Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer
File: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer (raw, json)
Hash identifier: Io8gWAX3QHdD7X/pCk/bjow6mCBOtUtHHmylnNJFBR8=
Subject key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02363C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Mar 2025 13:51:46 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 103.27.176.0/22
IP: 202.8.120.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144956 (0x2363c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 7 13:51:46 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9123CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:65:6d:ba:ba:3f:31:9f:92:f7:ba:56:11:
fc:c6:02:9a:41:d1:d0:4c:87:04:9a:9b:39:8b:46:
5a:5f:36:c2:2b:70:f3:4d:09:8a:9b:d8:3f:19:8f:
87:51:5b:e9:bd:48:0d:47:68:f8:0a:49:f7:59:c3:
00:60:ca:a6:b8:7e:09:94:1d:40:ab:93:8d:48:7a:
b6:08:7d:cc:a4:e7:9e:1f:22:44:d5:53:73:b5:b1:
a1:3e:1c:f6:e8:be:22:e0:c0:dc:42:67:52:83:95:
ad:2e:84:0b:bc:3c:62:06:fa:07:86:18:05:4d:54:
c3:d7:98:a2:df:51:0e:a2:4b:ab:b4:02:9b:06:de:
c4:0f:5e:32:b2:da:5b:20:b1:42:45:c4:93:f3:d2:
c5:ff:8c:0e:9e:1c:06:57:32:39:ac:9b:0d:29:b9:
02:db:a4:b0:b3:00:d9:78:02:6b:13:c3:52:0d:9b:
49:77:50:29:03:06:f4:7a:f4:e4:4f:a8:3f:c2:47:
1a:b4:29:00:5e:0a:e2:8e:f9:36:e7:28:bf:c3:e0:
50:0c:8e:69:04:f1:b0:bb:fd:51:af:16:b6:fc:47:
3b:03:1d:36:25:89:55:03:89:15:c0:81:84:a7:e4:
c5:5c:6d:2d:d3:f0:07:87:24:ed:c1:c8:59:e6:18:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.176.0/22
202.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:91:99:6c:67:f1:76:87:a0:05:b1:8e:cc:f3:5a:44:8c:ff:
fb:3e:0b:a8:14:81:cd:f2:24:9a:28:ab:ec:8c:28:dc:5c:5c:
4d:2d:1b:9c:ab:c2:14:51:54:1c:34:4a:30:ea:0d:89:b6:ae:
b9:c2:16:fb:34:8f:6e:b9:cb:7f:d0:15:78:04:2c:2b:33:c0:
4b:aa:51:f8:ed:79:f8:ec:f8:57:34:42:9b:a8:2f:97:34:62:
2f:d6:ae:a6:65:d7:00:14:70:f3:6e:34:c3:a9:96:28:97:8e:
e2:4a:54:7f:1c:7b:89:9e:24:20:e9:f1:cc:65:6f:e6:1f:4e:
fe:00:10:87:d5:89:5b:b6:5d:dc:ef:e6:c8:f2:02:74:3e:d2:
d1:7d:52:c1:c4:b0:9f:01:bc:47:4a:24:59:d4:9f:d0:c9:b9:
4f:75:85:2c:ae:b3:89:63:c5:55:be:e7:a9:cc:85:d3:00:1b:
bd:d4:1f:37:6a:b3:26:41:09:77:d7:87:50:ad:73:a3:31:fe:
e4:e4:8a:90:5e:0f:a9:11:40:b8:34:7f:9a:57:2b:63:f4:e0:
b3:dc:b2:11:9b:9c:80:80:15:b7:63:b5:ba:6b:78:ef:38:eb:
20:fe:ee:b5:d6:ff:37:75:b3:72:95:40:a1:0e:8e:52:3c:8d:
7d:fb:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:38:23 2025 by rpki-client