Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
File: qvquPFcDs5M3_T16lmbFjLjDtQk.cer (raw, json)
Hash identifier: S+AMzMy/qvSn5wPMXAvcJkUcHS1BhfAFz33Gy5mVdAk=
Subject key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021D91
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Nov 2024 12:29:15 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 9728
AS: 37997
AS: 45182
AS: 45512
AS: 45960
IP: 14.1.128.0/17
IP: 103.1.68.0/22
IP: 103.224.196.0/22
IP: 103.229.56.0/22
IP: 124.195.128.0/20
IP: 163.47.192.0/22
IP: 183.78.0.0/17
IP: 202.56.80.0/20
IP: 203.158.24.0/21
IP: 2402:b400::/32
IP: 2406:6000::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138641 (0x21d91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 26 12:29:15 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9117394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:7f:53:1a:9c:0d:fb:76:2e:73:68:70:bd:
3e:8f:45:28:c0:a2:3e:96:79:48:a1:5a:73:4e:b4:
51:2b:0e:13:76:85:98:27:29:6d:49:38:ec:00:a1:
b9:1c:76:a8:c4:1d:ab:17:33:de:f4:ec:72:3e:18:
4f:a2:5c:b8:39:27:44:04:37:c2:ae:ae:b5:7d:cd:
4f:cc:94:78:45:ed:4f:c8:17:e2:36:a0:8c:55:42:
dc:c5:47:f2:c9:76:7a:4e:c7:bc:96:dc:7d:89:c8:
26:03:c0:6b:12:e6:78:fd:08:ca:9b:db:cd:b6:94:
a9:0f:4e:d3:00:b3:59:56:e0:62:d5:96:fd:5a:a6:
8c:9f:9e:12:2f:d2:1e:59:c7:64:ba:05:c6:4a:be:
03:1b:04:64:df:ab:27:d5:15:b5:19:a5:ef:23:40:
8d:8c:52:80:00:48:91:a2:3b:39:f0:71:75:f6:f4:
3c:aa:01:b4:7b:2b:35:c6:76:a3:e1:0e:08:22:ca:
93:a7:fe:13:e0:90:71:2e:5f:81:73:76:6f:ec:1a:
c8:de:e7:70:0d:7b:44:91:50:30:6e:83:d3:b1:a2:
67:73:78:a5:23:3a:53:0b:39:ef:bc:b0:4f:88:11:
a6:3a:7d:2d:5d:78:3f:11:40:84:2a:dd:a7:6a:cf:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9728
37997
45182
45512
45960
sbgp-ipAddrBlock: critical
IPv4:
14.1.128.0/17
103.1.68.0/22
103.224.196.0/22
103.229.56.0/22
124.195.128.0/20
163.47.192.0/22
183.78.0.0/17
202.56.80.0/20
203.158.24.0/21
IPv6:
2402:b400::/32
2406:6000::/32
Signature Algorithm: sha256WithRSAEncryption
90:6b:6c:e0:5b:c4:d0:14:4c:c5:1e:9f:b2:dc:2c:37:a9:f8:
7c:57:01:33:1b:ee:40:f5:dd:2f:d3:bb:1d:7b:1f:b5:44:8e:
6c:e4:ca:5d:96:75:09:55:7f:34:b3:d6:87:cb:81:6e:4f:3c:
4a:25:9b:99:b2:34:45:b4:bc:1f:2a:ae:6b:70:b0:d2:1b:de:
9b:66:24:bf:e2:9f:06:66:3e:17:a2:ed:0b:bf:8d:2d:23:b7:
37:68:59:ba:78:e3:48:e8:58:33:45:bf:8a:06:43:83:88:64:
13:86:89:eb:f9:d5:08:32:d8:ec:7c:cf:94:e0:37:63:81:ea:
4a:18:21:f5:d2:92:ed:3d:bb:ae:8d:90:a4:e3:be:0b:0c:a1:
46:e6:21:8d:85:c5:b5:2c:fc:be:5a:59:e1:aa:e9:26:86:d2:
b3:b3:a9:8a:0a:1d:46:d5:23:3d:03:1f:b3:00:0c:50:68:45:
4c:63:fd:ed:6e:a5:14:45:2e:3a:be:76:41:26:d5:8e:e9:84:
4a:83:e6:1f:c7:e4:a6:7d:7c:06:5a:46:8f:73:32:6b:37:12:
90:65:c5:d3:3e:f6:72:72:5c:42:a8:cc:5c:c1:2f:18:b0:47:
63:69:06:0f:65:52:d6:13:f0:69:ef:58:e1:5e:7b:62:d4:67:
16:31:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:54 2025 by rpki-client