Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/V9yZdt-1j-vKv_Awu9S_t5Lpfg8.cer
File: V9yZdt-1j-vKv_Awu9S_t5Lpfg8.cer (raw, json)
Hash identifier: WVH7y03pl0e23VWTThRieY8rB6HL93TSoTfp8wQfP5c=
Subject key identifier: 57:DC:99:76:DF:B5:8F:EB:CA:BF:F0:30:BB:D4:BF:B7:92:E9:7E:0F
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 32AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V9yZdt-1j-vKv_Awu9S_t5Lpfg8.mft
caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
Certificate not before: Wed 16 Jun 2021 04:08:48 +0000
Certificate not after: Sat 30 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 154.8.48.0/20
IP: 154.33.0.0 -- 154.34.255.255
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12973 (0x32ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Jun 16 04:08:48 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=A91A73810000/serialNumber=57DC9976DFB58FEBCABFF030BBD4BFB792E97E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:40:36:24:5a:e7:74:29:6a:10:05:cc:83:
86:c5:30:57:41:e4:e0:7a:69:80:93:ac:51:08:19:
c8:6a:9e:86:b1:d6:11:c2:de:04:47:b3:66:41:4e:
77:c4:55:d2:b0:0a:a2:7c:1e:c5:19:04:0b:a7:43:
4a:77:b5:94:50:de:30:f7:be:9e:3b:69:49:85:66:
b6:24:71:6b:ca:c1:e0:0c:92:e3:34:87:26:84:4f:
df:38:f8:4d:df:93:25:20:ee:c0:fe:f4:e4:c5:7e:
8b:ac:ef:99:2d:c3:bb:c7:9b:e8:37:26:79:f4:a7:
c6:33:88:5a:36:73:c5:6f:a5:44:9c:e8:59:24:89:
31:11:89:cd:51:9d:76:e4:42:dc:51:09:6f:77:86:
ce:a7:a0:26:32:fd:ef:ed:0c:c3:bd:b2:30:1b:ca:
cd:10:9e:3c:9a:39:d9:41:06:8a:ef:a2:c0:72:43:
80:08:90:1b:42:e2:dc:39:3b:47:81:97:68:f7:62:
08:2a:31:d9:02:84:75:fd:03:0c:d7:5d:83:c8:50:
f2:da:a7:e8:24:a9:9f:82:98:ad:17:fe:ee:27:9e:
06:96:50:28:c5:d3:fc:5e:a6:3f:6d:39:e1:2c:45:
fe:8f:d6:20:45:88:95:1a:74:18:b9:3c:70:6b:9c:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:99:76:DF:B5:8F:EB:CA:BF:F0:30:BB:D4:BF:B7:92:E9:7E:0F
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/
RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V9yZdt-1j-vKv_Awu9S_t5Lpfg8.mft
sbgp-ipAddrBlock: critical
IPv4:
154.8.48.0/20
154.33.0.0-154.34.255.255
Signature Algorithm: sha256WithRSAEncryption
32:bc:ad:df:89:67:84:69:18:55:0f:e2:bc:12:81:0a:9b:36:
92:fe:80:6f:12:2f:6f:e4:b3:69:24:c0:c6:60:2b:1c:98:61:
5c:33:e0:f7:6e:48:3d:b6:c4:ef:7c:4c:39:59:08:ae:c7:61:
8d:2b:a8:03:2e:72:e5:e2:71:32:df:32:45:c3:1b:9d:a5:84:
ce:a3:47:e3:b6:87:2e:6f:98:1b:c8:ee:34:bb:38:17:6e:a3:
55:26:3b:78:c4:47:13:dd:27:4e:9b:23:8d:50:01:cd:6b:1c:
61:97:a4:3c:28:df:55:d5:47:02:1c:62:19:0f:80:8a:ac:3a:
9d:1a:24:47:16:86:fe:47:94:07:7e:b1:e9:b1:1f:c0:ab:a7:
19:cd:af:92:ec:2f:59:39:86:64:03:f6:7e:76:b7:6d:c0:65:
db:83:86:64:8f:6d:4e:f1:9b:aa:c0:7e:1e:93:02:fc:87:d1:
a7:b2:95:30:ca:2d:82:92:f1:5c:69:b7:5c:23:ec:85:85:0b:
d2:af:8c:86:8a:98:cb:5b:54:65:07:47:13:7c:35:da:54:5f:
92:7b:b0:74:95:86:77:31:6d:ca:24:44:66:77:2f:37:31:dd:
45:e0:85:4f:88:d8:9e:33:9a:52:20:c3:29:06:4b:ea:63:83:
85:48:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-fra.rpki-client.org