Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHchajGCagqZih4gf9gk3cvH5w4.cer
File: QHchajGCagqZih4gf9gk3cvH5w4.cer (raw, json)
Hash identifier: KKqjf7EWLyg4TTElVzXyCZLkys1Qb+1oCPvMGrVJiRE=
Subject key identifier: 40:77:21:6A:31:82:6A:0A:99:8A:1E:20:7F:D8:24:DD:CB:C7:E7:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 013928
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/QHchajGCagqZih4gf9gk3cvH5w4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 06 Dec 2021 03:42:47 +0000
Certificate not after: Thu 02 Mar 2023 00:00:00 +0000
Subordinate resources: IP: 43.225.28.0/22
IP: 103.44.20.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80168 (0x13928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 6 03:42:47 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=A91B7992/serialNumber=4077216A31826A0A998A1E207FD824DDCBC7E70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:40:8b:5a:30:b0:07:ea:cf:a0:18:eb:be:
a0:ce:80:68:27:92:14:f9:a6:a5:67:a1:2c:bf:20:
1d:0e:06:b8:db:f1:1b:16:18:79:ab:51:09:28:86:
6b:db:b1:97:af:01:89:e2:65:c0:ec:2b:10:ec:e1:
f5:31:90:83:f2:ae:f2:34:3b:1c:d1:bc:59:8b:d1:
23:02:cd:13:4b:49:7d:d6:36:ba:9a:67:8f:0c:f5:
fb:48:93:e0:01:98:92:42:a6:85:11:8c:11:8a:71:
fb:74:e0:8d:dc:9b:0f:9b:cf:f0:81:4d:61:fd:40:
0e:d1:d9:4e:7a:a8:fd:e2:8a:94:23:5f:6a:33:46:
78:59:82:b8:38:d4:7b:7a:9c:c9:eb:15:db:4e:74:
0f:13:eb:dd:5d:31:03:84:22:be:ee:6c:05:fb:8c:
25:d2:7b:e4:ca:4b:3d:af:29:6c:42:a7:8a:c9:14:
6a:9e:7c:3f:ec:1d:26:01:c8:20:90:84:08:9c:b4:
d5:7c:f5:8c:58:d9:2e:15:31:80:17:09:d6:3c:7a:
1e:e8:73:49:0f:cd:c2:6f:eb:6c:7d:53:cd:79:9d:
9d:4f:c9:0c:93:e8:b2:4b:09:c3:40:4a:5b:70:48:
b0:80:56:0d:ce:17:5f:25:e4:f8:ed:04:31:13:81:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:21:6A:31:82:6A:0A:99:8A:1E:20:7F:D8:24:DD:CB:C7:E7:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7992/D61274EA3BCA11ECB3252B2CC4F9AE02/QHchajGCagqZih4gf9gk3cvH5w4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.28.0/22
103.44.20.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:51:c9:dd:ef:b9:a5:22:e5:6d:40:2a:36:11:51:97:f6:5c:
a6:f3:6a:4b:20:c4:98:4b:98:7c:76:da:79:bd:15:dc:85:cd:
b1:dc:62:e5:30:ac:e4:65:84:29:58:cf:de:be:49:c3:6c:d0:
0a:1d:a0:a3:ba:20:fd:ea:74:72:ba:82:58:6c:b8:9b:5f:49:
cd:37:47:a1:96:4a:ec:0e:6c:e1:aa:3f:cc:1f:53:7d:1e:a7:
60:34:c7:ac:da:7c:c8:e8:c9:be:74:9a:eb:6e:02:a7:4f:45:
5f:08:c9:9b:3c:b5:71:fd:44:5a:ac:98:63:ea:47:30:ae:d6:
07:4a:7e:fd:dd:a7:12:1e:d2:3a:53:46:d8:7e:8c:41:ee:e4:
d0:f0:44:03:34:cf:d4:94:42:f1:d0:17:27:23:96:10:79:3e:
77:56:72:3e:07:bf:54:72:f7:b5:e7:f7:29:db:e6:af:32:6b:
94:d8:53:9e:43:60:97:97:2f:47:84:24:af:7c:40:1b:f5:b9:
68:fb:a9:d5:25:0d:35:7a:2d:94:03:28:a4:02:77:e1:e1:b7:
24:0c:c7:1c:5c:10:36:e3:78:19:d1:84:0b:86:e0:33:31:45:
a0:d5:82:6e:d8:dd:de:67:b5:74:55:c8:cc:6e:e3:dd:63:52:
e4:26:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:15 2023 by rpki-client on console-ams.rpki-client.org