7YnFq15uC1baM9yhuTwOBlxgsMhEup2BEC
fPsBD+Kdeie/gXTFS7JiG8sJAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU71tJf/2L
JZ7p6hV7AiKxECZs9Z8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI5QkM2LzQ4OTA5MUNFMjY2NzExRUNCOUMyMkM3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOUJDNi80ODkwOTFDRTI2NjcxMUVDQjlDMjJDNzdDNEY5QUUwMi83MXRKZl8y
TEpaN3A2aFY3QWlLeEVDWnM5WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlJWMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ64uMA8EAgAC
MAkDBwAgAQ33t4AwDQYJKoZIhvcNAQELBQADggEBAK8/PPTJpPeiEQzBHWgf2LFZ
Cl2QJGr5pedDdfM7SV7R7LdE0qLaZidN2E1S0r9DS+aLDPxuFDW/wpOmdBWPzzHL
ascCA+1MjrCO48Tr65M3N8H6a8C4L3NAUphD4GEd70l1S63y42AkHXpK0GTVLpv6
ARSoJCbD1h+K/ewrXEz8uj/cVybBPYYufiUqsdPahNtXih9xs9+SRqsv1iHB/2ua
23Jtf5mSHDfQeBFjPdBTVGQfeKkz4nlfDGit6TSofKDNoIXKT+MswPiLBaTDx9Hm
DV8hGjhBzqOwCl5VYWOU2RAtoe+iveZgBwoveJdaLBew7bDcgSctWtpjWkIYP/o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:35:18 2025 by rpki-client