Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
File:                     TCb5fJV7v72Mqq_a-nlacx4RKtI.cer (raw, json)
Hash identifier:          rblc5ipJxHvrb6qkvbtUdkcUSVBBSFzLGVgArxTCzsA=
Subject key identifier:   4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02398D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 25 Mar 2025 08:34:40 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 63938
                          IP: 103.49.36.0/24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145805 (0x2398d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar 25 08:34:40 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A91DBADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ae:68:c4:2c:13:2a:73:89:f4:12:09:50:99:
                    ae:e7:40:43:f7:57:ce:14:e4:1b:03:93:b2:64:62:
                    40:57:f9:2f:2f:d3:2b:e6:71:37:0b:d7:33:ee:a9:
                    d8:78:d8:b4:d4:d4:cb:0e:30:ea:1a:19:f1:5e:19:
                    24:aa:d9:14:8b:c6:93:4b:74:6d:6a:ed:7d:5e:08:
                    84:a8:d0:54:1b:f5:13:42:ab:31:ff:5e:62:58:c1:
                    5a:be:e3:fd:7f:b9:f9:11:16:96:82:82:29:84:13:
                    5e:02:8b:c6:b4:de:c4:8d:a6:ae:71:f4:61:bc:8a:
                    b6:cf:c0:01:e2:50:b8:9f:b7:a8:f2:e1:89:5e:e6:
                    f2:db:c0:ab:a5:e1:5e:e5:01:b8:6d:f0:d9:8a:63:
                    26:81:d7:ce:f3:5c:f6:75:2f:ac:4a:96:cf:cc:a9:
                    b7:93:18:bf:d4:f9:45:bb:d4:b8:79:de:14:12:b9:
                    c7:3d:50:2d:13:df:e8:54:df:aa:bf:b3:41:5c:22:
                    a3:65:87:61:27:74:54:6d:a9:e5:d5:b2:15:83:ff:
                    9e:b5:ec:b5:70:dc:a5:f2:82:68:3b:f9:85:f8:af:
                    ae:ef:14:23:c7:2d:b0:f1:92:3f:1a:95:b5:21:ba:
                    65:ed:52:e2:b0:7d:ac:06:32:24:8e:c5:22:26:ea:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63938

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:26:31:f2:fa:85:c6:b0:3d:2e:56:5b:10:d8:44:01:f5:9a:
         57:e7:cc:26:a0:e6:b5:19:6c:f9:28:83:5e:2b:c7:95:47:cd:
         d8:4d:c6:c3:38:f6:9f:22:05:e0:6e:55:9e:55:30:56:25:5e:
         a0:8c:9f:d6:29:e5:5b:e8:fa:b6:8e:54:a0:d4:e4:ae:ce:a1:
         ae:f2:d8:d9:ba:dd:57:3d:56:ff:b7:d3:74:5d:eb:65:9e:0e:
         3b:bc:d6:41:ad:2b:27:f0:04:cb:ec:2e:20:9e:b7:8c:df:67:
         af:a7:be:01:4f:62:17:9a:a2:cc:9e:34:7a:9b:12:9f:d2:28:
         6c:89:95:ff:f7:3e:51:39:2a:73:75:08:c1:5e:92:05:b2:5f:
         f8:a6:d9:b9:75:88:f9:7b:6b:ef:21:b5:bf:3e:55:7d:c8:df:
         08:09:50:eb:2b:b4:40:2a:61:05:0e:c5:b0:ac:9a:38:9d:b2:
         db:15:18:24:41:11:3d:2b:bb:db:8c:c0:e7:ee:70:d0:c6:19:
         19:aa:4e:df:79:4a:d1:f0:9d:a8:49:44:25:18:53:8f:a5:69:
         99:4b:2c:b6:7d:c4:97:2d:70:d0:90:1a:d2:9a:15:45:1a:f2:
         0e:4d:90:3f:c9:41:8e:d1:0e:9a:3e:4a:b6:f0:09:3d:97:da:
         88:d9:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:05:19 2025 by rpki-client