Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
File:                     1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer (raw, json)
Hash identifier:          gPDk+qhWqbfDwUdBTieSTkXbFDzjZb1uhl6A0DAaKAA=
Subject key identifier:   D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       BBC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 27 Sep 2024 02:52:40 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    AS: 56005
                          IP: 103.22.188.0/22
                          IP: 163.53.56.0/22
                          IP: 2404:f00::/32

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48065 (0xbbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
        Validity
            Not Before: Sep 27 02:52:40 2024 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=D6DD0B467EE8D75B15146628C991AC3140558F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:46:1b:92:49:eb:69:50:ef:40:a6:b1:a9:c0:
                    18:bb:36:a2:bc:fa:9e:7b:22:5a:9b:59:60:74:77:
                    d7:cd:f3:9d:8e:c1:37:8a:69:35:82:b3:67:34:f6:
                    3e:3d:24:c8:0d:aa:8c:11:71:8e:c3:b0:d1:b9:ff:
                    12:8b:3e:8e:1a:9e:8e:bd:a9:07:e3:ff:e6:16:04:
                    20:f6:ad:a2:62:04:56:29:dc:27:de:46:94:dd:e5:
                    2f:a8:0e:26:d3:a0:a2:cc:be:d3:71:22:75:e0:0d:
                    45:dd:03:cb:36:df:24:08:03:08:f3:3b:ee:38:3e:
                    c3:cb:d0:7d:12:6f:9c:fa:34:aa:08:d9:f3:da:6e:
                    42:ec:8c:b4:0b:06:cb:99:4e:87:d7:ca:0b:cd:11:
                    a6:bd:ce:b5:d1:59:41:1b:29:5f:4a:9e:ff:6b:4e:
                    3f:84:0d:97:db:7c:b8:d7:3b:6c:16:98:67:23:0c:
                    42:d8:a7:83:4f:09:83:27:95:75:7a:86:cc:00:59:
                    71:67:65:70:1b:6f:dc:b2:28:91:d0:cd:d4:29:44:
                    17:30:59:cd:4b:21:46:e0:1e:e0:5d:f3:7d:68:45:
                    d8:ff:fa:c8:22:3d:e6:e4:64:61:94:06:8c:47:f9:
                    fb:43:62:6f:e4:05:44:a3:92:42:42:91:b9:c0:8a:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56005

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.188.0/22
                  163.53.56.0/22
                IPv6:
                  2404:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:63:55:e1:6e:20:2a:4f:bf:5b:67:3d:cc:ae:16:0a:5a:
         aa:5b:cd:5c:9b:37:c5:5f:f4:aa:9d:2f:56:f8:bd:18:45:a6:
         e1:f1:44:75:c9:ac:a8:77:e2:3f:8a:96:6e:2b:e3:49:cf:bc:
         c9:55:8f:ca:3a:7b:1c:5e:aa:fa:98:a7:bf:f8:e1:7c:6b:0a:
         fc:c2:48:ad:cf:e0:1a:3b:4b:50:b1:ae:28:65:b7:30:55:c3:
         db:ca:20:b1:cf:39:a3:41:9b:a7:85:01:cb:6a:bd:ba:24:7d:
         31:dc:14:9c:4c:74:32:9c:79:f1:b4:b2:01:30:26:3d:5d:47:
         95:9e:26:6a:35:b3:63:b2:cb:69:6b:8b:06:78:6f:8e:98:37:
         7d:d5:1e:a3:8f:f1:28:e2:44:bf:c0:02:0f:ce:ba:2a:ce:e4:
         45:23:b0:54:cf:d6:8a:c5:77:80:b9:c7:60:64:89:57:f7:f2:
         d2:94:da:39:10:62:28:48:8a:5f:87:dc:a1:71:83:6b:d2:ff:
         05:d3:1e:3b:ee:5c:c5:64:a9:0f:da:43:86:e7:ac:71:66:a7:
         a7:90:0b:64:81:0b:eb:69:10:97:59:2c:4b:84:87:6c:2d:79:
         53:b3:4c:1e:7e:b8:f6:42:12:8a:71:62:3e:38:ab:19:4c:df:
         f2:be:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:12 2024 by rpki-client on console-fra.rpki-client.org