Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
File: cXie4rLIt_u60_eFpd3s7xXMFaQ.cer (raw, json)
Hash identifier: kbw6hquzD6vaBq9L7TjICs5WD7bPNjRMkCihQhKo8n0=
Subject key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0237D2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Mar 2025 13:10:18 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 202.0.124.0/24
IP: 202.20.48.0/20
IP: 202.37.26.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145362 (0x237d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 17 13:10:18 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9138171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:be:56:71:64:76:5b:76:25:68:1a:48:ad:
cb:c4:73:69:9a:cd:27:1d:55:09:c5:f7:7b:69:98:
70:9e:b8:ef:11:ba:18:0f:09:63:50:0d:38:93:10:
1f:9d:87:a7:be:92:ae:d9:50:43:81:5b:d4:46:b9:
85:93:c1:64:3d:e3:3b:0e:6c:17:84:76:cd:04:a5:
f5:b8:1c:1e:71:00:ee:80:e4:13:73:67:a4:80:be:
02:c7:e8:93:78:84:ab:3f:14:c1:6f:e5:4e:af:5a:
7d:79:bf:a1:24:a5:6e:4e:f1:88:c5:ee:c3:67:4d:
ef:1f:8a:22:82:15:cb:a8:cd:b1:cf:40:79:96:2d:
14:e5:56:d1:03:55:3f:09:0e:7c:9b:27:65:33:69:
cf:ba:fd:67:46:2c:ec:70:35:a0:2c:e8:00:4e:58:
fe:5b:93:72:cc:9d:6e:10:43:46:ab:14:f4:38:bb:
54:5a:d4:d4:e4:89:67:41:30:b2:09:10:23:6d:2d:
32:ef:6e:42:c2:f8:81:94:79:88:9f:4a:04:a0:72:
5c:18:d4:3a:7e:49:b6:73:04:72:25:c3:6f:03:88:
c8:d3:92:09:a0:54:a7:d4:79:b9:fb:5f:c1:fb:3b:
49:90:e7:6e:3f:76:6e:5d:80:7d:65:ac:21:57:2b:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.0.124.0/24
202.20.48.0/20
202.37.26.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c1:d3:28:f1:25:ec:f9:ee:f7:26:4b:61:e4:0c:df:aa:4a:
cb:35:c4:86:18:c0:ff:dc:3f:02:32:ba:5a:b0:b0:ca:f9:76:
3f:96:b5:1f:0c:06:1b:be:fb:4e:d0:a9:62:5d:da:5e:f8:ec:
af:c6:4b:7c:38:3d:f0:b2:41:20:3b:67:58:04:04:a5:29:cf:
d7:14:c7:6d:38:56:0f:d8:f1:ff:b6:eb:99:47:84:14:24:d4:
fb:e0:96:cf:53:93:54:0e:40:f4:ed:12:2a:b6:79:e1:f8:5a:
a9:3c:50:5e:fe:99:b6:e9:e2:4d:16:17:c7:4b:af:e1:9a:57:
ec:9f:c2:c9:f1:68:a6:e4:50:2f:ed:52:2d:50:8f:f4:75:5e:
cc:4f:d2:da:44:68:78:5e:99:2c:3f:6c:4f:e5:31:a3:1d:b4:
a3:0e:53:3b:03:93:c8:d7:f1:5b:17:8e:85:26:e8:18:cc:cf:
df:8b:0e:a2:11:5d:4d:b9:12:a0:73:f6:a3:2d:fe:b5:01:90:
f1:b0:17:ad:f8:8c:91:49:03:bd:87:64:38:48:9c:8b:c9:62:
b8:a3:f5:c3:c3:9d:c6:97:0c:05:d1:86:ae:55:d3:7c:0b:7f:
c7:73:c3:77:8b:46:f3:7e:6e:c1:c1:8b:fd:84:a9:52:b5:40:
7b:24:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:43:56 2025 by rpki-client