Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
File: rDMhMLHAn9SrI3SVpOqWNLdMEro.cer (raw, json)
Hash identifier: km02WiBKMp/zehHn9PG/sP/oLQpwVCCN2ZgdPmGA4aI=
Subject key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022CCC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 19:33:03 +0000
Certificate not after: Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources: AS: 4820
AS: 17455
IP: 203.3.176.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142540 (0x22ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 19:33:03 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:ff:d1:43:61:40:17:61:37:2c:5a:f8:73:
a9:ae:a4:11:d1:2b:e6:1b:20:98:5e:7e:78:d9:22:
85:12:ec:66:cf:ce:5e:ff:05:6c:19:8c:83:de:85:
bd:20:eb:cf:8b:62:b5:5d:d2:24:b6:9b:d0:32:5d:
cb:95:8e:0b:a8:1a:d7:3d:77:69:83:ca:92:d4:6a:
7a:ec:51:da:3f:fd:aa:2f:5b:64:26:65:67:04:9e:
1b:c8:47:08:c6:d4:61:14:9a:d9:81:a8:69:6d:9a:
0e:57:16:1a:de:c7:6d:db:a2:bc:3b:ef:08:9b:8d:
c9:98:98:70:70:79:c7:7a:df:1b:00:30:c4:1a:75:
23:4b:b7:73:55:d7:4d:6b:72:55:2d:d0:bb:a8:9a:
00:00:2c:44:bf:11:50:39:d4:8f:94:fa:d4:45:36:
57:e6:17:a2:41:1a:c6:17:3d:c4:9d:92:07:57:21:
af:05:70:52:dd:0d:22:3c:f6:38:6a:06:49:47:c9:
a4:a2:27:66:51:82:76:47:0f:11:66:91:52:b6:0e:
b1:35:f5:c1:cf:d2:9a:17:96:e9:97:41:48:c0:e5:
25:8c:c8:2a:d3:11:5d:07:34:28:a8:9f:ae:e0:a3:
53:cf:da:f2:7d:06:e6:2d:7f:b2:7a:50:71:dd:f8:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4820
17455
sbgp-ipAddrBlock: critical
IPv4:
203.3.176.0/20
Signature Algorithm: sha256WithRSAEncryption
89:cc:1c:cb:2a:e0:4a:8f:b9:05:84:36:2b:9d:48:08:35:45:
68:6b:5e:5a:6c:db:ab:a6:49:8a:96:46:33:61:51:be:42:9b:
d8:a6:28:d9:9f:c3:4a:e2:5f:86:b9:e5:eb:ab:e1:2e:76:a6:
04:e3:c8:16:94:14:85:f4:4f:cf:aa:bd:99:64:5f:b2:1f:17:
69:ed:4d:e7:0d:00:50:b9:15:7c:ba:5e:b9:10:ef:fe:80:45:
f3:ca:11:fb:0e:67:a7:53:60:08:15:bb:2a:56:45:e7:70:79:
1f:63:b9:c0:42:44:b7:42:c4:21:00:c2:47:98:d7:58:f1:e5:
86:9b:41:38:8a:0f:38:dc:99:fd:c4:42:cd:f2:29:fe:cf:c9:
5f:23:c3:b9:87:84:b9:d8:15:9d:94:2a:4d:2a:15:23:4c:8c:
2e:58:c3:24:53:d7:83:77:d3:e9:7c:c6:59:f3:f6:15:bc:9b:
9b:3a:2a:ee:1b:55:ab:6c:6e:e9:e3:fd:d0:b8:84:ea:d2:7a:
98:0a:96:85:4d:b0:8a:d5:f5:3d:ff:c0:5c:ee:54:d3:2b:6f:
69:2c:01:30:a6:6b:fb:05:68:4d:3a:c7:80:ad:d4:33:b7:99:
cb:59:70:6c:69:87:7c:aa:21:0f:25:ba:e7:a2:3d:3a:f8:c4:
5a:19:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:49 2025 by rpki-client