Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQNaXkNhZm703_kSs9ckxcrQjcw.cer
File: mQNaXkNhZm703_kSs9ckxcrQjcw.cer (raw, json)
Hash identifier: 9Pb+miGY4xT4jld4VPF8Jqewr3tKZlZ0un/8RYz+VRU=
Subject key identifier: 99:03:5A:5E:43:61:66:6E:F4:DF:F9:12:B3:D7:24:C5:CA:D0:8D:CC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 015EDA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91808B7/E96A8F4E1DA411E29BE2239B08B02CD2/mQNaXkNhZm703_kSs9ckxcrQjcw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91808B7/E96A8F4E1DA411E29BE2239B08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jun 2022 15:30:04 +0000
Certificate not after: Sun 30 Oct 2022 00:00:00 +0000
Subordinate resources: AS: 58373
AS: 131194
AS: 132038
AS: 132366
IP: 103.10.57.0/24
IP: 103.14.230.0/24
IP: 103.234.13.0/24
IP: 202.125.111.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89818 (0x15eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 15:30:04 2022 GMT
Not After : Oct 30 00:00:00 2022 GMT
Subject: CN=A91808B7/serialNumber=99035A5E4361666EF4DFF912B3D724C5CAD08DCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:de:ca:e2:76:a7:28:eb:5d:5b:3b:b1:d7:
36:5a:a6:58:a7:0b:2d:21:14:4d:7e:97:ef:10:38:
b7:fb:a3:72:ea:8d:5b:cd:e3:fc:3a:20:1c:c9:e9:
9e:5a:4f:d6:42:60:48:99:ed:ac:c7:49:9f:7f:cc:
57:7a:08:2c:6e:7b:7b:4c:1d:ab:ea:a3:10:90:fd:
62:7c:80:d3:ab:e0:e3:ec:b1:fa:13:9f:3a:37:d2:
12:71:42:61:53:b9:62:88:78:36:6b:cc:84:aa:07:
49:58:38:48:a3:eb:85:f0:82:ad:7e:b2:21:07:fe:
c8:c3:40:ef:d4:fb:a0:a3:c0:1f:88:d7:1a:ea:24:
84:93:43:85:16:b2:2c:a7:d9:f1:d5:94:27:4d:2b:
19:79:b3:86:f7:f5:b8:b5:c0:93:e0:c3:35:e1:7a:
20:d8:40:5f:79:e4:d2:73:a2:f1:e6:bd:0d:4a:b1:
b4:b9:62:1e:d5:20:6b:d1:1b:eb:fc:b8:41:e7:3b:
ea:a9:06:e9:34:e1:4a:7a:0c:83:54:74:f2:ce:db:
9b:c6:a1:dc:05:cf:24:ae:6b:20:40:68:31:9e:76:
04:2f:86:bc:17:1b:e2:eb:62:fe:9d:47:94:3b:e0:
07:d3:31:29:0c:81:b1:2a:33:08:09:34:6b:6d:0c:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:5A:5E:43:61:66:6E:F4:DF:F9:12:B3:D7:24:C5:CA:D0:8D:CC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91808B7/E96A8F4E1DA411E29BE2239B08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91808B7/E96A8F4E1DA411E29BE2239B08B02CD2/mQNaXkNhZm703_kSs9ckxcrQjcw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58373
131194
132038
132366
sbgp-ipAddrBlock: critical
IPv4:
103.10.57.0/24
103.14.230.0/24
103.234.13.0/24
202.125.111.0/24
Signature Algorithm: sha256WithRSAEncryption
59:58:c6:63:86:c8:53:05:dd:4e:df:0c:bb:4d:6a:fd:3c:7e:
9d:40:5b:61:ae:3b:64:10:07:58:10:99:67:aa:68:36:72:bf:
cd:bc:b4:a7:1f:31:16:a2:2b:7c:f8:51:01:ae:61:09:6c:3d:
ce:3b:05:81:5d:a7:79:56:93:de:28:b5:a6:78:e0:bd:d0:c9:
bc:68:c5:4e:c1:11:b7:73:33:b4:7d:1c:1d:12:c1:ee:64:eb:
69:23:dd:cd:2a:70:e2:96:80:dd:9b:4e:d1:f0:dd:42:eb:ee:
24:52:6d:bb:e3:a9:86:56:23:32:26:8f:e6:08:43:c8:91:6b:
6b:c9:a9:b6:e2:c9:58:88:ff:0e:bc:3a:3e:37:68:eb:d6:48:
18:9c:6c:03:35:97:29:f8:ca:5b:30:dd:84:47:91:58:ac:45:
1f:40:90:ea:14:db:6c:4a:56:5b:9c:be:e0:ca:62:32:70:c3:
bf:38:00:d8:0a:dc:65:8d:a1:b8:3a:d8:ea:c4:15:31:8b:7f:
fa:2e:28:42:c0:9e:ec:2f:a3:ed:37:56:36:cb:99:08:b5:1b:
68:cd:17:f8:4f:6a:d9:1a:43:58:76:88:9a:a2:1e:d9:f7:70:
4c:0b:f5:15:d5:74:e5:e7:a1:18:33:a0:f9:3b:db:8e:37:bc:
68:53:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:17 2023 by rpki-client on console-fra.rpki-client.org