Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
File: dRH-79yX09DgVRW7QMF431FGqcQ.cer (raw, json)
Hash identifier: aoSANANSI38GReKiESeEqTbVQwKAhs+4FY7e4YW7KpE=
Subject key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022BC9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jan 2025 06:08:56 +0000
Certificate not after: Thu 01 May 2025 00:00:00 +0000
Subordinate resources: AS: 55420
IP: 27.0.4.0/22
IP: 103.29.198.0/24
IP: 163.61.18.0/24
IP: 2401:2200::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142281 (0x22bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 28 06:08:56 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:71:e0:0d:13:54:f3:d1:d9:d7:24:4c:5e:
8c:c6:fd:ab:1f:6b:58:83:88:f0:44:56:44:10:7f:
07:c4:a7:4e:0c:70:6f:0e:2c:01:40:49:18:12:d5:
1a:77:95:5f:8d:0a:03:40:a7:8d:8b:ce:6c:f5:72:
72:b1:10:12:bf:4d:a0:fc:54:89:b0:2b:d6:c9:f5:
b4:f5:a9:d5:3d:1c:17:9d:09:28:02:eb:e7:42:bc:
a0:ec:de:12:67:6c:6d:eb:94:88:18:1f:c4:4a:68:
f6:e8:3b:4e:6b:0a:b9:24:98:99:ae:3d:31:17:83:
fd:a0:6c:84:ee:93:94:e0:1a:dc:8c:06:8d:f9:92:
a2:a1:f4:ce:45:36:76:47:2e:d0:ef:ac:3d:5c:ab:
7d:5c:2d:5a:0b:63:dc:64:c6:fa:5e:96:a6:dc:cf:
de:29:e9:01:7c:91:83:52:f9:74:aa:a9:a0:e4:66:
d0:f8:a2:a1:45:13:b5:e7:2c:1b:7a:79:63:96:85:
ff:99:c6:9d:64:0a:5d:2c:ec:87:8c:c3:7e:bd:c1:
b6:76:7b:a3:ff:3f:a2:28:6a:0d:99:1f:96:20:d1:
94:4e:9b:68:37:a3:97:fe:e1:16:6a:80:2d:5d:ee:
6a:73:d4:83:06:6d:8f:84:fd:13:78:75:5c:ca:6c:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55420
sbgp-ipAddrBlock: critical
IPv4:
27.0.4.0/22
103.29.198.0/24
163.61.18.0/24
IPv6:
2401:2200::/32
Signature Algorithm: sha256WithRSAEncryption
15:26:5f:2b:d8:45:71:2f:03:91:7c:a5:f0:01:72:ca:ca:fd:
66:cc:f7:a1:c0:f4:f6:e5:0a:6e:88:d3:c2:be:e3:26:92:db:
9f:fa:c1:5d:2e:a5:2d:b1:18:df:17:8d:32:20:1f:7e:fc:78:
49:9c:cc:a4:49:d9:90:4c:10:4d:2b:ab:66:a3:62:2c:76:c7:
35:db:78:73:b0:e0:af:6a:9c:5d:8a:23:a2:03:f1:5b:a1:46:
81:c8:41:0f:d0:84:cb:2c:2a:00:24:18:36:f8:22:a6:ec:cf:
f5:a5:60:54:c8:a3:12:64:97:73:33:9a:1a:9d:71:7e:c9:82:
1f:36:b2:f0:ac:41:9a:a6:e7:81:f3:7d:dd:b3:f9:1b:1c:fa:
dd:be:f6:52:1a:98:3c:ea:f8:c7:ea:5a:a9:66:7c:68:48:b0:
a2:9d:c6:0c:a4:03:e0:79:69:34:0c:8b:58:3f:84:8c:c0:f8:
35:6e:d4:3d:39:96:fb:ff:68:f1:8e:40:df:d5:5a:b7:09:c1:
22:47:24:9c:5f:15:f2:34:a2:17:c1:e0:c0:a9:8d:03:42:67:
81:1d:63:33:27:fc:c4:41:0f:12:40:13:2d:7f:45:1c:cf:e3:
69:38:2c:aa:94:73:12:3a:a3:6f:28:39:97:fd:d3:87:b3:46:
6f:37:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:27:11 2025 by rpki-client