Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer (raw, json)
Hash identifier: pVgG0puMhGy6hGS61O2kXqhjbGngIcH7WRRwqARDD6E=
Subject key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02257F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Dec 2024 14:24:41 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 9498
AS: 23870
AS: 24560
AS: 45514
AS: 45609
IP: 27.123.64.0/18
IP: 58.84.56.0/23
IP: 59.144.0.0/15
IP: 61.95.128.0/17
IP: 61.246.0.0/16
IP: 61.247.224.0/19
IP: 101.2.0.0/17
IP: 103.7.108.0/22
IP: 103.16.104.0/22
IP: 103.56.85.0/24
IP: 103.116.28.0/22
IP: 103.239.233.0/24
IP: 103.251.28.0/22
IP: 122.160.0.0 -- 122.187.255.255
IP: 125.16.0.0/13
IP: 150.129.140.0/22
IP: 171.48.0.0/12
IP: 171.76.0.0/14
IP: 180.178.0.0/19
IP: 180.211.80.0/22
IP: 182.64.0.0/12
IP: 202.56.192.0/18
IP: 203.101.0.0/17
IP: 203.132.128.0/19
IP: 203.145.128.0/18
IP: 2404:a800::/32
IP: 2407:b900::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140671 (0x2257f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 30 14:24:41 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:21:47:ac:2c:95:e8:a1:d2:f2:5a:6e:86:
80:f2:28:c7:d5:3b:16:f5:1e:d5:97:0e:0a:cb:ee:
0a:1d:c3:4a:b0:37:7f:ed:7f:a6:5b:b8:22:26:fe:
d5:5e:de:93:11:46:d0:4e:b9:c2:51:4d:e2:4e:62:
08:85:78:ef:77:b6:70:dc:a6:7d:77:21:7e:52:db:
3f:4f:45:83:4a:c6:43:12:2e:e6:3d:92:1e:eb:89:
49:d4:ad:07:62:e4:44:f3:81:63:57:53:46:68:5c:
70:c9:fe:1d:77:30:41:aa:5e:a5:e4:02:99:07:7f:
3b:d0:ab:63:ea:b2:1b:4d:be:8f:a9:04:49:88:49:
fc:76:e8:4d:bf:73:9d:57:82:a8:79:2c:b5:70:4f:
49:7a:ff:4f:f9:e1:a3:ed:29:0e:59:88:c1:86:ad:
3f:d2:0d:43:29:f2:f5:55:05:74:dd:57:94:41:68:
44:0d:08:db:00:6e:46:4b:21:3c:9d:eb:6c:73:0e:
57:a4:da:e6:bc:bd:3f:57:3d:99:da:c6:03:ff:6b:
41:0d:f6:06:69:39:f2:cc:21:bc:2e:2c:c6:5f:f5:
d1:f8:f4:22:b2:25:17:ad:e7:76:a1:ea:10:21:59:
7a:42:9b:bd:ed:91:bc:63:fd:a4:a4:14:d1:31:89:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9498
23870
24560
45514
45609
sbgp-ipAddrBlock: critical
IPv4:
27.123.64.0/18
58.84.56.0/23
59.144.0.0/15
61.95.128.0/17
61.246.0.0/16
61.247.224.0/19
101.2.0.0/17
103.7.108.0/22
103.16.104.0/22
103.56.85.0/24
103.116.28.0/22
103.239.233.0/24
103.251.28.0/22
122.160.0.0-122.187.255.255
125.16.0.0/13
150.129.140.0/22
171.48.0.0/12
171.76.0.0/14
180.178.0.0/19
180.211.80.0/22
182.64.0.0/12
202.56.192.0/18
203.101.0.0/17
203.132.128.0/19
203.145.128.0/18
IPv6:
2404:a800::/32
2407:b900::/32
Signature Algorithm: sha256WithRSAEncryption
74:1a:58:7b:1f:92:4c:f9:48:ea:cb:56:e4:75:eb:28:42:b8:
ed:26:ea:6c:5f:86:86:5a:af:8d:f4:ac:62:fe:62:ab:26:81:
ef:26:8b:c5:04:3a:91:c7:41:bf:52:b0:02:07:cf:11:4c:a4:
32:0e:c5:a8:67:4a:9a:d4:15:50:de:b9:04:e0:d5:1a:95:2b:
03:72:3b:74:8b:2c:7f:49:6f:11:5b:50:7e:3f:20:aa:11:c0:
9a:2b:1e:a8:3e:31:47:b5:bd:36:5e:cb:64:2e:e3:5d:ce:b0:
99:b5:e2:af:ed:1b:f1:1d:25:d8:00:13:aa:70:fd:64:d3:56:
f5:53:90:70:ac:af:69:e4:0b:38:44:45:54:07:bb:06:b6:39:
3d:8f:04:00:89:86:bc:15:2e:86:e6:66:58:4d:ad:e8:3f:d9:
be:b9:7c:fa:b6:ab:20:3b:68:d3:da:fb:f5:b5:b8:64:a7:80:
60:a5:b9:ee:3a:8c:9f:96:27:19:4a:9a:1d:eb:97:10:59:31:
49:64:93:f7:e8:43:73:7c:f5:67:e1:f4:ee:4c:00:c4:20:2f:
cd:36:c3:e3:59:d9:91:6f:41:52:28:a9:8e:82:c5:b0:59:bd:
1c:ff:4e:ce:59:df:b2:42:40:22:e3:94:34:75:0a:51:4d:d0:
91:d0:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:50 2025 by rpki-client