Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer (raw, json)
Hash identifier: Okg4Ve4ybGsImY5ercTHP7H1V58uZags9sq6keqRHMU=
Subject key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Dec 2024 19:01:32 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 10107
IP: 27.106.216.0/21
IP: 103.66.88.0/22
IP: 103.230.116.0/22
IP: 183.177.112.0/21
IP: 2402:ba00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139425 (0x220a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 4 19:01:32 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A919D539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:4b:c4:7d:f3:b0:bc:cc:8b:4f:64:ce:2b:
a3:e7:12:09:61:a2:a9:39:75:b8:82:66:86:b9:87:
72:fc:93:99:0f:52:6d:76:3f:9c:64:83:d6:e4:d3:
50:ee:27:35:c6:0c:5e:49:65:92:a3:13:27:11:7d:
41:45:6a:31:c5:de:2e:46:0f:62:b3:94:3a:17:0f:
64:da:28:23:3d:ae:4d:bf:6a:04:ec:76:18:e3:73:
8c:f8:d7:42:a2:2e:82:bd:05:10:e5:5f:be:b0:e2:
85:f4:1c:96:3f:47:df:71:42:65:4f:08:16:64:42:
e9:ca:62:4f:88:a0:a0:65:ff:32:55:6c:a4:6d:c6:
b1:95:f7:04:f5:97:f9:7a:e4:2d:ef:34:8b:7e:9a:
7b:9f:4b:36:df:f0:2f:05:30:86:f2:5f:e1:45:09:
45:b0:86:c7:2a:12:5b:23:d5:b9:d7:60:39:6a:fb:
f8:be:95:98:d2:7a:f6:0a:3a:5d:34:8a:cc:19:91:
13:c4:f0:f1:f8:74:86:bc:d8:6e:e1:d3:de:10:ad:
35:1a:2f:65:35:d4:7b:44:bb:b8:ac:ed:48:ac:40:
3e:a7:cc:e4:5f:8f:0a:18:e8:b2:8d:99:eb:8a:ce:
02:ee:b0:64:b1:63:72:f7:52:79:61:9a:87:0b:c1:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10107
sbgp-ipAddrBlock: critical
IPv4:
27.106.216.0/21
103.66.88.0/22
103.230.116.0/22
183.177.112.0/21
IPv6:
2402:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
b7:f1:f6:42:1c:2d:6a:a5:2e:08:e8:0c:e2:90:ba:2d:ba:0f:
6f:f7:54:09:24:74:08:98:fc:45:66:a9:81:5c:b8:91:9e:81:
a1:60:86:33:2c:94:ec:3d:57:15:23:8c:35:ba:cd:39:30:8f:
3f:4d:26:03:b6:76:8c:5e:d8:45:ed:1b:24:e2:df:03:73:23:
b7:56:d4:ab:c1:20:4c:5e:4b:f3:e1:3d:ad:df:94:68:56:f8:
20:f2:43:d1:2b:3b:48:73:64:6a:ea:7d:12:fb:8d:0f:e4:69:
b0:8e:19:f3:b8:ed:c6:c8:04:30:fb:7a:80:58:ae:bf:e5:eb:
99:3f:8d:ba:37:af:6e:ee:89:5f:04:7a:2e:b8:c1:ae:53:69:
ef:4c:c4:1e:27:54:b0:5d:40:6b:04:8a:fa:ec:d5:eb:69:da:
72:cb:d0:33:77:b4:f3:05:dd:20:02:0e:0d:6f:4f:9f:5c:de:
94:41:e5:20:bb:8a:9d:b3:2f:f5:13:cb:bc:59:f8:da:dd:bc:
e2:8d:17:87:e2:f1:67:29:b4:26:9f:0c:e3:c1:7f:49:77:3e:
b7:9b:e1:f8:f2:15:06:52:28:dd:fc:80:57:c1:be:fc:e4:3e:
d8:b8:48:b4:8b:cf:39:cc:24:60:41:fc:f7:8a:06:3c:8e:de:
29:85:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:31:37 2025 by rpki-client