Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYkRMAEE18WLMm5WZLPXmi1GRuA.cer
File: OYkRMAEE18WLMm5WZLPXmi1GRuA.cer (raw, json)
Hash identifier: Ep6wTkWLcYKJpcu4pQsNt63GRMdJDNl6bFU+UCbfzSI=
Subject key identifier: 39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022F7F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Feb 2025 03:43:56 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138167
IP: 103.121.224.0/22
IP: 2403:72c0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143231 (0x22f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 6 03:43:56 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A918F1C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:b2:0f:65:13:ae:93:40:7a:3a:60:b6:8a:
7b:15:72:62:28:2f:d3:a0:ce:74:c3:18:36:f9:c7:
0e:c2:b9:8e:50:e7:5c:d6:4d:84:ab:5c:82:a3:fd:
bf:df:5f:0e:96:b1:ac:83:a5:e5:80:26:6f:5a:17:
c0:69:df:6d:7b:f4:2e:29:d1:ce:04:69:16:6e:fd:
0e:6e:88:aa:dc:04:50:43:b3:6a:8e:94:58:ed:4a:
18:db:82:e5:08:bd:d5:c4:cb:68:61:3e:f4:ec:96:
18:4f:70:db:bd:0f:b2:1b:47:12:d4:2b:2a:4a:ab:
71:50:41:2e:32:12:6f:a2:37:e0:4b:f7:03:4f:93:
2f:12:5e:0b:e2:8f:4a:99:59:56:4f:7c:76:7d:e2:
a5:cb:57:9a:1e:87:a6:58:3c:0d:50:d5:4c:61:07:
9d:84:ff:e4:d7:9b:5e:5d:25:4b:6b:50:9b:83:d8:
ed:d4:eb:50:c4:7e:85:a7:3b:3a:fd:c6:16:5d:79:
ee:34:89:b9:6b:f9:be:72:93:0b:8b:38:ff:5f:f2:
6a:1c:09:d4:be:d7:a6:cf:a1:56:5a:06:81:86:04:
cc:ff:c8:11:c4:5c:2d:5c:52:bd:53:6f:76:e7:cf:
57:2c:ef:cc:54:ac:6d:4e:8f:01:00:ce:a8:0c:76:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:11:30:01:04:D7:C5:8B:32:6E:56:64:B3:D7:9A:2D:46:46:E0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/OYkRMAEE18WLMm5WZLPXmi1GRuA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138167
sbgp-ipAddrBlock: critical
IPv4:
103.121.224.0/22
IPv6:
2403:72c0::/32
Signature Algorithm: sha256WithRSAEncryption
17:1e:b9:5b:ec:f0:ea:9d:c7:65:9c:66:ef:ba:d9:b8:fe:de:
24:4b:27:5a:20:5e:0b:f7:89:41:2f:89:ab:42:3d:86:05:68:
34:45:fb:bd:da:48:0b:a2:e9:72:b1:74:dd:75:ce:73:24:40:
3b:0b:5c:88:42:3a:04:78:0b:1c:94:35:e2:48:84:cf:b6:aa:
bd:4d:31:b1:0e:13:8f:58:97:7b:82:8d:f4:e9:69:a2:6b:fc:
ee:99:9f:31:bc:3f:3e:fa:19:7c:64:c9:8c:a9:4d:64:34:f5:
b0:4e:eb:09:b8:48:b1:63:e0:31:88:4f:d4:ec:45:77:8b:37:
8f:fd:70:f3:49:8c:6b:18:3d:f2:c1:eb:75:14:54:e3:32:d2:
69:5a:51:ea:bf:fd:80:de:f7:96:ed:c3:20:1b:63:04:c8:6e:
af:5d:3f:f9:15:bd:53:68:0c:7b:df:de:1b:a7:f0:0b:39:24:
4f:69:17:79:fb:b2:6d:7b:d4:e6:d3:e1:9a:45:3a:df:5d:f3:
95:b9:20:c8:14:00:ae:64:01:6d:f8:e5:8c:55:1a:c3:4a:bf:
b7:ea:22:44:50:cc:0b:27:e1:bb:af:82:58:7c:73:76:b7:3a:
aa:0b:1f:4a:7b:e7:a9:44:3b:19:f8:e3:b8:9a:ae:30:bd:93:
b5:df:76:15
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAi9/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIwNjAzNDM1NloXDTI1MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOEYxQzkxMTAvBgNVBAUTKDM5ODkxMTMwMDEwNEQ3QzU4QjMyNkU1
NjY0QjNENzlBMkQ0NjQ2RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNILIPZROuk0B6OmC2insVcmIoL9OgznTDGDb5xw7CuY5Q51zWTYSrXIKj/b/f
Xw6WsayDpeWAJm9aF8Bp32179C4p0c4EaRZu/Q5uiKrcBFBDs2qOlFjtShjbguUI
vdXEy2hhPvTslhhPcNu9D7IbRxLUKypKq3FQQS4yEm+iN+BL9wNPky8SXgvij0qZ
WVZPfHZ94qXLV5oeh6ZYPA1Q1UxhB52E/+TXm15dJUtrUJuD2O3U61DEfoWnOzr9
xhZdee40iblr+b5ykwuLOP9f8mocCdS+16bPoVZaBoGGBMz/yBHEXC1cUr1Tb3bn
z1cs78xUrG1OjwEAzqgMdt3VAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUOYkRMAEE
18WLMm5WZLPXmi1GRuAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThGMUM5LzZBNTdBQjhDN0Y5NTExRUFCMEVEODUzN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi9PWWtSTUFF
RTE4V0xNbTVXWkxQWG1pMUdSdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhu3MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3ngMA0EAgAC
MAcDBQAkA3LAMA0GCSqGSIb3DQEBCwUAA4IBAQAXHrlb7PDqncdlnGbvutm4/t4k
SydaIF4L94lBL4mrQj2GBWg0Rfu92kgLoulysXTddc5zJEA7C1yIQjoEeAsclDXi
SITPtqq9TTGxDhOPWJd7go306Wmia/zumZ8xvD8++hl8ZMmMqU1kNPWwTusJuEix
Y+AxiE/U7EV3izeP/XDzSYxrGD3ywet1FFTjMtJpWlHqv/2A3veW7cMgG2MEyG6v
XT/5Fb1TaAx7394bp/ALOSRPaRd5+7Jte9Tm0+GaRTrfXfOVuSDIFACuZAFt+OWM
VRrDSr+36iJEUMwLJ+G7r4JYfHN2tzqqCx9Ke+epRDsZ+OO4mq4wvZO133YV
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:14:16 2025 by rpki-client