Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
File: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer (raw, json)
Hash identifier: bM69m9IPKqD0LTVgsUmBotLAuG5HAfYEAtsw166f8Es=
Subject key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C8C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 15:58:08 +0000
Certificate not after: Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources: AS: 134983
IP: 103.204.200.0/22
IP: 202.181.12.0/22
IP: 2404:c280::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142476 (0x22c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 15:58:08 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:8e:07:f2:c9:e8:60:95:49:0d:4e:f8:35:
a2:15:cd:64:73:d4:dd:93:17:53:e2:a2:02:3b:7b:
54:7c:ed:2a:60:4e:47:d1:b9:9f:02:59:17:6c:ac:
c6:31:f2:c9:b7:2f:91:4a:03:ed:2e:a6:3d:a0:e0:
b5:e5:77:ee:86:cd:c6:4e:62:4c:ec:b6:40:76:5b:
a9:3d:9e:75:ca:1e:79:31:f2:f6:54:a7:66:82:61:
13:f2:60:8a:ea:38:79:16:25:98:92:c2:79:5e:06:
de:9b:a9:3c:40:b4:34:e0:41:d5:bb:e3:80:49:85:
6f:e9:6d:c0:99:46:68:ef:5e:8c:bb:61:03:b8:e4:
2d:a8:91:c5:ef:73:84:f4:d1:d5:ce:2d:a3:3b:36:
6f:32:ab:93:7f:a4:d0:ad:60:25:41:ca:d7:7d:af:
0c:cb:bb:66:49:71:e4:14:eb:48:fe:22:c3:a1:8f:
6d:a2:cf:22:16:14:b2:c1:be:50:a3:c3:1e:ac:ab:
c6:7a:3f:ab:04:57:50:c2:b7:5f:27:8e:67:bd:03:
25:ee:fe:71:02:8d:21:e6:65:da:9e:8f:1c:39:d3:
26:b9:f7:a1:28:d9:b1:53:aa:29:5f:b2:77:a2:ae:
9e:ed:13:c2:6a:e0:5e:7c:3e:7b:b3:d6:82:eb:ab:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134983
sbgp-ipAddrBlock: critical
IPv4:
103.204.200.0/22
202.181.12.0/22
IPv6:
2404:c280::/32
Signature Algorithm: sha256WithRSAEncryption
8b:5e:4b:4b:0b:07:c3:e9:f4:ba:d4:b7:7f:17:9c:b9:e1:64:
b2:b7:3c:47:3a:59:6d:fc:41:26:7c:a0:b1:54:e6:4f:be:d9:
4e:c3:ed:2b:79:7d:9d:42:77:03:00:ca:cd:dc:a8:c0:c4:c3:
0a:20:a5:65:12:52:5c:5a:22:9a:f0:5b:9c:61:c5:fa:d8:3d:
8a:46:bf:16:79:be:86:dc:4e:21:11:e5:d2:78:f7:10:67:83:
1f:1e:a7:e3:fc:01:7a:18:27:c6:d4:25:0d:f8:08:6f:f2:a1:
91:cb:94:02:9c:41:b8:34:9f:3c:26:ae:b9:09:ab:fa:7c:a1:
b8:21:44:f1:3f:b6:8e:ae:4f:2a:4e:cf:c3:23:e4:1c:36:85:
f1:54:21:0e:88:4f:18:54:b7:c5:83:b7:9c:1c:98:cd:a6:2b:
5b:41:e3:58:6e:0e:4b:6b:5d:c1:8e:3b:56:d1:74:02:ba:a6:
c5:17:99:a4:87:2e:3c:31:37:e1:b7:de:bc:29:7a:47:57:51:
95:a9:8f:ec:78:cd:57:c1:4a:04:37:cc:fe:ab:ab:75:34:37:
89:ef:02:71:ea:8d:f3:10:2c:cd:b4:00:07:bb:77:cc:f5:1b:
93:e2:17:42:12:a8:8a:a7:80:a6:21:66:5b:ca:2e:49:c9:52:
62:92:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:30:11 2025 by rpki-client