Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
File:                     QuOGLXRTXCypqrN6cZW1keruIeU.cer (raw, json)
Hash identifier:          BbXMcq5rDXhy2PGsh6koRnkHnLcCGxLEW7nteJBJBSg=
Subject key identifier:   42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023936
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 24 Mar 2025 14:29:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 153726
                          IP: 163.223.173.0/24
                          IP: 2001:df5:4740::/48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145718 (0x23936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar 24 14:29:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=A91580E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:d0:94:37:1d:01:75:5f:3e:99:b1:33:eb:
                    a8:53:76:50:ab:b7:b2:e1:f8:27:9c:43:b1:d0:48:
                    7f:28:1d:a5:79:00:9f:fd:7f:31:21:34:a0:8e:45:
                    32:a8:0b:95:36:90:62:2c:8c:f2:ec:7c:99:f6:d1:
                    28:4c:16:93:d0:5a:97:c6:d4:21:25:eb:04:58:66:
                    98:4c:d2:67:b6:4b:7b:13:b4:9c:03:e8:ee:49:e6:
                    3c:29:47:de:2a:a4:71:5a:01:e3:ff:b2:2f:5f:80:
                    c0:a9:cd:18:dd:61:ab:c4:5b:b0:75:22:5d:16:ed:
                    5c:7b:91:32:7c:95:16:c2:64:13:c0:28:b9:fc:e8:
                    e1:3e:76:c0:4c:96:3a:90:8f:11:8b:00:e3:ce:55:
                    82:c5:55:ff:27:02:18:48:5c:d7:0b:8f:df:b5:c2:
                    b2:e6:40:70:b9:a2:30:01:41:a3:13:5c:74:61:c1:
                    e8:c2:39:16:43:1a:c9:55:3a:64:2d:c2:8d:b6:bc:
                    52:a2:86:95:eb:84:28:24:a1:b0:8c:fe:4f:0c:65:
                    3f:89:6e:ea:f0:4c:af:96:85:ca:53:e5:71:d0:40:
                    e1:31:c4:5c:d0:11:68:b1:2c:39:c5:9d:86:21:97:
                    53:44:35:51:11:0b:28:53:66:d6:a7:b0:f0:85:8e:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153726

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.173.0/24
                IPv6:
                  2001:df5:4740::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:92:f0:54:1b:84:aa:ca:0a:58:cb:c9:f1:24:d3:51:cf:85:
         ae:a9:2a:d0:91:b1:e2:f6:44:ea:3c:fe:76:62:f3:ed:76:24:
         7e:63:72:82:83:73:2c:da:c8:e2:44:a0:92:2c:17:ae:b3:e2:
         5c:a9:d4:7a:3f:81:05:9e:56:4a:90:c6:9b:c5:1d:04:9d:42:
         ef:8c:6f:5c:e5:1f:82:a6:e9:93:67:fc:18:e7:77:a0:19:24:
         7b:df:ce:18:29:4f:e2:ba:f6:bf:4b:b2:22:98:fd:9b:d0:83:
         8a:30:49:ed:8e:67:5f:c5:04:c2:2e:85:28:ef:05:7d:0a:fd:
         60:e6:e8:68:1c:ee:3e:a0:5c:4e:42:73:86:30:cf:43:5e:96:
         ee:a2:8f:28:c6:2f:45:40:bc:ff:cc:4a:c1:da:ec:0c:9a:4a:
         e7:8f:24:6a:b3:fb:6e:d0:de:ba:49:ef:f4:9a:a9:c7:7f:9b:
         10:ec:05:9a:25:58:c7:9f:af:32:9a:d0:bc:81:22:71:a6:ab:
         1b:ed:44:28:ca:b2:05:a6:05:79:8e:15:87:f3:52:2f:12:f3:
         17:71:89:21:3d:5a:73:d6:0c:8e:e9:05:89:0e:94:d0:26:09:
         43:9e:a5:3b:c1:88:33:1a:e9:d4:89:90:74:df:c4:ec:98:aa:
         03:3f:b4:a1
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjk2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMyNDE0MjkxOVoXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTgwRTQxMTAvBgNVBAUTKDQyRTM4NjJENzQ1MzVDMkNBOUFBQjM3
QTcxOTVCNTkxRUFFRTIxRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaWdCUNx0BdV8+mbEz66hTdlCrt7Lh+CecQ7HQSH8oHaV5AJ/9fzEhNKCORTKo
C5U2kGIsjPLsfJn20ShMFpPQWpfG1CEl6wRYZphM0me2S3sTtJwD6O5J5jwpR94q
pHFaAeP/si9fgMCpzRjdYavEW7B1Il0W7Vx7kTJ8lRbCZBPAKLn86OE+dsBMljqQ
jxGLAOPOVYLFVf8nAhhIXNcLj9+1wrLmQHC5ojABQaMTXHRhwejCORZDGslVOmQt
wo22vFKihpXrhCgkobCM/k8MZT+JburwTK+WhcpT5XHQQOExxFzQEWixLDnFnYYh
l1NENVERCyhTZtansPCFjs81AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUQuOGLXRT
XCypqrN6cZW1keruIeUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU4MEU0LzVDMEM5NTUwMDhCQzExRjBCRUI0RjU1MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1ODBFNC81QzBDOTU1MDA4QkMxMUYwQkVCNEY1NTJDNEY5QUUwMi9RdU9HTFhS
VFhDeXBxck42Y1pXMWtlcnVJZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlh+MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAo9+tMA8EAgAC
MAkDBwAgAQ31R0AwDQYJKoZIhvcNAQELBQADggEBALiS8FQbhKrKCljLyfEk01HP
ha6pKtCRseL2ROo8/nZi8+12JH5jcoKDcyzayOJEoJIsF66z4lyp1Ho/gQWeVkqQ
xpvFHQSdQu+Mb1zlH4Km6ZNn/Bjnd6AZJHvfzhgpT+K69r9LsiKY/ZvQg4owSe2O
Z1/FBMIuhSjvBX0K/WDm6Ggc7j6gXE5Cc4Ywz0Nelu6ijyjGL0VAvP/MSsHa7Aya
SuePJGqz+27Q3rpJ7/Saqcd/mxDsBZolWMefrzKa0LyBInGmqxvtRCjKsgWmBXmO
FYfzUi8S8xdxiSE9WnPWDI7pBYkOlNAmCUOepTvBiDMa6dSJkHTfxOyYqgM/tKE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:16:02 2025 by rpki-client