Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2GueAukE5bR2WU2yt5eONcp8HW4.cer
File: 2GueAukE5bR2WU2yt5eONcp8HW4.cer (raw, json)
Hash identifier: THxDyKAPysXZB4BgQfo1Nz5FVDanQx0u6kYves9R/E0=
Subject key identifier: D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C3C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 03 Jan 2025 06:34:01 +0000
Certificate not after: Sat 03 Jan 2026 02:04:14 +0000
Subordinate resources: AS: 151265
IP: 2401:e620::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50116 (0xc3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Jan 3 06:34:01 2025 GMT
Not After : Jan 3 02:04:14 2026 GMT
Subject: CN=D86B9E02E904E5B476594DB2B7978E35CA7C1D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:18:be:33:4b:37:da:b1:66:21:23:eb:72:
3e:77:a3:ee:5a:64:d4:2e:d1:16:e4:93:40:e4:72:
e3:18:ae:59:41:ef:9a:a0:3b:7f:f8:49:92:03:45:
12:f4:13:69:1d:a6:df:2d:0e:10:22:c8:df:93:32:
1e:31:3f:52:75:b2:6c:5a:cf:3b:3b:8c:86:32:30:
9f:82:7b:bd:19:33:46:75:2d:56:ce:51:29:c5:b6:
ac:6d:63:62:28:b4:17:e9:37:bb:de:ee:e6:b6:dd:
ad:9b:0d:1e:cd:be:b1:52:8d:0f:a1:3f:d7:69:5a:
d8:0b:79:1b:9a:17:a8:e2:0a:b6:5e:5c:04:29:94:
f8:34:24:60:fa:54:a0:61:50:c7:4c:1e:9a:d1:17:
95:e9:51:be:8b:89:ab:99:a5:12:c1:9d:14:92:4b:
00:76:24:e0:de:07:c7:72:47:00:0c:eb:80:dc:83:
2b:e6:8a:a0:cf:5b:b3:df:d9:24:05:a6:c4:a1:ad:
3f:d4:b0:88:69:b7:97:7d:36:2b:7d:bc:27:0c:1d:
df:bc:1f:94:78:c6:80:d2:e8:ab:ed:1b:14:55:6f:
9f:4f:aa:a1:06:ee:0c:38:3a:b5:a5:01:14:c8:8f:
26:bd:7c:e3:cc:c1:ad:31:8a:3b:cb:e7:6e:a2:c9:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:9E:02:E9:04:E5:B4:76:59:4D:B2:B7:97:8E:35:CA:7C:1D:6E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3346/2GueAukE5bR2WU2yt5eONcp8HW4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151265
sbgp-ipAddrBlock: critical
IPv6:
2401:e620::/32
Signature Algorithm: sha256WithRSAEncryption
a0:33:07:b0:5b:4b:ec:5f:82:76:7f:4d:2a:e9:49:07:eb:05:
14:e6:26:52:ae:fd:65:f3:1f:4d:56:92:23:48:a1:b9:f5:01:
e0:e2:fe:0d:f9:17:7d:2a:8d:e9:03:51:71:35:11:c3:ea:f4:
a7:45:a1:45:5c:37:cb:86:67:de:e2:8e:d1:0a:9b:47:d6:5e:
3b:ef:05:f4:3c:34:e2:f7:47:a8:b8:af:6b:cb:88:7c:52:f1:
99:19:60:ad:4e:cc:ec:52:63:3b:aa:97:04:f7:6c:90:7b:91:
2f:14:be:87:04:b5:d6:50:c3:e2:11:d3:1c:5b:9c:f7:6f:79:
46:80:d2:e6:87:72:cc:47:a8:9f:e5:3a:89:ae:df:bf:c3:9c:
ac:b2:0f:4f:67:d2:74:76:31:37:1f:10:8e:9d:fb:ae:52:52:
83:e3:0d:ce:16:4b:64:98:bb:ed:98:75:ac:8b:04:a7:6a:5e:
b5:8d:a8:03:a3:5f:d2:50:b9:59:3f:50:cc:3c:c6:22:e7:78:
51:e7:ec:77:6b:ce:fa:6e:e9:56:6e:57:cf:3c:16:4f:36:e6:
4b:dd:7e:a1:49:08:a0:26:d3:3d:83:7c:35:c5:65:90:bd:46:
2d:25:43:6a:6f:7a:12:c8:c3:d7:78:ad:41:0d:fe:02:99:29:
75:c2:da:29
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIDAMPEMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAxMDMwNjM0MDFaFw0yNjAxMDMwMjA0MTRaMDMx
MTAvBgNVBAMTKEQ4NkI5RTAyRTkwNEU1QjQ3NjU5NERCMkI3OTc4RTM1Q0E3QzFE
NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9Ri+M0s32rFmISPr
cj53o+5aZNQu0Rbkk0DkcuMYrllB75qgO3/4SZIDRRL0E2kdpt8tDhAiyN+TMh4x
P1J1smxazzs7jIYyMJ+Ce70ZM0Z1LVbOUSnFtqxtY2IotBfpN7ve7ua23a2bDR7N
vrFSjQ+hP9dpWtgLeRuaF6jiCrZeXAQplPg0JGD6VKBhUMdMHprRF5XpUb6LiauZ
pRLBnRSSSwB2JODeB8dyRwAM64DcgyvmiqDPW7Pf2SQFpsShrT/UsIhpt5d9Nit9
vCcMHd+8H5R4xoDS6KvtGxRVb59PqqEG7gw4OrWlARTIjya9fOPMwa0xijvL526i
yZarAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQU2GueAukE5bR2WU2yt5eONcp8HW4w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz
NDYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzM0Ni8yR3VlQXVrRTViUjJXVTJ5dDVlT05jcDhIVzQubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO4TAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQB5iAwDQYJKoZIhvcNAQELBQADggEBAKAzB7BbS+xfgnZ/TSrp
SQfrBRTmJlKu/WXzH01WkiNIobn1AeDi/g35F30qjekDUXE1EcPq9KdFoUVcN8uG
Z97ijtEKm0fWXjvvBfQ8NOL3R6i4r2vLiHxS8ZkZYK1OzOxSYzuqlwT3bJB7kS8U
vocEtdZQw+IR0xxbnPdveUaA0uaHcsxHqJ/lOomu37/DnKyyD09n0nR2MTcfEI6d
+65SUoPjDc4WS2SYu+2YdayLBKdqXrWNqAOjX9JQuVk/UMw8xiLneFHn7Hdrzvpu
6VZuV888Fk825kvdfqFJCKAm0z2DfDXFZZC9Ri0lQ2pvehLIw9d4rUEN/gKZKXXC
2ik=
-----END CERTIFICATE-----
Generated at Sat Feb 22 14:04:04 2025 by rpki-client