Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.cer
File: 0yS7P-XBWi4EKmMuWiNZ0EjwTEI.cer (raw, json)
Hash identifier: /jOd1/urj4KD9NLTjL4J7+FPSHj2rNbP7/GxlSzJ7tM=
Subject key identifier: D3:24:BB:3F:E5:C1:5A:2E:04:2A:63:2E:5A:23:59:D0:48:F0:4C:42
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BBED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:53:21 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 43.254.224.0/22
IP: 103.231.16.0/22
IP: 103.242.168.0/22
IP: 203.19.147.0/24
IP: 203.80.129.0/24
IP: 203.89.133.0/24
IP: 203.89.144.0/24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48109 (0xbbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:53:21 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D324BB3FE5C15A2E042A632E5A2359D048F04C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:0e:91:d4:3c:82:24:fd:4d:44:af:90:bf:
71:41:5f:e6:10:dd:69:b0:33:65:e9:f4:49:1f:eb:
44:09:11:b9:59:d5:44:ba:4d:e7:59:80:a4:a6:3f:
77:49:a3:7c:d4:73:40:fe:10:35:2d:66:cf:48:c7:
f0:45:48:de:0f:58:52:a1:cb:d0:f6:9b:6d:ea:32:
c8:10:fb:93:47:0f:e0:e6:6d:39:3b:c5:82:a5:66:
6d:52:0a:09:4f:0b:13:5c:11:95:55:f3:1e:5a:1a:
85:1f:24:6f:3e:a5:04:76:62:6f:d8:33:bc:8c:28:
3c:83:c4:d4:d7:d2:63:70:53:20:0b:02:48:e0:18:
51:9a:db:9b:43:e5:6f:07:e0:ac:63:0a:cf:7a:dc:
19:13:14:27:2a:ad:4b:bd:46:f8:d0:f9:36:83:bb:
87:7e:4f:c0:2e:f4:a5:98:7d:60:43:fc:7e:73:04:
1b:dd:02:88:db:d0:ef:85:d2:7a:d7:48:07:1c:10:
73:cc:c3:b6:13:f5:44:00:f9:cc:e6:9d:6f:4f:67:
b0:7f:f3:b9:c0:51:8c:1e:43:fb:7a:d6:07:a9:0b:
78:38:f5:2e:d0:a0:7a:c7:f6:72:1c:58:42:11:95:
99:e2:f8:81:e0:3a:84:b9:de:20:d7:57:df:71:76:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:BB:3F:E5:C1:5A:2E:04:2A:63:2E:5A:23:59:D0:48:F0:4C:42
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/645/0yS7P-XBWi4EKmMuWiNZ0EjwTEI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.224.0/22
103.231.16.0/22
103.242.168.0/22
203.19.147.0/24
203.80.129.0/24
203.89.133.0/24
203.89.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8d:f4:26:a9:c7:e5:12:0b:3f:e9:c4:21:0a:21:e6:d3:a5:
e7:53:f6:e6:ad:80:de:38:65:99:a6:4e:7c:5d:ac:40:c2:e7:
19:88:83:d2:8f:64:36:34:f3:c6:94:2d:44:a2:1e:09:b6:1e:
12:d1:d9:01:c3:b8:05:44:de:11:98:34:d0:cb:6f:fc:0f:ad:
73:4e:fc:52:77:f9:d8:48:3a:6c:78:63:04:96:59:39:71:95:
5f:6b:45:3a:57:55:a4:23:5e:e5:1a:aa:6c:8b:1b:34:7f:11:
d5:3e:71:31:b3:6f:6a:6f:57:9d:11:22:aa:a1:c4:0b:9f:b7:
76:d1:08:8d:32:72:5b:bd:b6:89:12:2f:06:86:04:7d:ce:f9:
f0:aa:35:b8:c9:c2:38:0c:20:de:ed:56:cc:f6:b7:ef:7e:7e:
1f:a9:e8:58:99:93:3a:68:76:80:90:04:57:68:e7:81:c1:91:
3f:1f:c2:0b:d5:e8:9d:09:0a:cb:1d:59:0e:94:0e:d7:7b:48:
de:f9:7f:bc:a9:0f:ec:4e:d1:28:94:e0:51:8c:d1:15:aa:55:
53:cb:33:51:f4:e1:8a:c6:17:4c:7a:e6:34:fd:45:41:4c:68:
44:c1:7f:64:72:ef:9c:0d:c0:e5:4e:ce:91:9e:17:2f:04:ca:
43:f0:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:22 2024 by rpki-client on console-ams.rpki-client.org