Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
File: SC1I47aWHxIIwGcVJOCOkDOV9lk.cer (raw, json)
Hash identifier: rSU5rN0jepM6d/9zucP7+gqd979Wd+OCAI+PrstO59Y=
Subject key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F93
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 16:38:08 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 135634
IP: 103.86.136.0/24
IP: 2001:df5:ce00::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139155 (0x21f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 16:38:08 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A915BCE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:3a:ff:b8:7b:c4:88:68:53:9b:59:1a:39:
2b:6a:71:dd:89:56:cb:37:1c:92:f5:6a:e7:81:0d:
98:0f:89:ec:76:dd:de:03:3a:a2:50:d2:c9:fa:73:
ce:57:df:35:8f:ae:87:ba:f5:39:3e:cf:78:c4:70:
0f:2b:e1:b6:34:50:05:ed:0b:a7:43:f2:9b:7c:bb:
33:15:08:55:bb:1d:e1:b7:03:31:9b:75:8f:7d:d1:
19:72:11:57:6d:d1:9e:ad:d1:b7:b8:f0:4a:6e:12:
82:40:ab:70:35:ac:f7:5e:be:d4:da:63:23:7a:5b:
ce:0c:96:18:5f:b7:8e:7e:7f:bb:4b:b9:56:48:e0:
6a:43:e3:41:8a:e4:e6:49:cf:7c:40:e6:1c:ee:13:
51:60:d9:e1:da:a4:04:62:8e:d2:61:a3:75:6c:65:
d7:aa:5e:03:df:df:28:2e:7d:66:4d:24:73:46:6c:
11:0d:63:4c:7e:53:8e:21:8c:46:86:a0:ff:0c:0e:
6c:df:3b:4d:7d:88:05:ab:8f:c4:ee:31:d1:42:0f:
5f:9f:55:a2:9c:68:26:a8:80:a5:d6:b8:91:96:a2:
eb:01:9c:e4:6e:6b:61:dd:fd:a2:84:df:2b:dc:34:
44:26:d8:59:51:2a:a6:d6:c6:d8:76:b5:e9:73:04:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135634
sbgp-ipAddrBlock: critical
IPv4:
103.86.136.0/24
IPv6:
2001:df5:ce00::/48
Signature Algorithm: sha256WithRSAEncryption
4b:6a:e0:24:83:e3:5e:6a:50:cb:80:b4:46:65:ab:53:03:89:
dd:37:d7:5c:88:77:25:00:7e:5a:ee:00:3f:54:dd:62:8b:19:
3c:1e:33:8f:bc:18:f2:42:f0:02:72:74:be:a3:e1:ec:75:b2:
82:b0:60:9d:93:15:d1:38:cc:50:bf:4d:b8:83:ea:f0:d0:09:
93:43:6c:64:f8:78:4f:9c:79:0a:86:7e:4f:bf:e4:78:b4:43:
b3:92:2a:c6:76:b0:e9:5a:ce:a2:36:67:f7:4d:d9:de:7f:d7:
64:bb:24:12:fa:b5:bb:b0:ef:75:e8:ee:b8:3a:50:37:0f:0c:
d9:9f:75:f9:c4:83:53:30:3f:62:a0:c9:95:b4:8a:dd:f8:9d:
82:32:76:74:e4:c7:03:b2:6b:c0:ab:2d:bd:23:b1:2b:ac:a0:
50:9b:50:6e:66:17:24:50:3c:cc:2f:42:aa:59:df:57:65:1c:
59:c9:2e:bf:55:da:fa:ba:40:63:91:47:49:6c:a6:e8:8a:0f:
d8:a1:17:17:2b:1d:4f:fa:dc:77:87:c6:5a:b0:57:ef:4f:3a:
3c:9c:60:7e:f4:ac:ad:4b:67:71:ba:68:69:65:84:fc:84:b9:
67:5e:14:44:30:4d:31:21:8c:a1:5c:31:42:f5:44:31:ac:44:
f2:15:60:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:01 2025 by rpki-client