Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
File: tdM6ejKlCC0za2sFt5ZfMHRwonY.cer (raw, json)
Hash identifier: aHixyLRKN5K5raGSJg8f1TGi6p0lox4alS/DX+m4jrc=
Subject key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E25
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 23:56:51 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 132446
IP: 43.241.252.0/22
IP: 103.21.208.0/22
IP: 2401:7180::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138789 (0x21e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 23:56:51 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91F1446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:9c:41:cf:ac:c6:30:28:8a:dc:22:1e:63:
be:8f:3b:bd:de:14:c7:48:b5:17:71:26:d3:c3:a6:
cb:bc:f0:6a:9f:2b:f3:18:46:9c:ba:53:76:e5:9b:
9b:6c:bf:40:ed:06:52:08:9f:2c:c0:ad:ea:8a:7c:
be:5b:96:a2:cf:4e:9c:5c:2e:38:6a:1b:b0:1c:ba:
a4:19:90:54:ce:23:d6:52:2b:b1:0f:c8:7c:e5:dc:
05:63:31:d0:79:f4:6c:49:34:96:08:de:82:9d:d1:
3f:61:bf:60:9e:76:41:cb:d1:3d:ea:e8:41:01:2c:
80:4c:15:49:20:8e:88:69:21:9a:15:9a:1c:76:b2:
b4:6e:27:a7:10:a4:c0:f2:fd:3a:52:d6:b6:0b:9b:
6d:db:d4:69:b0:85:74:8b:ab:ab:a6:29:f5:81:4a:
26:8b:b3:43:cd:94:11:f2:e1:ab:2f:83:a7:7a:96:
b8:65:f2:c9:8e:1e:b4:5e:a6:af:e0:cf:48:8e:9e:
1e:7b:aa:6a:a6:75:9f:7c:bc:4b:92:b1:0b:24:cf:
b2:34:85:cd:fb:b8:c9:23:72:26:1e:ee:73:0e:da:
81:70:3b:b8:94:e4:fe:c1:05:fd:28:f6:2b:57:bb:
6f:92:a6:8a:28:29:89:bc:9d:b6:b7:b5:24:00:3a:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132446
sbgp-ipAddrBlock: critical
IPv4:
43.241.252.0/22
103.21.208.0/22
IPv6:
2401:7180::/32
Signature Algorithm: sha256WithRSAEncryption
bb:71:db:d5:9d:97:01:34:57:d8:f2:3f:a0:7f:49:c8:b0:5d:
e5:51:60:8b:79:a5:82:4d:b5:d6:4b:77:ab:5a:7d:b9:29:ad:
d0:9a:e7:9e:c3:16:5f:5f:1a:9d:10:97:94:31:93:29:7f:98:
02:64:bd:6e:30:68:9b:3f:93:1e:0b:f6:40:db:4e:9e:0e:b9:
2f:99:c9:eb:62:c3:ee:4d:ae:10:b7:77:71:5c:8a:73:de:54:
6f:96:86:33:32:00:9a:94:0b:ba:f3:48:61:3b:35:1f:7c:6a:
b2:ce:ed:41:4d:d1:f9:89:59:9c:a7:45:63:eb:25:9e:e0:51:
13:7a:fa:77:31:bd:16:ce:91:8d:26:13:0b:a7:1c:4c:84:de:
9a:de:bc:f9:e9:0c:4a:fc:de:33:c9:a5:10:e4:63:7e:b6:e4:
80:58:d5:70:7b:e6:53:00:fe:0f:30:41:08:7c:00:b7:d7:93:
5f:f7:72:e5:b3:40:35:81:14:08:6e:47:56:7b:08:73:01:62:
28:26:19:5f:09:d6:57:80:8a:4f:36:af:a9:f3:68:37:9f:43:
0f:0e:4f:3b:7c:a2:ac:d8:26:aa:a7:46:2f:c3:4a:91:5f:cd:
7d:37:d1:3f:f0:3f:26:0a:33:3f:2c:a0:91:de:38:50:71:25:
c4:43:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:16:19 2025 by rpki-client