Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer
File: a37iiR6-HTrwpWLFqEZlgbkEWaQ.cer (raw, json)
Hash identifier: 9w1ruEpB13wVzpUIljw//3pgofeAk2RoGeXmGq5a0ws=
Subject key identifier: 6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022632
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Dec 2024 17:11:10 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 137199
IP: 103.101.234.0/23
IP: 103.115.12.0/23
IP: 2401:d6c0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140850 (0x22632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 31 17:11:10 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9174ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:d2:ce:c6:52:60:61:a7:6f:05:17:f1:48:
93:59:b9:fe:a1:e6:69:f2:e1:4f:56:d4:6a:b8:67:
37:a9:98:ad:94:2a:85:3b:65:4e:b0:69:a8:c7:47:
06:6a:b8:28:95:32:a0:a7:ee:95:a0:98:79:62:12:
6e:fb:d4:8c:5c:1f:34:d0:a7:be:b2:84:0c:bc:ea:
09:1f:e2:03:25:b8:91:9e:ee:a5:5b:fd:05:47:de:
9d:c7:bf:c0:17:bb:fc:b7:60:88:3b:ca:80:57:18:
a8:30:0e:e7:97:a7:73:2d:6c:88:90:60:c5:c3:19:
f2:28:c1:12:33:19:99:51:63:3d:ac:c6:53:3e:15:
15:ad:e1:bb:5a:98:75:52:30:b4:1f:e4:5e:d0:10:
78:1d:df:7e:22:21:f0:4d:ed:5d:e7:05:ad:19:41:
09:de:a5:3e:d2:7c:40:de:1d:c4:df:b3:63:fb:7c:
b2:ae:c6:da:dd:d3:6e:7c:9c:c8:fa:b5:e1:7b:b6:
1d:78:fb:94:9a:59:bc:17:f5:f9:da:f3:3b:72:46:
cd:ac:84:1e:16:89:e5:37:e8:2e:2a:62:36:04:aa:
aa:9a:fe:99:86:c8:66:61:d8:1e:7d:54:2c:f8:26:
ce:4c:77:b8:fa:36:8c:9b:cb:f8:25:d9:cb:74:1d:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7E:E2:89:1E:BE:1D:3A:F0:A5:62:C5:A8:46:65:81:B9:04:59:A4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174ECB/9542C8A0EE6311E8846B4655C4F9AE02/a37iiR6-HTrwpWLFqEZlgbkEWaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137199
sbgp-ipAddrBlock: critical
IPv4:
103.101.234.0/23
103.115.12.0/23
IPv6:
2401:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:71:65:ed:79:2e:85:f7:96:32:b7:ee:82:03:4c:e3:6a:57:
a5:d5:a3:d5:fd:5e:58:b8:8c:fa:90:a4:25:c9:89:3b:78:70:
4a:5a:27:3a:42:fc:8d:73:cf:e6:aa:6a:37:ac:97:2c:17:eb:
ff:64:d0:cb:39:b6:45:65:92:5d:4e:d9:1d:51:b7:07:ec:fc:
d4:96:12:99:fe:6e:5e:d2:a8:3d:5a:23:c7:2a:ce:8e:af:26:
9b:b0:2c:ff:b2:7f:2c:4e:ef:be:52:88:e2:5e:a5:ee:a3:e4:
f9:3b:62:63:f5:29:0e:ef:7c:94:9c:0e:19:b2:af:15:9f:ab:
90:79:41:fb:d4:1f:3e:5d:d7:d7:f2:8a:54:7d:a3:5f:89:6c:
42:79:1c:e5:f0:9c:52:58:a9:70:34:d5:f1:f8:08:b1:cd:a7:
4d:7b:37:08:05:72:88:c9:6e:19:f2:96:9f:72:74:2b:aa:3f:
ae:e1:1d:47:f0:51:5c:96:3c:0e:e9:3c:b5:be:b6:32:80:d2:
3e:80:eb:86:f9:15:87:f5:a5:a5:8c:06:46:8f:ce:a1:41:13:
bc:83:51:e6:41:c0:1e:9d:f8:83:e2:a0:a5:3f:8b:9c:cf:83:
f3:6e:60:cc:9b:8e:b1:8b:53:db:a7:7e:6d:09:f3:66:13:fb:
5f:f4:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:32:34 2025 by rpki-client