Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
File: iU_hE5i2ea6xsRixveZz4Yz26TQ.cer (raw, json)
Hash identifier: hkCYHaCUJtP8PDcRk5tckXbI1RogTcZ1pRW3hygb98I=
Subject key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0213C3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 13 Oct 2024 15:16:58 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138398
IP: 103.121.34.0/23
IP: 103.130.68.0/23
IP: 2403:b4c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136131 (0x213c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 13 15:16:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:58:0e:be:d5:a5:1a:47:70:f1:11:24:fb:
49:ea:3b:0b:e6:29:d3:03:73:b4:b6:4c:d3:fe:01:
ad:02:8a:ee:75:41:7e:74:4e:53:02:65:6a:cc:9a:
d6:4d:87:8c:d5:38:99:14:d4:92:4b:76:7c:23:65:
cc:6d:68:c2:54:74:ff:8b:25:7b:17:8b:76:80:c2:
14:70:dd:74:50:96:b0:85:71:4e:dc:de:14:18:95:
c7:86:f3:a4:71:73:80:d1:12:c3:6e:b9:28:93:08:
4e:72:15:1f:04:12:7b:3b:7a:1b:6c:d8:8e:ef:bc:
d2:60:96:1b:a2:a5:05:fe:9d:10:a5:0f:13:e2:a1:
36:0c:d3:88:bd:4d:a5:a5:44:4b:d7:77:ac:a7:5e:
eb:84:52:e3:30:f5:2f:d0:0c:02:f6:a4:09:44:3c:
44:43:fb:0c:45:7d:a0:2e:62:ae:67:d8:03:e3:02:
f2:0d:91:2c:2a:7f:ed:ca:6c:da:97:eb:5e:fa:4d:
c3:c8:89:cf:58:4e:05:42:72:46:32:55:92:4b:ec:
76:3e:39:9e:a4:00:1f:f9:14:3e:a4:b1:1a:84:7d:
f2:d0:4a:63:96:26:98:6d:49:a6:39:68:fb:a5:23:
a3:aa:6d:9f:88:8d:32:74:12:65:23:34:aa:65:7a:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138398
sbgp-ipAddrBlock: critical
IPv4:
103.121.34.0/23
103.130.68.0/23
IPv6:
2403:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
71:ad:ee:53:ad:5e:62:8e:3c:3e:7a:e0:97:c0:be:28:68:bf:
10:72:22:13:10:d1:d9:1c:2a:2b:69:89:32:47:4e:db:10:5e:
0b:1f:fa:08:b6:50:7c:39:b7:bb:96:64:26:52:14:27:49:e6:
02:da:da:3a:5c:8a:62:1e:8b:77:5a:e4:5e:80:4b:08:d8:62:
5a:e4:5a:26:d3:88:7b:c7:a1:36:ef:9f:32:4c:da:96:b6:e7:
47:ca:e6:07:99:8e:b7:ed:5a:32:3f:d2:96:2e:2c:a7:b1:b9:
f3:0d:10:bd:47:e7:cb:df:22:31:82:ef:6d:16:c7:8c:04:fd:
69:8e:b4:c1:9e:f1:4c:71:6d:f1:7f:81:96:36:5d:99:b8:28:
7e:ca:e4:0a:4c:6a:f6:94:d9:f9:a5:09:cc:fe:d7:86:0a:51:
d0:21:a4:de:80:cd:fb:7f:6e:45:39:b6:f1:17:13:10:c8:9c:
e9:84:75:bc:12:dc:87:a2:78:e6:1d:6f:0c:1b:47:1c:65:b9:
03:bc:24:3c:40:e1:28:4b:9c:4c:d8:46:51:08:75:cb:c5:25:
ad:60:62:f5:de:d5:b3:f5:ad:a4:eb:d1:81:af:58:39:97:f0:
5c:b4:cd:c9:a6:22:63:76:d2:69:1d:a2:fb:4b:6a:61:38:99:
60:d8:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:19 2025 by rpki-client