Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7z6j5ovlIQHmUZX6cIQJVc858dU.cer
File: 7z6j5ovlIQHmUZX6cIQJVc858dU.cer (raw, json)
Hash identifier: gtssofKfEGW2y7+ybJ+/VLNQzM7ihW3A32s7LqnwO0o=
Subject key identifier: EF:3E:A3:E6:8B:E5:21:01:E6:51:95:FA:70:84:09:55:CF:39:F1:D5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: B2FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 24 May 2024 02:26:12 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
IP: 2400:ee00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Jun 2024 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45820 (0xb2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: May 24 02:26:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF3EA3E68BE52101E65195FA70840955CF39F1D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:1f:61:b3:e4:49:92:44:b1:d3:8e:c6:cd:
f9:bc:a3:8d:b8:ba:14:b3:94:8f:1d:55:bb:ff:fb:
18:16:b1:06:9a:5d:65:c4:53:a4:f3:99:fa:57:89:
7d:f6:91:48:d7:c4:d6:96:78:fc:63:4d:fb:63:d1:
76:ab:a6:08:79:8b:cd:95:87:fc:93:0a:c3:4b:44:
80:88:5c:5b:c5:dd:68:f6:d5:05:84:0c:04:46:32:
6d:42:8f:fe:ab:91:79:01:88:4e:23:97:e5:c5:76:
3d:09:21:9f:db:67:51:41:e9:9b:32:ff:14:42:b5:
23:af:41:8c:63:ca:82:87:89:71:2d:7e:0c:f6:47:
78:6e:1e:61:2a:e6:ad:16:ef:e9:24:eb:26:91:36:
c4:68:93:0b:b8:19:34:b3:74:3c:61:82:36:a6:a5:
f9:1b:fc:0c:98:cb:b4:76:5f:37:70:dc:a9:f3:5d:
4c:d8:36:87:95:0e:d4:67:a1:a8:69:30:4d:06:c3:
4b:75:dd:46:9a:fb:da:09:b1:28:fc:08:58:4f:f1:
79:9d:59:4d:87:12:ae:2d:79:fe:ba:cc:af:55:43:
93:a2:16:a7:05:13:73:e5:fa:d5:ba:43:a1:12:7f:
0d:08:f1:92:3b:0f:8b:18:6d:ed:a7:86:f1:a3:5a:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3E:A3:E6:8B:E5:21:01:E6:51:95:FA:70:84:09:55:CF:39:F1:D5
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
IPv6:
2400:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
14:42:47:e9:4a:ab:23:3b:d1:3b:5f:60:f0:c9:23:58:3f:92:
7b:26:f3:88:59:59:8c:82:49:18:30:cd:b0:05:33:07:67:d7:
a8:02:56:fc:b1:77:6c:aa:15:a0:04:5a:c3:07:bf:2a:c2:6a:
ff:ba:92:8d:fa:3c:af:58:31:dd:dc:b6:e7:e6:c9:63:38:6e:
00:33:52:ff:a7:89:ef:bf:10:c8:2d:62:dc:89:6c:26:6e:6b:
3c:7a:8f:10:9c:64:ea:e9:fc:fb:b9:47:58:67:c9:73:c6:6a:
f1:8c:4d:f6:21:1d:6d:13:b0:39:bb:7c:01:42:3f:cb:94:cd:
9e:fb:0b:e0:ea:f2:c1:ae:3f:91:0f:56:ed:84:42:5e:9c:8a:
74:e3:f7:c2:fa:38:8e:7a:84:2a:10:01:83:a4:ac:fe:3b:db:
22:5d:90:ed:c0:62:d1:08:15:eb:ee:2b:28:ca:88:55:8d:a6:
c9:11:f1:f4:d3:41:b4:4f:5c:14:ca:2d:b0:75:28:86:dd:ca:
2e:cc:ff:f0:62:b5:54:c9:5f:69:55:c3:ee:3a:59:26:0f:c6:
5d:56:c3:56:7a:13:5d:93:74:52:35:c7:9b:3c:42:73:0e:51:
70:a2:a1:16:55:13:20:dc:22:0a:11:43:ba:51:13:90:06:dc:
2a:e7:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:30:39 2024 by rpki-client on console-fra.rpki-client.org