Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer
File: CmH1ryEJpoNhH7ogbyCM7-NImCE.cer (raw, json)
Hash identifier: ZWG316Ny/iR7J3Wb3xnGk2wN2ECebL7gQBCoeG4DILE=
Subject key identifier: 0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022628
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Dec 2024 16:17:05 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 139755
IP: 103.144.160.0/23
IP: 2001:df1:cb80::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140840 (0x22628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 31 16:17:05 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A91559AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:7f:ee:d2:b6:37:86:27:a7:b8:d0:21:3e:
03:02:5e:3a:4e:95:8e:86:67:a8:32:c0:29:4a:3a:
5e:37:e6:17:bc:eb:11:f1:84:46:86:be:24:97:fb:
f1:32:93:3e:fd:e4:d9:82:55:98:ec:05:3e:2d:49:
7b:90:6a:78:e6:fa:84:33:73:be:71:57:61:aa:58:
a5:33:68:1f:6a:42:69:75:89:b2:08:4f:b9:93:57:
03:89:a2:ce:dd:98:ff:a0:00:3d:80:87:06:cf:0c:
6c:ea:5e:8c:1d:aa:c9:8f:0f:6c:38:87:5e:26:4c:
c6:56:e0:b2:61:59:be:3a:db:d2:31:8f:01:1e:11:
90:1b:de:cc:5b:6b:8d:8e:00:d1:7a:1c:09:93:dc:
63:62:73:ad:8e:81:25:f4:e5:97:24:b8:28:e6:7f:
71:7b:3c:c9:43:a0:34:cd:03:5b:2a:bc:24:fc:ec:
d5:1b:45:49:c3:6d:99:c6:7a:83:d5:17:79:f4:ba:
72:22:c6:50:8e:4c:a6:30:07:4a:3c:20:0d:ef:a7:
6a:26:ae:40:bd:06:0d:77:62:04:92:c7:d4:24:17:
b2:c6:d7:19:24:ad:60:6f:d0:56:50:dd:06:29:9e:
cf:f8:b1:1e:b7:78:0f:c0:ba:36:01:c9:bd:4b:11:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139755
sbgp-ipAddrBlock: critical
IPv4:
103.144.160.0/23
IPv6:
2001:df1:cb80::/48
Signature Algorithm: sha256WithRSAEncryption
71:78:c0:42:d7:7c:85:9e:2f:74:18:90:fb:97:d8:e6:0a:53:
14:26:b9:1f:8d:f4:43:73:df:4d:12:f9:82:26:69:3d:15:16:
f8:86:9c:bd:31:61:b7:71:1d:a8:e8:b6:41:78:02:a2:3a:2a:
a5:81:6f:2d:c8:ce:75:be:1e:ef:e1:dc:97:6f:2a:68:9f:33:
d2:a7:95:2c:2a:0f:5e:b6:ca:c7:89:13:e0:10:8a:5c:98:9b:
6d:3b:98:7a:a2:cb:ee:5c:51:6a:27:93:3d:e3:f8:3b:ec:d9:
09:2b:e0:17:44:07:e7:00:27:4a:62:61:51:56:25:d1:3a:2c:
ed:7a:81:53:2e:eb:ec:78:14:80:f9:11:da:da:06:0b:ea:e7:
89:d8:dc:2e:8d:30:b6:57:14:fa:94:98:0c:6b:b3:cf:a6:3c:
e5:cf:96:c7:e6:f3:67:5f:4d:7e:89:b6:c8:b1:d3:72:31:ff:
10:07:d6:64:1e:65:96:32:32:55:e0:a0:54:ce:fd:a5:09:1f:
9f:5a:02:3f:7a:9f:5a:20:3f:f9:88:de:67:e4:d1:40:22:ee:
a7:d6:52:9a:dc:5b:46:e3:63:ea:a3:e3:75:85:b0:65:3c:89:
a3:83:c4:e5:a7:5a:f1:2c:ad:4c:40:f7:7f:f7:08:f2:c8:91:
88:a2:4b:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:58:40 2025 by rpki-client