Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
File: YDHQYB1cLYetZiNh5jv_2R4EBzM.cer (raw, json)
Hash identifier: x00moXfksyt2odTKFaICKC04xhF0988VjAl7+KpjjR8=
Subject key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C16
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jan 2025 05:26:27 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 150807
IP: 103.17.16.0/23
IP: 103.249.66.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142358 (0x22c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 29 05:26:27 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ff:bd:ac:01:1d:77:f0:66:4c:c5:a5:45:d3:
11:80:1e:95:43:e0:73:51:5f:07:89:e8:43:57:bd:
be:0a:f7:66:e5:0a:95:7c:cc:18:16:7a:c3:b7:e4:
66:82:ce:5f:b7:97:52:7d:a5:56:57:e4:e0:3a:ed:
0a:06:1d:41:9c:d3:08:f0:84:a7:6c:7f:78:c4:c9:
6f:44:e3:1e:96:83:09:52:ce:1e:eb:59:99:ca:e9:
cb:26:3a:44:a5:c2:dc:07:08:1d:69:cb:0d:10:a2:
4a:c7:8f:a3:3e:c2:61:ee:13:41:31:47:6b:b3:2c:
45:1b:d2:91:5b:8f:5e:c4:a9:b2:d2:6c:ca:95:d7:
bd:bd:47:23:c3:6e:15:b2:f6:07:94:66:6c:dd:dc:
f4:06:b3:6f:13:31:65:50:a5:60:7d:75:8a:09:26:
b9:c4:ec:e9:4e:c7:9e:c0:68:52:53:d2:1a:db:fc:
1f:17:2d:6e:7d:f9:b2:24:4c:d9:24:9e:4c:c6:95:
f2:31:52:a9:31:2e:ab:59:09:63:73:a4:17:ab:bf:
d5:12:25:d8:43:2c:64:d1:63:2c:ea:83:7f:30:e9:
b1:e0:ba:09:a5:d5:1c:00:1f:57:73:e7:de:5c:df:
e6:10:1e:6a:98:c8:6e:0a:0a:06:18:02:ef:b3:5a:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150807
sbgp-ipAddrBlock: critical
IPv4:
103.17.16.0/23
103.249.66.0/23
Signature Algorithm: sha256WithRSAEncryption
83:ec:32:32:f8:3d:28:9a:e6:01:f6:b8:72:c9:62:c6:29:8e:
e8:dd:c4:57:37:e5:e0:46:85:b0:81:10:35:cf:c6:7d:07:a4:
58:a0:78:2a:db:b6:16:ba:66:2f:d3:b8:de:d9:08:17:d5:12:
e0:c5:29:a3:11:d0:46:09:bb:1c:4f:9a:23:9a:27:00:19:74:
5f:05:23:33:df:d7:e5:81:eb:0c:fe:d1:49:be:09:de:5f:68:
ba:ae:f0:be:95:5d:9e:4c:61:da:3f:94:86:6b:7f:95:65:e8:
41:f2:f3:13:a0:f8:af:21:59:96:e6:b8:ad:83:30:ef:1d:07:
8c:53:1b:d3:ed:9f:0f:de:9f:ff:91:d7:a8:ca:fd:46:c6:09:
da:d4:5d:bf:b4:df:2a:78:d6:d8:63:33:c0:75:8d:ad:b9:71:
f0:ee:fa:33:60:06:18:8c:75:4f:d6:75:d4:8c:6c:8e:a4:88:
df:8a:df:81:58:07:c0:a6:98:1e:cc:ef:e8:e4:05:dd:a7:a3:
2a:44:8a:e5:91:bc:11:98:e5:4f:6f:b4:c5:65:1a:05:61:af:
2f:4f:be:e7:46:e3:2b:cb:99:50:dd:24:28:40:ca:3d:38:e2:
2a:31:81:fa:2c:aa:6d:5f:56:a3:42:34:5c:d5:c4:36:8b:cf:
01:02:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:32:03 2025 by rpki-client