Certificate

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
File:                     DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (raw, json)
Hash identifier:          4UiML5Ykq5f2dkujjkGNpxcdNyPTDY0uQKJN4Ehrr/Q=
Subject key identifier:   DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       692A51533B498F2C9E9AF8666968E995CED950D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Manifest:                 rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
caRepository:             rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/
Notify URL:               https://krill.sy5.nsw.au.infininet.com.au/rrdp/notification.xml
Certificate not before:   Sun 13 Sep 2026 23:58:59 +0000
Certificate not after:    Mon 13 Sep 2027 00:03:59 +0000
Subordinate resources:    AS: 24381
                          IP: 103.248.50.0/24
                          IP: 2401:2060:b000::/36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:51:53:3b:49:8f:2c:9e:9a:f8:66:69:68:e9:95:ce:d9:50:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Sep 13 23:58:59 2026 GMT
            Not After : Sep 13 00:03:59 2027 GMT
        Subject: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:2d:73:fc:b7:12:1b:02:6b:ae:49:4d:0c:
                    8b:04:bf:10:f2:db:d3:f6:dc:07:fc:b0:b8:38:7f:
                    8d:f4:dd:90:27:03:97:62:2b:d4:7e:13:8b:c6:3a:
                    ce:ed:e6:53:ec:bc:3b:7f:cc:4d:16:88:2a:c2:1a:
                    96:eb:b3:95:bf:eb:98:ae:44:d8:47:79:74:ca:c4:
                    c9:2b:28:35:e6:ae:81:a6:f2:25:74:8a:f1:55:09:
                    15:d8:b9:f3:e7:a7:c9:1d:75:42:9e:14:4c:e1:b1:
                    9b:c6:cc:12:ae:e0:91:f6:9b:15:cd:e2:9e:6c:a6:
                    5c:1a:b6:d7:ca:81:59:15:29:8b:b9:01:2c:6f:37:
                    99:1b:10:09:40:98:25:91:2c:86:1b:3f:4a:64:84:
                    1d:f5:97:a3:6d:c4:39:bc:7a:09:74:cb:18:a2:65:
                    7b:7a:72:20:b5:20:6d:70:61:cb:f8:43:71:1e:6c:
                    2a:2f:5e:41:78:11:d7:b7:9b:b7:d0:f0:eb:7a:f3:
                    af:03:44:27:95:1e:f0:0e:4b:fa:00:77:54:eb:cc:
                    48:5d:67:f6:bc:bb:7e:67:85:e5:b1:21:44:f3:2b:
                    66:35:b4:ad:71:05:15:26:c9:71:ae:63:12:e9:09:
                    7a:34:2f:c4:82:d7:8f:d5:17:8f:d8:d9:10:56:15:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/
                RPKI Manifest - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
                RPKI Notify - URI:https://krill.sy5.nsw.au.infininet.com.au/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/24
                IPv6:
                  2401:2060:b000::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24381

    Signature Algorithm: sha256WithRSAEncryption
         37:be:ac:b9:72:a6:9c:18:d4:23:bc:ca:62:72:6e:45:fe:44:
         7d:48:37:67:5b:e4:50:89:8b:c2:50:e6:f0:41:64:98:7a:e4:
