Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
File: xYjecPKsY-wWHdqc3CADirBHKkU.cer (raw, json)
Hash identifier: M8Yu/8CnIrFYWoWBoemdEDay1stZWv8CqpQcH0zl6Zs=
Subject key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022661
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Dec 2024 21:44:50 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 24564
IP: 103.144.148.0/23
IP: 2001:df3:1480::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140897 (0x22661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 31 21:44:50 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A919DFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:56:fa:9f:6c:8e:e7:0d:e5:d3:c1:9d:33:
83:45:52:ae:f2:6b:61:5f:1b:ae:8d:6f:6e:86:db:
dc:8e:07:5e:c6:6f:ff:c9:95:67:52:4b:35:c4:b0:
5f:2d:49:17:7b:e6:30:3a:4b:39:ff:43:83:32:0e:
51:6a:c9:bb:c0:a3:da:1e:79:7f:8b:79:03:82:a1:
5d:76:70:3b:fb:92:e7:df:2a:11:aa:d6:34:c5:a0:
71:52:47:17:32:f8:a5:d6:86:01:fd:5f:60:da:21:
a7:6d:6c:72:4c:1b:d4:40:89:dd:ff:dd:31:cf:98:
d5:bc:e8:08:8d:0d:5b:32:c5:5a:a5:64:5e:7a:69:
40:86:75:8c:51:66:63:1b:85:3f:79:7f:dd:f8:5b:
da:84:2e:38:7d:de:16:fb:00:54:cd:43:e5:78:50:
74:6a:f9:b6:19:bb:55:0f:dc:3d:9e:ee:12:74:b5:
dd:f5:b5:7a:8d:c9:31:e0:d8:ca:a7:2a:42:0c:c1:
3e:dd:63:6b:63:a8:81:5f:aa:22:63:a9:bf:3b:fc:
a1:4d:f6:e5:f3:5a:3a:40:17:20:5c:71:7a:1b:41:
0a:2a:22:e7:ec:77:53:e9:42:5c:db:d0:d6:a5:d8:
bc:44:e4:f8:f0:1a:b6:8d:b7:94:b8:20:b8:03:eb:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24564
sbgp-ipAddrBlock: critical
IPv4:
103.144.148.0/23
IPv6:
2001:df3:1480::/48
Signature Algorithm: sha256WithRSAEncryption
b9:c6:80:c6:41:65:6c:ac:eb:ad:0f:29:ad:1a:7a:7b:05:4b:
64:c1:c2:9f:01:ef:ec:1f:25:c1:80:f8:6d:71:ff:37:62:80:
61:45:57:26:49:cd:d2:02:a2:af:96:73:b3:25:35:32:cf:77:
33:2a:65:72:a5:01:44:77:45:e7:fa:7d:8e:0d:57:5e:85:d5:
48:45:55:e9:44:b2:e1:39:27:97:33:ad:0b:28:8d:d3:c1:f0:
15:41:3f:45:9c:66:01:3f:5a:26:62:0a:83:d2:38:87:be:e4:
01:73:ae:99:cd:6c:7f:d3:ae:3c:39:96:7f:9f:50:f6:7c:cb:
42:0d:14:05:af:64:ed:30:92:3a:fd:ec:76:1a:c1:35:bb:3c:
77:67:cf:d0:95:2f:4e:ef:68:a2:fb:21:b6:6b:9a:91:67:0f:
34:56:46:05:90:ab:7c:85:a2:41:51:51:6e:fd:e0:7f:8e:07:
de:73:b9:30:04:01:84:a5:20:ee:a5:d4:3f:35:7c:b5:c2:b5:
cd:7e:47:58:87:12:bd:87:f5:0a:90:6f:49:23:af:4f:8c:59:
c8:00:2f:f2:0b:4d:64:77:3f:ee:a4:df:03:2f:8c:d7:17:f8:
10:06:e9:47:24:36:73:48:50:75:26:8b:d3:4a:3f:bc:74:70:
07:71:5e:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:14:47 2025 by rpki-client