Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer (raw, json)
Hash identifier: jsL+rlcc5QX+pZt7BWjszp53tG8HmVm/zPev+fNVVuI=
Subject key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4DB2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Sep 2023 15:04:53 +0000
Certificate not after: Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 69.94.32.0/20
IP: 69.94.80.0/20
IP: 209.212.192.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19890 (0x4db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 26 15:04:53 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:f7:c2:90:97:36:99:3f:93:e3:2f:7d:70:
be:32:f8:11:95:1f:a6:9e:3f:2d:a5:0c:cd:ec:9a:
54:bb:34:b4:d9:c8:9c:1c:42:34:9a:a9:e1:eb:b7:
2b:a7:70:3e:6a:8a:d8:17:44:f3:6e:04:53:85:22:
f0:f8:20:59:7c:08:5f:f3:2c:a3:e0:d0:83:97:2e:
a5:e0:1d:09:28:02:bf:ad:01:1b:68:45:14:a7:7c:
42:78:48:2a:5f:24:68:61:29:84:9a:d1:25:1d:36:
bc:bc:68:53:aa:6e:d3:a8:ce:96:ad:bd:0f:bf:b0:
5f:48:7f:34:ca:34:4a:2a:db:26:2e:6f:7b:68:6e:
9e:a0:06:86:c5:7e:75:fc:0c:b6:ac:0c:ac:a0:72:
74:b7:31:dc:d9:fc:18:8f:ee:fa:34:9c:b2:55:c0:
f5:f2:6a:ad:b7:3c:e6:1e:5b:ea:f3:e1:f1:de:d1:
10:1f:0b:dc:26:e0:fb:1a:30:a1:f6:44:3d:37:60:
57:fc:c9:91:e7:60:7b:34:dd:e9:a2:dc:a7:a6:5b:
e2:50:b4:55:c9:a0:78:8c:2b:a7:d4:e0:e8:68:ce:
63:ae:4d:ab:ae:5d:21:7d:4f:17:bd:1e:96:5c:df:
0e:5d:82:3d:07:9b:f0:01:c7:ae:d7:9a:7c:b7:f0:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.94.32.0/20
69.94.80.0/20
209.212.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:ac:60:7e:28:07:cf:0d:35:63:c7:e8:e7:2f:d6:7c:ed:ff:
8a:42:53:81:ea:6d:49:b0:2f:81:29:72:30:a4:6c:4f:d9:9b:
db:51:a7:cc:75:b8:63:96:2e:09:a8:9c:99:bf:e8:37:6f:c1:
f6:f7:30:7e:25:38:84:d5:bf:16:a7:b6:62:62:89:39:59:82:
6b:80:3b:ac:ac:d2:24:85:08:da:56:13:53:6c:91:42:e2:56:
02:1a:d6:9c:40:f9:e6:4c:81:b6:d6:66:c0:a6:57:e4:3d:cc:
87:c7:a7:31:5d:6b:68:63:9e:67:05:44:34:3c:4b:16:58:a6:
cd:99:3c:40:3f:ec:18:6c:dd:ce:82:63:d8:a2:54:ef:ca:0e:
69:0c:22:b9:2b:02:ae:40:96:e0:29:b9:4a:30:da:f6:74:58:
19:4d:4c:1a:ac:63:39:9b:3a:57:7c:16:ce:1c:ed:13:68:59:
c7:e9:6b:c0:01:70:2c:10:55:4e:08:1f:5a:5b:e6:11:a6:97:
c2:68:60:88:b3:4c:e4:7a:3e:e7:d3:91:27:46:56:9a:ce:bc:
e4:f7:2a:34:08:49:f0:68:d3:88:f0:63:d4:26:d5:ba:b2:50:
49:a7:d5:18:fc:8e:33:bf:d6:0a:76:92:88:fb:b1:27:24:c3:
62:ac:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:50:29 2024 by rpki-client on console-ams.rpki-client.org