Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer
File: J3d5rGk2otMhSl8XQCE_25JWxqM.cer (raw, json)
Hash identifier: c4gW2LdCanjoUANB+hgMmlDggKwg5+d09TAUoh4arLE=
Subject key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0229BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Jan 2025 16:06:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 133189
IP: 103.87.218.0/23
IP: 103.226.8.0/23
IP: 2401:3ac0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141759 (0x229bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 16 16:06:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91770B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:ec:61:cc:4f:d8:1d:9b:c2:dc:e3:51:12:
29:fb:f6:c5:ac:23:c8:e1:61:91:0c:5a:d4:4d:d9:
5b:83:50:5e:39:7c:82:60:67:d1:02:d3:88:79:b0:
f7:56:95:5e:48:30:d8:58:30:55:15:23:90:9b:31:
5c:38:9f:8d:af:f1:01:ff:07:3f:90:ee:7d:30:69:
8c:f6:52:d4:a3:f5:57:14:7c:60:30:cd:41:82:0e:
b6:c0:3b:40:33:22:04:ce:e9:66:43:0a:a5:db:a3:
d0:6e:5b:c3:e9:cf:27:3e:59:9f:5b:31:9b:e1:af:
d9:5c:9a:40:ab:ac:3b:87:91:d1:f9:9d:42:ce:c8:
d7:21:88:17:e2:3e:ef:04:ab:ab:71:bc:63:fb:c3:
c9:a6:e5:eb:03:68:cc:25:3e:75:b3:a7:42:74:06:
43:b0:ec:57:9c:fe:4e:18:ae:cc:e6:ac:ff:d6:d0:
ac:d1:eb:14:ec:0d:d2:05:18:cc:d5:0e:10:89:ac:
4b:6c:b3:f4:79:8b:50:06:b6:0c:d8:0f:5a:ba:66:
42:67:00:2b:cd:bb:a4:80:de:a3:4c:71:ba:47:49:
5d:6c:e5:c5:1d:00:c6:37:34:14:c6:fb:33:42:2a:
d4:db:81:7f:96:74:8e:2c:d6:ee:4c:dc:68:94:7e:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133189
sbgp-ipAddrBlock: critical
IPv4:
103.87.218.0/23
103.226.8.0/23
IPv6:
2401:3ac0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:33:10:ed:1b:07:ab:bc:62:f1:52:e2:7a:1a:2e:33:49:b2:
19:44:34:bb:f8:25:3d:7b:71:02:ee:da:08:57:b4:81:61:3a:
dd:75:de:d2:bb:7f:15:10:e5:9e:5b:01:ca:47:25:be:f7:fe:
07:a5:c0:1f:39:1e:fe:70:10:53:a0:13:6e:59:0d:fb:6a:e6:
02:3d:f2:bc:71:94:0d:6c:88:6c:9e:22:1d:89:1c:7d:a6:d4:
e3:b4:d1:fa:70:d9:d8:30:02:a0:57:f2:bf:93:f7:71:12:9e:
0c:2c:48:2c:84:31:96:82:b8:26:2c:40:cc:db:29:a8:24:6c:
f1:47:c1:09:04:d4:37:9e:df:8e:f3:23:e0:c5:d4:27:5d:6b:
36:bb:1b:99:c5:90:15:43:fd:7a:44:d3:a6:b4:2a:c3:72:0f:
95:c6:e9:0d:3c:2e:4e:14:d5:8a:28:18:5c:b0:2c:0d:7c:09:
d0:1b:27:0b:44:ea:8c:53:15:df:e7:f9:f3:33:9d:6e:a3:06:
5e:49:1e:f7:2d:9c:6a:68:60:8f:25:31:c6:7b:0f:cb:48:1b:
82:40:13:27:da:45:3b:92:fa:ea:b2:e3:15:f3:a6:c4:5b:39:
a3:a0:fc:d0:af:aa:b0:54:1e:8b:8c:93:e6:56:ad:26:f4:5c:
09:e4:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:50 2025 by rpki-client