Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
File: QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer (raw, json)
Hash identifier: K7o4oGGNZ6f1tcJo/XY7W3wHtZaw9jkUPEKWaUhVxvw=
Subject key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F37
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Dec 2024 04:13:44 +0000
Certificate not after: Sun 30 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 151805
IP: 103.218.226.0/23
IP: 2401:56a0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139063 (0x21f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 1 04:13:44 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=A911AB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:e8:c6:5e:a3:0f:0b:cd:0f:73:6b:60:fc:
a4:18:30:65:b0:cc:1d:e2:14:42:bb:2b:15:c1:6a:
b5:8e:e4:4a:9c:28:6b:1f:51:4a:ba:bc:1e:10:07:
30:43:30:70:fc:8d:35:de:b7:04:1e:1b:ff:ae:f5:
04:23:56:aa:02:c1:dc:cb:a3:1d:17:d7:58:a6:4e:
a0:19:be:49:01:74:48:dc:97:22:93:23:ab:8b:45:
2e:0d:fb:2b:0d:7a:fc:8d:c7:39:b6:d7:15:08:d5:
96:23:69:12:59:95:28:f7:3b:d9:27:d8:db:0e:d8:
f2:55:35:c0:5c:e4:a8:67:61:ca:15:09:36:69:7a:
ee:f0:60:df:30:41:d7:ef:61:3d:1d:ea:a4:cc:5b:
e6:3b:02:10:50:70:19:42:16:1d:2f:aa:b8:e6:a5:
c4:4c:79:e0:64:d8:79:99:aa:12:88:e5:80:31:a2:
e4:88:c9:6a:a6:f5:9e:f8:10:33:ef:28:b8:6e:11:
6a:38:c6:91:cc:be:6b:da:d0:23:2b:ec:6b:32:36:
9e:1c:c6:e5:77:fc:2c:17:d8:6b:8d:41:08:ae:71:
a3:ac:7c:84:f7:e8:b2:a0:ba:30:de:a9:c9:5d:81:
92:6f:16:cf:0f:54:06:81:2a:2b:77:c1:d1:fd:37:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151805
sbgp-ipAddrBlock: critical
IPv4:
103.218.226.0/23
IPv6:
2401:56a0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:d4:83:ce:b2:dc:16:1d:af:c1:44:9e:21:8e:68:79:b6:df:
72:cc:0a:91:68:0d:76:d7:62:82:a0:5b:4f:86:81:da:a5:5f:
62:94:62:aa:e7:dc:d3:d8:ec:ff:18:e5:73:d2:91:98:0f:4c:
4e:7d:9f:ff:dc:d2:17:2d:ca:8e:b2:4e:5c:c6:3c:1f:95:e8:
29:22:c0:5e:90:b3:c6:53:4c:75:86:1a:6d:7e:dd:e6:6e:2d:
a1:1d:58:8b:ec:20:b0:45:94:19:08:ac:f1:c9:0b:3f:fa:5d:
52:8f:01:2c:5c:4c:b2:b0:6b:91:d6:0c:cf:fa:8d:a9:b6:8b:
bb:44:8e:e4:aa:b7:9c:df:5f:68:aa:51:86:30:8f:82:bc:90:
6c:37:af:45:43:f4:12:fe:3c:0a:63:a6:c7:d4:7f:9a:73:ad:
58:05:ef:5e:ae:ae:46:9a:77:5f:a6:61:77:54:08:71:0b:8b:
72:5e:07:4f:4f:b8:f8:02:db:f9:87:65:a5:28:72:f5:8e:1e:
17:ea:c6:18:b2:4e:4b:b3:08:48:e6:0e:4b:71:3f:5f:82:0d:
4b:ac:8b:73:b2:bc:b2:97:e6:65:53:11:13:2c:7a:ce:f6:d5:
af:66:61:d6:33:f3:f5:f9:32:d2:da:cc:40:15:a9:cf:8e:ed:
33:9b:1e:e2
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAh83MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwMTA0MTM0NFoXDTI1MDMzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUFCMTcxMTAvBgNVBAUTKDQyRjI3OTFFRUFDMUZDN0Q3RUMxMEI2
OUYyNUU5RUU5NURBQjM0RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr6ujGXqMPC80Pc2tg/KQYMGWwzB3iFEK7KxXBarWO5EqcKGsfUUq6vB4QBzBD
MHD8jTXetwQeG/+u9QQjVqoCwdzLox0X11imTqAZvkkBdEjclyKTI6uLRS4N+ysN
evyNxzm21xUI1ZYjaRJZlSj3O9kn2NsO2PJVNcBc5KhnYcoVCTZpeu7wYN8wQdfv
YT0d6qTMW+Y7AhBQcBlCFh0vqrjmpcRMeeBk2HmZqhKI5YAxouSIyWqm9Z74EDPv
KLhuEWo4xpHMvmva0CMr7GsyNp4cxuV3/CwX2GuNQQiucaOsfIT36LKgujDeqcld
gZJvFs8PVAaBKit3wdH9N27HAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUQvJ5HurB
/H1+wQtp8l6e6V2rNOEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFBQjE3LzU5NjZERDI2NzJBNzExRUVCMTBCRTg1MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExQUIxNy81OTY2REQyNjcyQTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVy
Ql9IMS13UXRwOGw2ZTZWMnJOT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlD9MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ9riMA0EAgAC
MAcDBQAkAVagMA0GCSqGSIb3DQEBCwUAA4IBAQA+1IPOstwWHa/BRJ4hjmh5tt9y
zAqRaA1212KCoFtPhoHapV9ilGKq59zT2Oz/GOVz0pGYD0xOfZ//3NIXLcqOsk5c
xjwflegpIsBekLPGU0x1hhptft3mbi2hHViL7CCwRZQZCKzxyQs/+l1SjwEsXEyy
sGuR1gzP+o2ptou7RI7kqrec319oqlGGMI+CvJBsN69FQ/QS/jwKY6bH1H+ac61Y
Be9erq5GmndfpmF3VAhxC4tyXgdPT7j4Atv5h2WlKHL1jh4X6sYYsk5LswhI5g5L
cT9fgg1LrItzsryyl+ZlUxETLHrO9tWvZmHWM/P1+TLS2sxAFanPju0zmx7i
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:04:53 2025 by rpki-client