Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
File: 1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer (raw, json)
Hash identifier: dTc1HbeFQJlnZEPRe0UxR+MNfDOV45rUGkiQpC0kPs8=
Subject key identifier: D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AE33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:19:46 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 56005
IP: 103.22.188.0/22
IP: 163.53.56.0/22
IP: 2404:f00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44595 (0xae33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:19:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:46:1b:92:49:eb:69:50:ef:40:a6:b1:a9:c0:
18:bb:36:a2:bc:fa:9e:7b:22:5a:9b:59:60:74:77:
d7:cd:f3:9d:8e:c1:37:8a:69:35:82:b3:67:34:f6:
3e:3d:24:c8:0d:aa:8c:11:71:8e:c3:b0:d1:b9:ff:
12:8b:3e:8e:1a:9e:8e:bd:a9:07:e3:ff:e6:16:04:
20:f6:ad:a2:62:04:56:29:dc:27:de:46:94:dd:e5:
2f:a8:0e:26:d3:a0:a2:cc:be:d3:71:22:75:e0:0d:
45:dd:03:cb:36:df:24:08:03:08:f3:3b:ee:38:3e:
c3:cb:d0:7d:12:6f:9c:fa:34:aa:08:d9:f3:da:6e:
42:ec:8c:b4:0b:06:cb:99:4e:87:d7:ca:0b:cd:11:
a6:bd:ce:b5:d1:59:41:1b:29:5f:4a:9e:ff:6b:4e:
3f:84:0d:97:db:7c:b8:d7:3b:6c:16:98:67:23:0c:
42:d8:a7:83:4f:09:83:27:95:75:7a:86:cc:00:59:
71:67:65:70:1b:6f:dc:b2:28:91:d0:cd:d4:29:44:
17:30:59:cd:4b:21:46:e0:1e:e0:5d:f3:7d:68:45:
d8:ff:fa:c8:22:3d:e6:e4:64:61:94:06:8c:47:f9:
fb:43:62:6f:e4:05:44:a3:92:42:42:91:b9:c0:8a:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56005
sbgp-ipAddrBlock: critical
IPv4:
103.22.188.0/22
163.53.56.0/22
IPv6:
2404:f00::/32
Signature Algorithm: sha256WithRSAEncryption
49:e9:c7:dc:11:12:f3:1f:8a:6b:0e:2e:4a:51:1e:26:8f:3e:
01:8d:12:26:84:ca:d9:35:4a:ef:b5:be:1a:37:7b:8c:64:33:
dd:5e:4b:ff:65:12:fa:33:60:f2:71:49:8f:0a:aa:f6:68:37:
8a:72:cd:28:91:85:5b:7c:26:c5:a7:f1:5b:f1:e9:a5:e7:d2:
58:68:ef:3b:8d:1f:68:dc:c8:02:29:a9:fc:72:03:8e:e7:9a:
0c:17:b1:ca:b3:80:7f:df:e2:b3:ef:9c:98:b5:53:ea:55:14:
e0:c1:09:9d:b5:5e:3f:f5:c2:81:d5:79:18:74:0e:3a:7b:fd:
e0:0a:34:21:68:a4:ab:8a:a7:9b:3f:0d:22:93:44:24:41:7d:
ae:43:bf:c1:1c:82:92:b5:b4:89:14:2e:0e:57:3d:d9:85:8e:
b2:64:83:71:f2:70:99:28:4c:5c:54:c9:3b:6b:9e:ee:07:75:
af:3d:2c:2f:de:a2:ed:ca:6c:ae:de:e1:2a:00:94:b4:ec:93:
11:47:1c:bc:78:4e:14:3c:c5:75:e4:41:11:29:9e:b1:67:23:
ee:1c:4c:e8:7b:68:63:48:89:70:08:f6:2d:0f:48:58:57:97:
7e:d6:e6:f1:e8:dd:29:59:51:e8:46:0c:cc:24:9c:80:31:98:
21:9b:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:38:38 2024 by rpki-client on console-ams.rpki-client.org