
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9CviCcBmOQG0urp3K7J-w67gMU.cer
File: C9CviCcBmOQG0urp3K7J-w67gMU.cer (raw, json)
Hash identifier: SmAeseqdgjZ+RlkeE8EGx/USE6MMTpUfgUwo+PnArPU=
Subject key identifier: 0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021ED3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 30 Nov 2024 15:27:42 +0000
Certificate not after: Sun 30 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 131454
IP: 103.242.40.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138963 (0x21ed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 30 15:27:42 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=A9164F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:af:2b:c7:69:c0:33:9b:a9:60:3b:b6:ee:
c7:a6:45:0d:51:f9:93:a3:8e:8c:4e:c7:1c:b0:bb:
70:fc:40:5c:cb:a7:fb:a2:22:33:fa:bf:76:4b:01:
3e:b0:02:46:4c:6f:fe:f8:82:85:77:3b:ed:0e:ca:
c5:ba:ca:18:32:f8:52:06:f6:bf:e4:95:71:53:f9:
13:27:b7:a5:f1:e0:79:18:76:9f:27:6d:f1:43:97:
9d:25:1f:9c:c8:04:56:8e:22:a1:6f:9d:30:ef:78:
e1:57:e6:0b:92:c7:5b:1a:84:85:16:a1:de:13:0a:
91:b3:d3:b8:a5:e4:19:dd:e4:07:5b:b8:15:36:bc:
0b:62:cd:1d:26:b7:5e:b8:47:29:4d:e8:50:d6:ca:
66:3d:41:7e:c0:b1:cc:9c:e8:c9:a3:5c:f1:e3:ba:
30:34:50:22:64:77:cb:c9:0b:d9:eb:2b:a1:ee:2d:
ae:9c:cc:a3:9e:b6:e4:9e:37:99:49:24:2e:42:1b:
0d:5f:d5:c6:41:9c:05:08:6f:2f:9b:a3:5d:a5:2b:
d7:3f:58:0c:69:53:e0:95:88:c8:01:98:2d:8c:6b:
dd:cb:5e:cf:8a:15:ca:98:e9:4a:1b:ed:5d:32:3f:
01:e6:e0:bf:9d:70:48:93:a8:6f:68:eb:69:a2:01:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131454
sbgp-ipAddrBlock: critical
IPv4:
103.242.40.0/22
Signature Algorithm: sha256WithRSAEncryption
14:b9:a3:08:5f:44:f2:15:1a:27:db:48:8a:27:02:11:e1:73:
1a:79:3f:6e:af:c0:17:b4:40:8e:ad:32:c1:f0:0a:65:d3:05:
70:bf:29:ca:e5:b1:95:17:c9:16:09:de:08:4c:0e:52:15:42:
47:4d:7f:e3:09:da:98:d9:27:2a:22:91:c3:b8:be:1a:a6:41:
14:16:6d:ca:cb:4a:31:0c:e8:27:d3:a4:e6:21:3a:d7:99:35:
4e:20:09:e8:5f:ac:ea:c4:59:f3:a9:34:81:f5:20:b8:57:09:
10:09:81:3a:52:0d:fd:d1:68:f0:68:39:65:92:29:45:66:c0:
94:35:e2:3c:3b:0f:97:5d:cc:77:2b:be:14:d2:14:66:72:3a:
65:db:a3:3b:76:73:f9:97:e8:73:2c:d0:d7:79:15:67:25:47:
c0:b7:f7:9c:76:d3:e3:82:b7:9c:b0:86:e2:1e:96:c1:55:62:
00:8b:4c:b5:c6:82:e9:f4:b5:e5:65:e8:cf:05:a3:80:4f:14:
de:85:6a:ca:aa:61:d1:a1:54:8c:22:fc:7b:52:08:cd:26:cc:
46:3d:d2:ec:bd:83:7c:ac:d0:64:9e:57:9c:4a:e7:2d:82:6a:
ea:71:77:57:52:c7:05:e2:c7:14:1d:d6:d0:5c:a8:4b:ea:19:
a6:df:56:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:22:45 2025 by rpki-client