Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
File: 1xHsDTeBWKRHb-bqfXClSpUZWhE.cer (raw, json)
Hash identifier: +lUKkIzXzah0h41AXiD3vlllTKmc3LF4fRWfBYiC4eM=
Subject key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 605F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 07 Jan 2025 04:18:51 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 40.72.0.0/15
IP: 40.125.128.0/17
IP: 40.126.64.0/18
IP: 40.162.0.0/16
IP: 47.92.0.0 -- 47.127.255.255
IP: 52.80.0.0/14
IP: 52.130.0.0/15
IP: 54.222.0.0/15
IP: 68.79.0.0/18
IP: 69.230.192.0/18
IP: 69.231.128.0/18
IP: 69.234.192.0/18
IP: 69.235.128.0/18
IP: 71.131.192.0 -- 71.132.63.255
IP: 71.136.64.0/18
IP: 71.137.0.0/18
IP: 139.9.0.0/16
IP: 139.129.0.0/16
IP: 139.148.0.0/16
IP: 139.155.0.0/16
IP: 139.159.0.0/16
IP: 139.176.0.0/16
IP: 139.183.0.0/16
IP: 139.186.0.0/16
IP: 139.196.0.0/14
IP: 139.217.0.0/16
IP: 139.219.0.0 -- 139.221.255.255
IP: 139.224.0.0/16
IP: 140.143.0.0/16
IP: 140.179.0.0/16
IP: 140.205.0.0/16
IP: 140.210.0.0/16
IP: 143.64.0.0/16
IP: 152.104.128.0/17
IP: 157.10.34.0 -- 157.10.37.255
IP: 157.10.112.0/23
IP: 157.10.130.0/23
IP: 157.10.218.0 -- 157.10.221.255
IP: 157.10.246.0/23
IP: 157.15.74.0/23
IP: 157.15.94.0/23
IP: 157.15.100.0 -- 157.15.105.255
IP: 157.20.136.0/23
IP: 157.20.194.0/23
IP: 157.20.246.0/23
IP: 157.66.42.0/23
IP: 157.66.70.0/23
IP: 157.66.88.0/21
IP: 157.66.164.0/23
IP: 157.66.244.0/23
IP: 158.60.0.0/16
IP: 158.140.252.0/22
IP: 159.27.0.0/16
IP: 160.19.76.0/23
IP: 160.19.82.0/23
IP: 160.20.16.0/22
IP: 160.20.130.0/23
IP: 160.22.58.0/23
IP: 160.22.82.0/23
IP: 160.22.148.0/23
IP: 160.22.188.0/23
IP: 160.22.224.0/23
IP: 160.22.230.0/23
IP: 160.22.244.0/22
IP: 160.25.10.0 -- 160.25.13.255
IP: 160.25.194.0/23
IP: 160.30.40.0/23
IP: 160.30.150.0/23
IP: 160.30.194.0 -- 160.30.199.255
IP: 160.30.230.0/23
IP: 160.187.223.0/24
IP: 160.187.252.0/22
IP: 160.191.0.0/23
IP: 160.191.104.0/23
IP: 160.191.110.0/23
IP: 160.250.14.0 -- 160.250.19.255
IP: 160.250.84.0/23
IP: 160.250.90.0/23
IP: 160.250.102.0 -- 160.250.105.255
IP: 160.250.160.0/23
IP: 160.250.170.0/23
IP: 160.250.214.0/23
IP: 160.250.252.0/23
IP: 161.189.0.0/16
IP: 161.207.0.0/16
IP: 161.248.20.0/23
IP: 161.248.42.0/23
IP: 161.248.84.0/23
IP: 161.248.92.0/23
IP: 161.248.108.0 -- 161.248.113.255
IP: 167.189.0.0/16
IP: 167.220.244.0/22
IP: 168.160.0.0/16
IP: 170.179.0.0/16
IP: 192.55.46.0/23
IP: 192.55.68.0/22
IP: 192.102.204.0/22
IP: 198.175.100.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24671 (0x605f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 7 04:18:51 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A9162E3D0000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:1d:78:af:13:1a:bf:c7:cb:47:5f:8d:f7:
22:f6:3a:87:d5:56:55:30:cf:3d:cb:91:56:19:a3:
e6:19:32:c4:14:4b:76:9d:a3:5c:f5:f2:89:08:fb:
50:5c:8a:cb:2e:bb:f9:58:be:7b:05:a7:4f:d9:b3:
cb:39:e7:fa:ea:ee:d0:23:3d:02:b6:0c:24:fe:e6:
4d:53:6f:cb:bc:16:02:c2:ca:dd:37:f6:89:7c:9d:
99:33:cc:a9:30:4c:75:0a:12:6b:62:46:23:da:09:
