Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer (raw, json)
Hash identifier: 2LkbWgyJ6izrORujCxI6gEiYRI79+qFPuQuVDKzzW/A=
Subject key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023560
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Mar 2025 19:59:35 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 56111
IP: 27.121.108.0/22
IP: 103.229.196.0/22
IP: 116.193.156.0/24
IP: 2402:5700::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144736 (0x23560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 4 19:59:35 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91C3B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:6d:ef:d1:92:2d:1f:c8:d9:0d:c9:b8:47:
c4:b1:9b:ec:22:e2:ed:43:72:23:bc:0f:ea:93:67:
95:db:6f:1a:3f:57:fa:21:fd:aa:1e:12:76:d7:4f:
5d:89:4f:cd:2a:fb:38:b7:67:9f:85:e4:1e:8e:9e:
c6:44:a7:46:44:45:97:36:d1:5d:cc:f3:9e:c8:c5:
fb:89:42:19:a3:39:49:4b:68:14:af:45:f1:0b:aa:
a1:47:0c:2a:d8:bf:5c:03:b5:79:fa:11:a3:3c:11:
10:80:53:c3:81:eb:97:23:7c:23:61:bf:35:2c:e7:
85:74:ac:b6:04:e4:a7:db:d8:64:cd:e2:65:41:80:
b6:03:38:6e:c6:80:cb:38:4d:a3:dd:61:06:16:08:
e1:c0:ce:91:e1:bd:14:8f:37:7c:80:8b:14:95:ba:
b6:88:e8:2f:a2:3c:d9:e0:b7:6d:b7:17:fa:dc:70:
9e:02:bb:7a:a9:61:a0:7f:79:65:c0:ac:c9:ef:d9:
9d:6d:26:31:ed:26:00:44:60:12:15:c7:25:63:02:
90:fe:34:5a:91:17:74:74:49:f7:a3:3f:57:5e:94:
fd:c3:59:c2:1f:b5:47:aa:e2:12:47:dd:c3:e3:1e:
1e:3a:4b:75:12:af:ff:6c:2c:03:04:0e:b2:f9:69:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56111
sbgp-ipAddrBlock: critical
IPv4:
27.121.108.0/22
103.229.196.0/22
116.193.156.0/24
IPv6:
2402:5700::/32
Signature Algorithm: sha256WithRSAEncryption
27:23:08:9c:c1:79:6a:ca:41:45:d0:e8:dc:2b:fc:e2:64:ee:
52:02:fe:9f:9c:c9:1c:58:5d:c8:06:f6:5e:60:db:ab:87:f9:
e1:b9:3a:14:d8:eb:87:bd:13:94:59:84:d3:f1:7f:4b:1e:09:
2f:16:75:34:50:41:03:42:b1:61:7a:8c:6d:7e:32:c7:b1:72:
65:c5:85:42:2c:dd:1d:1c:ca:77:61:c1:e6:8d:b9:c6:50:a3:
95:4e:22:b5:85:6f:51:e8:4f:4b:2d:4a:f2:de:19:d1:8b:34:
ca:8c:80:6f:10:61:b5:b6:71:60:c4:97:19:59:d6:4c:66:10:
e8:11:29:9f:66:79:68:25:d1:64:57:9f:11:20:44:42:7b:cf:
d0:11:af:8f:37:3c:c7:ee:01:19:f2:02:d3:93:ac:a5:50:3a:
70:45:b9:56:c6:a7:28:51:a1:76:e3:07:ee:44:6c:df:b1:a3:
59:f3:06:b9:1a:52:8f:05:3c:48:80:3b:6c:53:ed:40:24:b6:
a6:35:32:28:3f:90:4f:c3:2b:23:62:f0:0d:17:28:a7:d8:5c:
81:0f:0d:0e:b0:04:ee:4d:5e:99:7a:40:17:a5:e4:bd:49:a7:
0d:6f:a2:3d:45:00:e2:be:20:4d:91:bf:07:22:ad:3b:5f:6d:
64:f7:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:48:55 2025 by rpki-client