Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer
File: q6y5DDE0hQG0sdXlosfP8f2HtVs.cer (raw, json)
Hash identifier: FVBjR2KQZYgPA+U6y2IDhJ41CVO/l9tqwWRu2FWvegE=
Subject key identifier: AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023423
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Mar 2025 00:44:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 131167
IP: 103.160.52.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144419 (0x23423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 1 00:44:36 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A9139790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:05:c2:aa:13:da:df:e8:c0:fc:fd:a6:09:
c8:a0:fd:6d:63:75:19:54:57:00:f8:be:6a:bc:a6:
d6:8f:8d:fd:0a:c8:dd:b0:f9:26:db:01:2d:08:50:
0d:26:a7:23:f6:53:27:0b:39:6a:d7:23:8d:20:e4:
51:34:d0:d1:6b:bc:53:08:4f:c6:0d:6c:36:f5:d8:
62:af:4e:89:b4:74:f9:67:c1:ed:3b:3c:26:33:49:
6f:45:ec:bc:b9:a1:dd:d8:a7:2b:16:c2:c7:c2:b3:
39:1b:b8:ac:09:0e:61:36:af:50:28:7f:eb:09:4c:
6b:b2:df:9e:9e:47:c2:50:62:64:9b:ab:da:16:2c:
2f:0f:b4:ad:56:6c:65:f2:eb:3f:fd:8d:dd:29:c3:
bc:5a:30:2e:63:96:d3:58:31:e1:2d:2a:62:fb:b3:
46:32:ae:85:e1:49:8d:a3:b4:af:00:0c:d7:3d:dc:
77:03:d0:b0:48:78:81:cd:82:57:76:64:cf:2f:9c:
48:75:2d:35:14:03:34:29:be:b4:35:ee:00:9f:0b:
ad:9b:f7:c9:11:2b:ef:eb:02:76:2e:8c:9b:fe:81:
eb:ab:9f:5e:55:af:32:a3:68:87:19:a7:ff:cf:b5:
85:e2:2c:45:02:30:ce:c5:84:9e:50:00:01:b9:0f:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131167
sbgp-ipAddrBlock: critical
IPv4:
103.160.52.0/23
Signature Algorithm: sha256WithRSAEncryption
89:d9:18:ce:4d:71:21:81:4c:86:b8:b5:67:57:25:e0:3c:66:
ae:6e:e6:dc:bf:c3:74:40:59:01:3c:06:b8:01:8f:a5:ae:6e:
48:89:0a:2a:5d:31:5c:3e:5a:1e:b5:2a:82:35:87:ee:f4:1e:
54:a8:09:3d:0e:78:bd:36:67:56:53:34:2d:16:0c:60:20:8a:
2a:f9:2a:59:a1:1f:16:00:b7:e1:aa:59:8a:b0:90:b3:5e:9e:
36:df:2d:e0:8d:29:0b:51:6f:f3:e2:9a:a7:ed:b5:20:c3:50:
01:65:32:1b:9a:f9:43:2d:72:68:43:d6:33:77:d0:8e:17:6d:
94:99:d9:64:ed:c7:8f:95:f4:5f:ec:24:5e:21:1f:24:5a:80:
ea:dd:f8:ea:9a:5d:e9:21:26:7f:31:31:3e:1d:7e:c3:fa:50:
5f:b4:25:b9:e5:65:bf:fd:da:d7:ff:d6:13:c0:e2:6f:ef:c3:
3d:8f:5d:59:ad:66:e9:e2:29:cf:a6:4d:07:f4:e9:78:3b:e8:
4d:d0:c0:ca:ff:49:fe:6d:74:68:42:8b:c6:4a:dd:db:d9:3a:
76:cd:85:ea:b1:1d:23:65:35:fa:58:aa:62:51:04:46:05:93:
37:bf:90:73:bf:54:a6:35:89:5e:fe:74:2c:68:a0:cf:9c:a0:
ce:48:bd:9f
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAjQjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDMwMTAwNDQzNloXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzk3OTAxMTAvBgNVBAUTKEFCQUNCOTBDMzEzNDg1MDFCNEIxRDVF
NUEyQzdDRkYxRkQ4N0I1NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdOgXCqhPa3+jA/P2mCcig/W1jdRlUVwD4vmq8ptaPjf0KyN2w+SbbAS0IUA0m
pyP2UycLOWrXI40g5FE00NFrvFMIT8YNbDb12GKvTom0dPlnwe07PCYzSW9F7Ly5
od3YpysWwsfCszkbuKwJDmE2r1Aof+sJTGuy356eR8JQYmSbq9oWLC8PtK1WbGXy
6z/9jd0pw7xaMC5jltNYMeEtKmL7s0YyroXhSY2jtK8ADNc93HcD0LBIeIHNgld2
ZM8vnEh1LTUUAzQpvrQ17gCfC62b98kRK+/rAnYujJv+geurn15VrzKjaIcZp//P
tYXiLEUCMM7FhJ5QAAG5D2GFAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUq6y5DDE0
hQG0sdXlosfP8f2HtVswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM5NzkwL0JGMkNFM0YwQzBBQTExRUJCRUFGQ0EyQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzOTc5MC9CRjJDRTNGMEMwQUExMUVCQkVBRkNBMkFDNEY5QUUwMi9xNnk1RERF
MGhRRzBzZFhsb3NmUDhmMkh0VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgBfMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6A0MA0GCSqG
SIb3DQEBCwUAA4IBAQCJ2RjOTXEhgUyGuLVnVyXgPGaububcv8N0QFkBPAa4AY+l
rm5IiQoqXTFcPloetSqCNYfu9B5UqAk9Dni9NmdWUzQtFgxgIIoq+SpZoR8WALfh
qlmKsJCzXp423y3gjSkLUW/z4pqn7bUgw1ABZTIbmvlDLXJoQ9Yzd9COF22Umdlk
7cePlfRf7CReIR8kWoDq3fjqml3pISZ/MTE+HX7D+lBftCW55WW//drX/9YTwOJv
78M9j11ZrWbp4inPpk0H9Ol4O+hN0MDK/0n+bXRoQovGSt3b2Tp2zYXqsR0jZTX6
WKpiUQRGBZM3v5Bzv1SmNYle/nQsaKDPnKDOSL2f
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:38 2025 by rpki-client