
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
File: Yg05s6GDeXO9EyafKwasmyc4gg0.cer (raw, json)
Hash identifier: fw1F+VDFYIDWJ4hHlMcRSCK4oe9AVLHYJbrSZc+qzAk=
Subject key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C86
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 15:48:01 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 18381
AS: 153368 -- 153369
IP: 43.250.52.0/22
IP: 103.41.176.0/22
IP: 2406:4fc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142470 (0x22c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 15:48:01 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:5a:fc:07:14:96:e9:65:d2:8f:8d:29:7c:
a7:cb:7b:2f:78:22:54:97:3e:64:fd:bc:4a:1c:6a:
98:85:05:5b:52:84:c4:6d:25:bf:d9:e6:4b:2c:e1:
8f:19:2f:64:f2:18:c6:14:77:a3:b8:88:d7:4a:4b:
d7:07:3b:f2:13:61:be:03:fc:c2:4f:5a:09:49:db:
df:cf:83:b5:0a:6a:cb:5f:c4:6f:3f:1d:f0:97:59:
2a:eb:ac:5f:a5:c2:dc:6a:16:c4:cb:1c:57:af:fd:
14:75:62:11:55:f2:b4:5c:4f:ca:16:fc:fc:90:aa:
b5:7f:33:0e:d0:5f:f2:70:c1:28:a3:fc:49:61:ee:
8e:82:66:3f:2d:70:bc:5b:96:61:d0:2a:bc:6a:6d:
7f:95:4e:3c:46:da:f6:af:c1:1f:6f:11:85:24:95:
4c:23:3d:ea:35:0e:36:7a:e5:54:2d:b6:14:fa:27:
85:4e:05:9c:81:0d:b5:9d:aa:23:c6:a2:e1:22:55:
ea:6e:67:23:df:8f:33:22:a2:34:00:e4:94:46:54:
76:e8:89:4e:0b:c9:b5:04:7a:e7:aa:5e:7e:46:42:
5b:69:5b:de:e3:08:7d:36:68:d7:cf:a0:41:2a:1e:
51:d9:64:15:3d:16:db:eb:29:a3:7f:d3:9b:12:6a:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18381
153368-153369
sbgp-ipAddrBlock: critical
IPv4:
43.250.52.0/22
103.41.176.0/22
IPv6:
2406:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
d9:67:cc:a4:01:6d:2a:c9:bc:61:dd:87:d3:a7:d7:ab:3e:fb:
9d:5a:62:76:3f:66:b9:82:4a:51:32:18:f4:8b:f9:39:fa:9c:
2b:56:0b:18:f8:1e:44:7d:5a:1b:5a:cc:03:5b:f6:f8:9d:46:
34:5a:9f:52:72:ea:12:14:d9:41:34:88:fb:49:f5:bd:89:6c:
b5:cd:b6:cd:f5:e3:9d:6a:c7:70:77:88:8f:59:e3:f8:b1:ca:
77:4e:1e:b1:e4:25:7f:16:b0:9a:47:62:2a:fe:fd:00:ed:6c:
1c:5f:f9:ec:20:f3:af:18:52:1a:e9:32:4d:55:67:39:48:20:
38:ae:8f:cf:42:a5:48:6b:46:37:e8:8d:77:8c:d6:28:01:fe:
50:15:14:ff:85:c5:48:a9:79:1a:94:e8:99:53:78:78:42:c6:
c6:23:50:94:46:0a:6f:0e:0e:bb:13:4c:29:74:bd:b4:4c:3a:
2d:a3:cf:c2:18:b6:b7:fd:0d:23:6d:5a:38:a5:4e:d0:81:9a:
cf:85:0f:91:ab:88:99:13:b3:e4:b3:72:e8:4a:fa:7f:a0:2e:
12:b2:c7:ef:0f:7a:a2:c3:4e:7c:89:a4:9a:f1:72:e9:b1:69:
54:d7:60:20:83:7f:8b:de:50:f4:bd:16:9e:7c:21:0c:a0:eb:
07:25:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:57 2025 by rpki-client