
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.cer
File: 9vZ3eI9p-0TNB4BMM6lmDz5_W-E.cer (raw, json)
Hash identifier: ruvL+QuMpBRtfzEGzZFBS+MYO1IZqgZBB6sMUoScAR0=
Subject key identifier: F6:F6:77:78:8F:69:FB:44:CD:07:80:4C:33:A9:66:0F:3E:7F:5B:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 018E34
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 01 Mar 2023 03:48:58 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 139702
IP: 103.162.86.0/23
IP: 2001:df5:ea80::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101940 (0x18e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 1 03:48:58 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=A9188CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:0f:d1:c5:70:11:b6:8f:4b:6f:b0:eb:14:
8d:d9:ab:1b:0a:e8:ef:05:93:8a:25:53:4a:6b:df:
e6:e7:a0:1e:93:ce:2a:3b:30:15:e6:e4:de:f3:ec:
a4:7d:7f:d4:f7:34:99:48:a3:33:cd:df:f4:77:dd:
ab:89:4a:f3:1d:9c:4d:3f:aa:25:6f:34:c2:19:e2:
90:37:9a:8e:1d:85:3e:b4:41:88:f2:6b:e1:48:fa:
73:59:19:2a:57:fa:37:83:50:50:ba:7b:50:ce:f6:
0d:37:93:d0:5a:b1:37:fd:3b:99:a2:51:35:7e:c0:
51:f9:0d:42:22:10:92:2a:bd:7b:5b:44:7d:81:68:
d9:61:5b:ce:9f:b7:3a:45:7f:ee:74:64:17:24:23:
f5:97:ec:09:a8:c3:c4:f4:b7:e0:e1:94:ab:6f:83:
7f:f2:28:e7:f8:26:6b:17:be:7c:ee:33:f9:c2:24:
a6:f9:c1:06:1b:43:b7:9e:9f:be:3f:3b:13:be:03:
fd:0c:2b:b4:e5:85:be:df:6a:4e:1a:fd:35:f5:bd:
f4:13:17:fc:4c:b7:77:4b:fd:ca:dc:4e:86:b6:06:
4d:cc:19:2c:cf:e5:81:71:4e:69:ed:38:c0:45:b5:
bc:76:97:9e:a7:32:33:73:e1:b5:44:c2:12:42:45:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F6:77:78:8F:69:FB:44:CD:07:80:4C:33:A9:66:0F:3E:7F:5B:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9188CFF/C42B971C35B111ECBFB23877C4F9AE02/9vZ3eI9p-0TNB4BMM6lmDz5_W-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139702
sbgp-ipAddrBlock: critical
IPv4:
103.162.86.0/23
IPv6:
2001:df5:ea80::/48
Signature Algorithm: sha256WithRSAEncryption
0e:a3:ab:3d:c4:f4:6b:b5:53:37:65:9c:8d:c8:43:85:33:cd:
ab:db:48:63:2c:62:81:8e:3b:14:4c:0b:01:20:d2:f9:bd:b2:
1d:ff:4f:45:f3:4f:77:b9:39:4c:ae:fe:53:86:5e:ff:eb:8a:
4c:1b:a9:9a:1c:a3:43:25:4f:8b:ef:77:6d:a3:fd:df:80:87:
d0:aa:e2:86:32:f4:9d:8d:33:98:64:e4:04:6e:1e:9a:5f:9b:
c3:98:e1:c1:39:8c:13:59:55:ac:9a:b4:31:0c:c0:5c:1c:bc:
0c:d0:fc:37:99:c7:27:53:2b:40:d2:05:b5:3d:53:ee:72:4c:
6a:1c:6f:18:dc:59:d6:4f:12:8e:46:9d:69:bb:5b:b6:a5:bf:
49:89:2b:84:0f:e5:90:df:33:5b:6a:84:f5:14:51:03:a2:53:
12:17:b8:2a:97:51:99:86:60:e7:c5:a7:d2:39:44:4e:14:fc:
f4:62:13:ce:01:c5:22:39:28:1c:2b:eb:5d:59:49:d0:85:a5:
3e:9f:9b:9f:6f:1c:37:44:34:c0:75:aa:45:ba:02:92:ca:a0:
12:44:1b:88:db:ed:40:17:10:01:fd:a6:da:90:e0:f7:fe:a1:
88:be:0b:7e:c0:de:c4:a5:b2:ec:5b:dd:48:16:71:76:77:68:
5e:c8:6d:f5
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAY40MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDMwMTAzNDg1OFoXDTIzMDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODhDRkYxMTAvBgNVBAUTKEY2RjY3Nzc4OEY2OUZCNDRDRDA3ODA0
QzMzQTk2NjBGM0U3RjVCRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF/A/RxXARto9Lb7DrFI3ZqxsK6O8Fk4olU0pr3+bnoB6Tzio7MBXm5N7z7KR9
f9T3NJlIozPN3/R33auJSvMdnE0/qiVvNMIZ4pA3mo4dhT60QYjya+FI+nNZGSpX
+jeDUFC6e1DO9g03k9BasTf9O5miUTV+wFH5DUIiEJIqvXtbRH2BaNlhW86ftzpF
f+50ZBckI/WX7Amow8T0t+DhlKtvg3/yKOf4JmsXvnzuM/nCJKb5wQYbQ7een74/
OxO+A/0MK7Tlhb7fak4a/TX1vfQTF/xMt3dL/crcToa2Bk3MGSzP5YFxTmntOMBF
tbx2l56nMjNz4bVEwhJCRToNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU9vZ3eI9p
+0TNB4BMM6lmDz5/W+EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg4Q0ZGL0M0MkI5NzFDMzVCMTExRUNCRkIyMzg3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4OENGRi9DNDJCOTcxQzM1QjExMUVDQkZCMjM4NzdDNEY5QUUwMi85dlozZUk5
cC0wVE5CNEJNTTZsbUR6NV9XLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiG2MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6JWMA8EAgAC
MAkDBwAgAQ316oAwDQYJKoZIhvcNAQELBQADggEBAA6jqz3E9Gu1UzdlnI3IQ4Uz
zavbSGMsYoGOOxRMCwEg0vm9sh3/T0XzT3e5OUyu/lOGXv/rikwbqZoco0MlT4vv
d22j/d+Ah9Cq4oYy9J2NM5hk5ARuHppfm8OY4cE5jBNZVayatDEMwFwcvAzQ/DeZ
xydTK0DSBbU9U+5yTGocbxjcWdZPEo5GnWm7W7alv0mJK4QP5ZDfM1tqhPUUUQOi
UxIXuCqXUZmGYOfFp9I5RE4U/PRiE84BxSI5KBwr611ZSdCFpT6fm59vHDdENMB1
qkW6ApLKoBJEG4jb7UAXEAH9ptqQ4Pf+oYi+C37A3sSlsuxb3UgWcXZ3aF7IbfU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:33:38 2025 by rpki-client