Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
File: pTZ74UJBVZweuH0NXqPuxZPtz-w.cer (raw, json)
Hash identifier: t0CZq4DVmKl+vrDt+Q3lqGIIzH0997b9EOcIWFWGqcc=
Subject key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022340
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Dec 2024 13:04:52 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 24556
IP: 103.199.108.0/22
IP: 137.59.48.0/22
IP: 202.191.120.0/21
IP: 2404:3f80::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140096 (0x22340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 18 13:04:52 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A912BAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:4d:0a:b3:19:8f:b8:25:d6:74:f6:c0:21:
f9:cd:e8:8a:91:d6:40:1d:4e:d1:13:69:24:fd:65:
2f:a9:60:94:8f:ef:ed:29:96:3a:b9:23:3e:00:23:
70:a3:82:b5:af:d8:d8:8c:1e:ff:15:7c:65:df:08:
51:57:5a:03:4e:79:47:fb:ca:a2:83:f9:38:fe:84:
bb:41:0c:b9:18:15:5d:d7:26:13:54:98:99:85:bb:
23:af:70:bb:ee:43:4c:4d:b3:c1:d9:13:77:a0:1e:
2d:ea:7a:10:61:01:e6:49:24:5d:71:12:b0:46:dc:
ef:b2:71:66:1d:ee:0c:36:07:26:87:b1:5f:52:9e:
87:f7:df:f6:09:d4:25:f2:f5:89:6e:85:a3:ef:cb:
bb:8c:86:a4:68:8d:f2:b6:e2:9e:43:d0:73:81:67:
ee:c4:54:e9:c2:49:ac:24:14:ec:d2:07:93:c5:e0:
0f:7d:cd:7d:ce:c6:23:fd:f8:16:6c:b3:ec:5c:6b:
1c:e5:53:f8:e7:4a:9f:22:aa:f2:ae:1e:9a:87:67:
f0:92:03:97:ce:45:f1:a0:bf:23:3c:91:4a:4b:33:
8a:21:b2:75:9d:6b:d9:2b:93:2d:7a:0d:40:c2:5c:
70:b7:e2:f8:02:63:12:31:c6:04:80:bf:cb:27:d9:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24556
sbgp-ipAddrBlock: critical
IPv4:
103.199.108.0/22
137.59.48.0/22
202.191.120.0/21
IPv6:
2404:3f80::/32
Signature Algorithm: sha256WithRSAEncryption
56:6e:79:0e:ca:4f:dc:9f:db:16:92:29:d6:34:c1:26:d5:45:
a8:d2:89:5b:56:94:41:fa:28:04:db:1d:84:a0:6e:f9:3a:58:
d8:96:4f:e0:ca:ac:60:46:0b:43:10:fa:84:f9:78:1f:90:a5:
ff:6c:e5:c4:12:84:de:7a:e1:06:bb:1c:1c:19:05:53:b8:3f:
f3:44:18:54:6c:ac:39:2a:cc:eb:d9:08:6c:db:58:ef:51:c2:
2e:bd:c8:bb:f6:7e:fd:19:ef:9d:c5:87:8c:f6:00:b8:93:ba:
9f:4d:ff:71:15:b5:f4:0d:4b:e9:3b:a6:86:6e:05:80:14:55:
1b:24:93:8c:3a:9a:8f:76:f1:8f:be:4d:4d:73:2f:cb:a1:37:
0a:2a:53:aa:cc:5b:aa:af:22:f8:5e:5b:df:5b:c1:d9:4b:8e:
cc:6a:79:95:7b:b1:0f:b3:38:9b:c0:92:e2:91:9e:7e:e4:a3:
20:53:42:f0:e7:da:0b:0a:ef:94:61:c2:84:fd:16:a6:1f:89:
63:12:8b:7b:9f:4f:ae:75:8a:19:c8:63:90:3b:fa:cc:c9:45:
e1:91:0c:48:06:90:e4:21:64:4a:9e:e9:bb:25:5e:46:a3:41:
b9:80:bb:df:37:89:30:3e:e7:28:56:c2:92:e9:f3:ff:a0:0d:
46:dc:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:23:28 2025 by rpki-client