1c:2f:6d:de:70:51:cb:41:46:4d:5f:d8:a6:aa:23:
6a:df:4f:00:92:3e:33:81:4f:1e:82:53:33:10:c8:
2f:6a:0e:98:07:05:85:7b:f6:12:35:db:75:a5:45:
43:25:c3:0d:39:42:93:21:4a:17:4e:f1:fb:80:16:
73:ec:f6:a1:c5:f6:4a:6b:73:b3:c3:5c:dc:01:b0:
68:12:45:65:7e:55:7e:fb:ba:7b:45:ae:9a:56:10:
2a:bd:1f:66:58:e1:da:22:53:78:ed:af:78:eb:92:
48:3e:82:9e:6f:a7:17:5e:96:f6:11:31:5e:06:d7:
60:54:15:4b:a8:ee:b9:e8:c8:39:65:54:62:7e:cd:
28:95:1d:3d:10:9b:7e:3a:b8:86:49:5f:e8:20:f8:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
40.162.0.0/16
47.92.0.0-47.127.255.255
52.80.0.0/14
52.130.0.0/15
54.222.0.0/15
68.79.0.0/18
69.230.192.0/18
69.231.128.0/18
69.234.192.0/18
69.235.128.0/18
71.131.192.0-71.132.63.255
71.136.64.0/18
71.137.0.0/18
139.9.0.0/16
139.129.0.0/16
139.148.0.0/16
139.155.0.0/16
139.159.0.0/16
139.176.0.0/16
139.183.0.0/16
139.186.0.0/16
139.196.0.0/14
139.217.0.0/16
139.219.0.0-139.221.255.255
139.224.0.0/16
140.143.0.0/16
140.179.0.0/16
140.205.0.0/16
140.210.0.0/16
143.64.0.0/16
152.104.128.0/17
157.10.34.0-157.10.37.255
157.10.112.0/23
157.10.130.0/23
157.10.218.0-157.10.221.255
157.10.246.0/23
157.15.74.0/23
157.15.94.0/23
157.15.100.0-157.15.105.255
157.20.136.0/23
157.20.194.0/23
157.20.246.0/23
157.66.42.0/23
157.66.70.0/23
157.66.88.0/21
157.66.164.0/23
157.66.244.0/23
158.60.0.0/16
158.140.252.0/22
159.27.0.0/16
160.19.76.0/23
160.19.82.0/23
160.20.16.0/22
160.20.130.0/23
160.22.58.0/23
160.22.82.0/23
160.22.148.0/23
160.22.188.0/23
160.22.224.0/23
160.22.230.0/23
160.22.244.0/22
160.25.10.0-160.25.13.255
160.25.194.0/23
160.30.40.0/23
160.30.150.0/23
160.30.194.0-160.30.199.255
160.30.230.0/23
160.187.223.0/24
160.187.252.0/22
160.191.0.0/23
160.191.104.0/23
160.191.110.0/23
160.250.14.0-160.250.19.255
160.250.84.0/23
160.250.90.0/23
160.250.102.0-160.250.105.255
160.250.160.0/23
160.250.170.0/23
160.250.214.0/23
160.250.252.0/23
161.189.0.0/16
161.207.0.0/16
161.248.20.0/23
161.248.42.0/23
161.248.84.0/23
161.248.92.0/23
161.248.108.0-161.248.113.255
167.189.0.0/16
167.220.244.0/22
168.160.0.0/16
170.179.0.0/16
192.55.46.0/23
192.55.68.0/22
192.102.204.0/22
198.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
75:f1:73:7d:c8:85:0b:54:71:64:8a:0a:77:60:89:85:dc:7f:
fe:4d:fd:2a:74:2f:5f:3d:55:85:d5:ba:01:d3:7e:a9:62:de:
7a:89:67:85:3d:b5:f5:63:4a:39:7f:89:49:3e:b5:39:34:2a:
a7:1b:28:c9:c9:46:32:7f:80:35:a6:67:56:02:79:ef:eb:17:
a4:e9:23:75:23:4e:65:5f:e4:b5:81:1d:e7:b7:5d:90:e6:18:
ce:f4:d7:b2:6c:54:b3:d7:84:e9:28:d7:cc:f9:99:7c:b1:20:
1b:b2:57:f1:16:1f:1b:ff:56:eb:ac:70:b3:88:79:d0:ef:62:
d0:d8:ff:9a:62:9b:58:47:47:c9:7b:2f:8a:d9:1f:e6:59:14:
07:6e:a3:52:a5:b6:d0:0f:fd:a3:85:6b:69:a2:1d:96:75:67:
f7:dd:73:55:dc:47:29:7a:86:c0:8f:4b:e3:3e:4b:f3:ee:39:
f2:f7:62:15:b8:2c:96:50:87:4d:af:f2:83:75:ed:8e:29:ad:
56:40:bb:9f:ec:14:37:a0:27:7d:33:6c:6c:a8:57:7d:8d:26:
a3:03:a8:95:08:be:d4:25:54:9d:90:2f:eb:8f:28:61:8e:3b:
3e:27:7f:0c:31:24:95:11:94:4f:b6:cc:6e:49:06:ba:56:c6:
b0:97:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:52:12 2025 by rpki-client