         4a:c5:77:2b:0e:4d:3e:4a:09:a3:3c:f1:b5:6d:9e:89:cd:26:
         e7:66:7e:c0:19:30:c7:98:88:fc:e0:c0:cd:09:f3:37:8a:9c:
         20:dd:aa:bc:5d:01:35:90:4c:a3:c9:f3:fe:45:48:02:3b:f9:
         f8:95:22:2b:83:3c:c4:1b:5f:54:2e:64:b5:6d:09:2b:80:34:
         c5:e3:a6:73:96:25:c7:00:29:97:b9:0a:2b:2f:ca:7f:81:8f:
         14:53:4f:65:5a:94:73:51:8a:0e:0e:40:37:5a:7b:10:e4:8d:
         11:66:62:26:a9:61:94:b0:ed:78:95:81:d8:ce:cd:36:39:30:
         46:c8:74:a2:58:bb:ed:7c:9c:e6:23:67:b7:58:51:44:4d:d8:
         e9:8b:98:25:d8:a3:5e:29:02:e5:a1:66:96:6f:ad:7e:99:5d:
         18:72:40:4e:51:ac:4e:c6:e2:70:65:55:4c:5a:e0:37:69:79:
         35:42:8b:1c:4a:ee:ac:e0:41:ee:98:02:fc:17:9f:c0:2c:91:
         da:6f:6f:1a:99:f9:5f:39:73:26:48:01:46:2c:65:53:65:36:
         f8:a4:e7:8c
-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgIUaSpRUztJjyyemvhmaWjplc7ZUNEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg0N0ZCRENFMkNC
NkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1MB4XDTI2MDkxMzIzNTg1OVoX
DTI3MDkxMzAwMDM1OVowMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4
MEFDRjI0MDJFRjZEQTk4NzIxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK95LXP8txIbAmuuSU0MiwS/EPLb0/bcB/ywuDh/jfTdkCcDl2Ir1H4Ti8Y6
zu3mU+y8O3/MTRaIKsIaluuzlb/rmK5E2Ed5dMrEySsoNeaugabyJXSK8VUJFdi5
8+enyR11Qp4UTOGxm8bMEq7gkfabFc3inmymXBq218qBWRUpi7kBLG83mRsQCUCY
JZEshhs/SmSEHfWXo23EObx6CXTLGKJle3pyILUgbXBhy/hDcR5sKi9eQXgR17eb
t9Dw63rzrwNEJ5Ue8A5L+gB3VOvMSF1n9ry7fmeF5bEhRPMrZjW0rXEFFSbJca5j
EukJejQvxILXj9UXj9jZEFYVOGkCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFN2JhKgmcd1gqnmArPJALvbamHIcMB8GA1UdIwQYMBaAFEf7
3OLLbyxuQ3jFaILD0kbXblBFMA4GA1UdDwEB/wQEAwIBBjByBgNVHR8EazBpMGeg
ZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw
RTREMDAwMC8wLzQ3RkJEQ0UyQ0I2RjJDNkU0Mzc4QzU2ODgyQzNEMjQ2RDc2RTUw
NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JfdmM0c3R2TEc1RGVNVm9nc1BTUnRkdVVFVS5jZXIwggEjBggrBgEF
BQcBCwSCARUwggERMEoGCCsGAQUFBzAFhj5yc3luYzovL2tyaWxsLnN5NS5uc3cu
YXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNoYW5nZS8yLzB2BggrBgEF
BQcwCoZqcnN5bmM6Ly9rcmlsbC5zeTUubnN3LmF1LmluZmluaW5ldC5jb20uYXUv
cmVwby9CR1AtRXhjaGFuZ2UvMi9ERDg5ODRBODI2NzFERDYwQUE3OTgwQUNGMjQw
MkVGNkRBOTg3MjFDLm1mdDBLBggrBgEFBQcwDYY/aHR0cHM6Ly9rcmlsbC5zeTUu
bnN3LmF1LmluZmluaW5ldC5jb20uYXUvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgAB
MAYDBABn+DIwDgQCAAIwCAMGBCQBIGCwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
Al89MA0GCSqGSIb3DQEBCwUAA4IBAQA3vqy5cqacGNQjvMpicm5F/kR9SDdnW+RQ
iYvCUObwQWSYeuRKxXcrDk0+SgmjPPG1bZ6JzSbnZn7AGTDHmIj84MDNCfM3ipwg
3aq8XQE1kEyjyfP+RUgCO/n4lSIrgzzEG19ULmS1bQkrgDTF46ZzliXHACmXuQor
L8p/gY8UU09lWpRzUYoODkA3WnsQ5I0RZmImqWGUsO14lYHYzs02OTBGyHSiWLvt
fJzmI2e3WFFETdjpi5gl2KNeKQLloWaWb61+mV0YckBOUaxOxuJwZVVMWuA3aXk1
QoscSu6s4EHumAL8F5/ALJHab28amflfOXMmSAFGLGVTZTb4pOeM
-----END CERTIFICATE-----