Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLC4MAxR0Gke5gmx6P3WULkpxjE.cer
File: PLC4MAxR0Gke5gmx6P3WULkpxjE.cer (raw, json)
Hash identifier: KynqgghTPuVcL0KRuxAaFjyJl151Dqd3UXZdu5l8l3E=
Subject key identifier: 3C:B0:B8:30:0C:51:D0:69:1E:E6:09:B1:E8:FD:D6:50:B9:29:C6:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C858
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/PLC4MAxR0Gke5gmx6P3WULkpxjE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Nov 2023 13:58:52 +0000
Certificate not after: Fri 01 Mar 2024 00:00:00 +0000
Subordinate resources: AS: 132233
IP: 103.9.176.0/22
IP: 103.71.136.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116824 (0x1c858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 2 13:58:52 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=A912FF6A/serialNumber=3CB0B8300C51D0691EE609B1E8FDD650B929C631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:bb:18:15:e7:a4:ae:c8:ba:3e:2f:6e:60:
11:7e:ee:6d:62:e1:b4:bf:14:ed:7d:50:ab:29:91:
83:f2:dc:38:b1:9a:29:b9:1b:24:69:90:6b:93:90:
20:19:46:22:65:1b:61:06:b2:13:8b:96:4e:99:30:
aa:ed:0f:fb:6f:91:0f:5a:c5:b0:eb:a5:6d:c1:44:
01:9e:86:09:e0:bb:00:3d:8b:4d:74:f6:1d:de:65:
2e:c9:b2:ed:09:ff:8a:8e:b6:25:95:60:18:ed:43:
23:93:7a:c7:2c:97:2b:73:a2:8f:f8:40:59:18:cb:
53:c8:0c:37:3b:54:4c:f8:d2:fe:da:6a:0a:a0:2c:
36:48:5a:86:53:da:2f:5a:ff:d6:01:1d:91:bb:34:
d6:62:1a:69:dd:bd:d8:6a:b7:04:0f:1c:1a:40:29:
58:ea:93:22:3c:a0:dc:cf:bc:fe:6b:19:87:fc:a0:
43:92:a8:97:f3:19:9a:ca:10:59:30:92:11:de:3f:
cc:fd:de:db:ea:50:35:23:a8:84:43:a5:84:f7:b1:
47:58:29:9d:e6:2c:03:c5:f7:e7:74:d7:54:66:00:
b9:e1:62:61:85:b1:2d:a2:19:f5:c7:2b:0c:46:81:
f6:aa:12:93:e5:22:26:43:c8:50:ca:11:36:ec:97:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:B8:30:0C:51:D0:69:1E:E6:09:B1:E8:FD:D6:50:B9:29:C6:31
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/PLC4MAxR0Gke5gmx6P3WULkpxjE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132233
sbgp-ipAddrBlock: critical
IPv4:
103.9.176.0/22
103.71.136.0/22
Signature Algorithm: sha256WithRSAEncryption
64:56:6a:b5:b7:2e:81:18:22:7d:09:a1:cf:ae:61:b6:ad:5f:
b3:18:04:01:dc:d5:e7:0e:f6:b3:70:87:4d:12:e0:31:63:cf:
cf:84:2d:53:80:ba:22:a2:66:55:8a:39:c1:c4:e8:3a:a3:e7:
5c:ae:c6:4c:31:16:3d:ec:9e:73:b0:86:e1:29:88:87:65:85:
2b:29:30:3e:8e:e2:a1:d6:5a:e5:20:08:ca:2e:de:51:6c:f3:
cd:07:66:98:45:13:ac:c6:38:1f:c1:5f:9b:a3:36:c5:dd:b1:
12:c5:f3:c3:0c:ff:fe:52:fe:c8:30:66:36:5a:41:91:ad:39:
c8:16:94:40:5b:77:3f:9e:7d:3e:ae:a3:b0:7f:b9:5c:ab:78:
29:a5:91:53:62:40:10:2a:56:b1:fc:22:b4:fe:c5:62:25:ff:
67:42:c1:f9:b8:0f:1d:76:a9:9c:49:3b:57:45:a4:61:ce:46:
a9:6d:62:05:48:b9:38:ee:1b:22:c1:ff:7f:04:ff:e3:36:2f:
51:88:20:24:64:e2:b5:ea:e6:b4:76:72:87:fa:d4:8a:63:07:
80:45:e4:75:bc:99:bf:c5:d7:7c:7f:83:cd:da:57:ac:95:7e:
94:89:b1:4e:ff:9a:59:87:3d:c5:fc:a3:f9:6f:6c:cc:1b:db:
91:34:e1:a4
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAchYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEwMjEzNTg1MloXDTI0MDMwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkZGNkExMTAvBgNVBAUTKDNDQjBCODMwMEM1MUQwNjkxRUU2MDlC
MUU4RkRENjUwQjkyOUM2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAFLsYFeekrsi6Pi9uYBF+7m1i4bS/FO19UKspkYPy3Dixmim5GyRpkGuTkCAZ
RiJlG2EGshOLlk6ZMKrtD/tvkQ9axbDrpW3BRAGehgnguwA9i0109h3eZS7Jsu0J
/4qOtiWVYBjtQyOTescslytzoo/4QFkYy1PIDDc7VEz40v7aagqgLDZIWoZT2i9a
/9YBHZG7NNZiGmndvdhqtwQPHBpAKVjqkyI8oNzPvP5rGYf8oEOSqJfzGZrKEFkw
khHeP8z93tvqUDUjqIRDpYT3sUdYKZ3mLAPF9+d011RmALnhYmGFsS2iGfXHKwxG
gfaqEpPlIiZDyFDKETbsl8wFAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUPLC4MAxR
0Gke5gmx6P3WULkpxjEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJGRjZBLzZEOEZCOUEwMUY3MzExRTc4MEZBM0MzMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyRkY2QS82RDhGQjlBMDFGNzMxMUU3ODBGQTNDMzFDNEY5QUUwMi9QTEM0TUF4
UjBHa2U1Z214NlAzV1VMa3B4akUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgSJMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZwmwAwQCZ0eI
MA0GCSqGSIb3DQEBCwUAA4IBAQBkVmq1ty6BGCJ9CaHPrmG2rV+zGAQB3NXnDvaz
cIdNEuAxY8/PhC1TgLoiomZVijnBxOg6o+dcrsZMMRY97J5zsIbhKYiHZYUrKTA+
juKh1lrlIAjKLt5RbPPNB2aYRROsxjgfwV+bozbF3bESxfPDDP/+Uv7IMGY2WkGR
rTnIFpRAW3c/nn0+rqOwf7lcq3gppZFTYkAQKlax/CK0/sViJf9nQsH5uA8ddqmc
STtXRaRhzkapbWIFSLk47hsiwf9/BP/jNi9RiCAkZOK16ua0dnKH+tSKYweAReR1
vJm/xdd8f4PN2leslX6UibFO/5pZhz3F/KP5b2zMG9uRNOGk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:42 2024 by rpki-client on console-ams.rpki-client.org