Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
File: zupmODV1Y6xVdo8A2E0nezpjxEk.cer (raw, json)
Hash identifier: BBVkKubkQsliXKn1ALLX+gN6YU+NcQ9qI5QF8kl9jIw=
Subject key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023646
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Mar 2025 15:01:29 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.244.148.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144966 (0x23646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 7 15:01:29 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91F2F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:27:ae:9f:ac:0e:45:f6:81:5e:77:fc:ff:
f7:8a:f4:15:22:74:f8:b7:9e:61:c6:25:7f:36:1b:
04:b8:a4:38:21:a2:14:79:7f:37:45:df:15:56:13:
64:56:63:9d:e6:07:4b:59:6b:fc:a7:4c:e5:7f:8b:
b7:e1:66:87:08:59:4f:31:a8:43:8c:d0:73:b1:08:
4a:1d:68:de:ce:2b:d6:ae:6c:b5:f4:05:cb:7f:ee:
7f:c6:2b:8c:c7:fc:4c:74:5c:be:d6:ae:f2:3f:32:
9f:23:8a:2d:f8:0b:67:ee:4a:b8:0e:fb:ae:2f:3d:
41:62:2b:9a:75:00:4f:6b:b1:a8:46:9b:bc:b0:df:
ae:7a:7a:2f:ba:5c:de:df:fb:e7:0f:a6:bc:6c:fd:
2c:76:56:1f:2d:63:f4:98:dd:57:c9:e1:21:c4:c3:
e0:6f:6f:61:4b:69:84:61:c4:97:50:f9:e8:14:4b:
1b:f2:de:a4:c9:af:be:67:31:03:35:1d:5d:38:e9:
2c:24:e7:29:ad:55:bb:92:f8:b0:2e:6d:cf:44:07:
1d:1b:40:9c:28:68:55:d6:aa:a5:17:7d:af:1b:b4:
b1:57:a5:74:d8:81:59:14:45:cf:d5:ad:a2:4a:b8:
71:c9:43:60:e1:50:d6:86:40:f6:06:81:e4:e7:49:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:8e:f3:eb:9d:37:a9:65:b2:4c:11:d6:bb:9b:8f:bb:a3:bf:
eb:d1:36:f1:c1:ad:1c:03:f9:2e:d7:56:61:8f:be:b8:46:79:
61:05:a3:22:7c:53:9b:00:eb:08:5d:15:52:6c:00:34:e9:1f:
fe:46:af:be:08:b9:90:c2:55:87:29:5a:5a:80:ec:70:fe:9b:
e5:cb:e2:45:a9:6a:ff:29:94:e9:3c:9b:71:cc:e0:38:80:9d:
15:c6:4f:1d:14:ab:d8:0f:1c:81:e6:e2:c1:69:54:a1:cf:a7:
38:a3:ca:5c:af:75:fb:28:07:6a:48:98:f0:61:eb:43:92:9e:
43:ea:32:a1:fb:65:1a:8b:3f:42:9e:99:a9:ce:07:8a:41:34:
ec:09:40:04:64:73:fd:0c:35:79:20:93:8b:b1:91:a4:36:24:
83:ba:e8:88:96:51:69:da:a6:94:31:19:56:1b:a0:5a:d4:b0:
0a:83:45:fc:2f:3d:14:dd:08:32:ed:a3:d6:99:e1:1d:f2:d6:
fe:b1:1d:fb:2e:dc:da:53:22:8c:47:94:6c:1c:9a:9d:41:b9:
94:bc:93:c7:e7:4a:77:e8:d9:ea:b9:48:9f:1f:7b:2b:07:fd:
d4:65:e6:b6:2f:f1:91:29:2e:d2:43:77:a8:57:53:b2:b4:27:
fb:8b:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:47:45 2025 by rpki-client