
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
File: bxP1UQCfJIptmHQ2AE6FeVFWkns.cer (raw, json)
Hash identifier: 4ZiOm6fQj58ctyukunBawG8MH6A8CClVBRC16PAUVVQ=
Subject key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021BB8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 Nov 2024 18:30:48 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 55342
IP: 103.157.184.0/23
IP: 2406:2940::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138168 (0x21bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 15 18:30:48 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:de:34:e2:d7:46:d7:d7:88:04:84:72:51:
c7:a3:f9:9e:de:f8:fe:c8:1f:b8:3c:df:85:28:c8:
c8:91:13:a5:36:38:30:5b:a3:76:fc:cf:af:0e:2f:
b8:9e:be:73:c3:0a:da:88:61:11:06:8a:80:de:7f:
22:51:68:89:17:b7:e7:88:17:cc:c5:9e:6a:a1:17:
73:8a:ee:ad:1b:70:a4:f5:97:3b:ea:47:d5:99:6d:
25:15:0e:b7:87:1f:2b:84:e7:54:c1:5f:96:b4:02:
4b:9d:07:14:25:16:d0:e7:24:11:40:f5:63:f0:94:
c4:0f:ba:44:fb:e4:0f:e8:83:0d:6d:ad:32:d6:de:
d5:ed:eb:c5:e4:c7:40:ce:9e:d2:c9:5a:0a:12:04:
49:dc:62:1e:f0:07:0d:0d:49:2b:e1:80:54:cc:5e:
c8:b2:ac:25:90:87:dc:0e:0d:29:74:9c:da:8e:bf:
67:c4:e3:e4:f1:06:34:33:1e:a2:55:d2:c2:7f:e1:
32:e7:db:5a:33:45:1b:92:c9:48:7e:eb:16:e2:55:
80:76:08:bd:23:31:6a:bc:40:5c:56:4c:32:a2:04:
ad:29:49:e0:8f:e8:3f:28:ce:8c:56:a8:e6:0a:11:
4c:3a:dd:2b:20:7e:9b:a7:b9:94:a5:0b:5e:c0:a9:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55342
sbgp-ipAddrBlock: critical
IPv4:
103.157.184.0/23
IPv6:
2406:2940::/32
Signature Algorithm: sha256WithRSAEncryption
99:29:f5:90:9f:7c:dc:b4:7b:47:f3:18:97:2c:c0:66:a8:6d:
60:0b:35:51:70:b1:32:32:60:bd:3d:3f:3c:57:72:4d:28:5c:
9c:12:d5:9b:bd:4b:cb:d0:31:fe:91:64:67:8e:e2:c7:04:79:
9d:a2:78:50:1c:57:e3:5f:89:3e:39:4e:69:81:2f:3b:c7:35:
9a:98:c9:8c:e5:7e:02:d3:c0:fd:64:dd:4f:39:01:86:38:83:
20:fe:4b:7d:8e:9a:ac:57:30:6c:ad:80:07:34:8c:ad:ac:d4:
48:3d:dd:d3:2f:01:f9:64:67:79:64:90:57:ba:4a:d8:dc:8c:
ab:2b:2f:4e:13:9a:91:91:cb:50:70:b0:36:e8:67:1d:dd:57:
cc:51:25:de:04:15:85:41:48:c6:51:b7:07:0d:ad:49:f7:3a:
49:07:e4:99:5b:b1:d1:bb:49:1e:35:a3:a3:15:fc:7b:7c:ea:
e0:61:9a:14:99:cb:a2:1b:6a:67:53:de:17:70:5b:2e:a1:99:
11:23:0f:2e:e3:35:66:0d:57:e1:f7:48:a7:4f:ef:e1:bd:91:
39:d0:eb:4c:18:6a:f4:d3:4b:4a:31:c7:94:18:30:e5:c3:76:
62:23:89:cf:8f:2d:4c:4d:6f:e3:fd:8d:6a:96:0c:fc:3c:2a:
75:f3:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:30:25 2025 by rpki-client