Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
File: u99YzWESke9boarLayzE7VCwEVc.cer (raw, json)
Hash identifier: d1klbVR6sdkhpAQ3iZRQuJoNtGxMqEjhCnYXCEondrs=
Subject key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023375
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Feb 2025 20:47:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 149436
IP: 103.179.124.0/23
IP: 2001:df0:4c40::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144245 (0x23375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 26 20:47:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91D46FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:b8:fd:fa:0e:6d:4f:59:1a:f6:41:e6:5f:
58:57:a0:d1:eb:46:4f:69:45:ac:6e:2b:a1:3f:8f:
4e:95:a2:d7:24:d8:0e:a9:bb:68:21:51:d6:d6:0a:
cf:5c:46:9d:a4:be:07:d6:92:2b:0f:ce:3e:d9:20:
f2:5c:94:12:67:72:ba:ec:0e:d5:24:90:b8:4b:47:
81:95:50:65:3e:28:c6:68:0b:50:0f:6c:93:0c:00:
5e:7f:5f:d0:cf:6b:a1:f3:a4:e6:36:11:0e:76:d8:
bc:73:b2:62:bb:04:5d:db:46:5a:cf:9d:f1:c8:21:
e7:ea:2a:b1:f2:23:32:92:5f:97:5b:02:0a:c4:78:
f7:78:d8:0e:e5:00:fe:32:f5:49:1f:e1:45:ad:e1:
41:d5:da:ae:ae:22:7f:e3:a3:d8:8f:c0:e0:cb:10:
69:65:de:7c:1d:f4:ca:19:e4:a3:4e:af:fb:f6:cc:
65:9f:07:91:b2:31:a1:7d:d5:81:00:5a:dd:9f:ef:
30:bb:4a:b1:27:54:33:fa:e2:d7:6b:69:e7:44:41:
ef:2c:51:cb:21:d0:6c:c5:64:04:4d:14:34:59:f5:
be:53:df:b0:4c:92:9c:28:a9:92:7f:1a:27:79:3e:
ae:7f:0d:6b:0e:09:40:4f:be:e4:89:a4:08:6c:1e:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149436
sbgp-ipAddrBlock: critical
IPv4:
103.179.124.0/23
IPv6:
2001:df0:4c40::/48
Signature Algorithm: sha256WithRSAEncryption
c2:1c:04:5e:6d:ff:a1:42:6b:b6:85:1e:6e:5e:b5:a5:74:35:
d9:e1:4b:8f:08:95:c1:5d:36:1e:49:04:ac:dd:70:e7:ef:d2:
3b:80:6b:23:0a:ec:3f:c7:90:91:1a:bc:20:8b:6d:f8:1c:a7:
6f:bd:99:0d:07:87:61:b2:bb:d6:8f:d7:04:6a:97:26:53:f4:
6a:17:50:d4:00:fb:6d:07:f1:81:25:a7:d2:f4:de:d2:ba:9b:
4c:4b:d6:11:94:d3:71:f8:82:20:2d:f6:ee:fa:29:33:bc:2e:
b4:1b:d3:65:fc:c5:45:1d:0e:c7:f0:85:9c:43:63:a8:59:3b:
56:f1:8d:9b:e0:d6:9c:a6:aa:91:41:aa:08:63:65:8e:90:76:
29:48:88:ef:0d:97:07:a5:fd:48:1e:b0:4d:64:40:54:18:5f:
ba:a1:42:b6:0a:12:80:70:59:3c:62:4f:9d:10:e4:2c:13:1d:
19:9b:ba:aa:1b:a8:7a:cd:cb:01:f8:bd:43:31:d2:e8:28:e0:
4f:8d:03:f3:d1:f9:70:30:74:6b:d2:4d:f8:e3:8f:4b:16:51:
dd:b2:2d:5e:9b:b6:f5:a9:fe:6f:c0:2c:e6:d3:ec:f4:dd:71:
b7:1c:f6:63:b4:6b:5d:92:53:c5:9a:9e:45:38:d0:cc:16:29:
95:60:eb:b4
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAjN1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIyNjIwNDcwOFoXDTI2MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFD
QjZCMkNDNEVENTBCMDExNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCttLj9+g5tT1ka9kHmX1hXoNHrRk9pRaxuK6E/j06Votck2A6pu2ghUdbWCs9c
Rp2kvgfWkisPzj7ZIPJclBJncrrsDtUkkLhLR4GVUGU+KMZoC1APbJMMAF5/X9DP
a6HzpOY2EQ522LxzsmK7BF3bRlrPnfHIIefqKrHyIzKSX5dbAgrEePd42A7lAP4y
9Ukf4UWt4UHV2q6uIn/jo9iPwODLEGll3nwd9MoZ5KNOr/v2zGWfB5GyMaF91YEA
Wt2f7zC7SrEnVDP64tdraedEQe8sUcsh0GzFZARNFDRZ9b5T37BMkpwoqZJ/Gid5
Pq5/DWsOCUBPvuSJpAhsHtkbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUu99YzWES
ke9boarLayzE7VCwEVcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ0NkZELzU5QkYyMTRFNzQ1MTExRUNBOUU5Rjg1OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldF
U2tlOWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAke8MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7N8MA8EAgAC
MAkDBwAgAQ3wTEAwDQYJKoZIhvcNAQELBQADggEBAMIcBF5t/6FCa7aFHm5etaV0
NdnhS48IlcFdNh5JBKzdcOfv0juAayMK7D/HkJEavCCLbfgcp2+9mQ0Hh2Gyu9aP
1wRqlyZT9GoXUNQA+20H8YElp9L03tK6m0xL1hGU03H4giAt9u76KTO8LrQb02X8
xUUdDsfwhZxDY6hZO1bxjZvg1pymqpFBqghjZY6QdilIiO8Nlwel/UgesE1kQFQY
X7qhQrYKEoBwWTxiT50Q5CwTHRmbuqobqHrNywH4vUMx0ugo4E+NA/PR+XAwdGvS
Tfjjj0sWUd2yLV6btvWp/m/ALObT7PTdcbcc9mO0a12SU8WankU40MwWKZVg67Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:33:07 2025 by rpki-client