Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
File: 5W2kwnXzzMktCGICoe2neD8MPQ0.cer (raw, json)
Hash identifier: I0CKk6nwdlmbk2fm1+6/2cESJ8VHuG3n/Vcd5xymdcs=
Subject key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:56:53 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 58854
IP: 27.0.132.0/22
IP: 43.242.72.0/22
IP: 45.119.60.0/22
IP: 45.126.120.0/22
IP: 103.27.4.0/22
IP: 103.59.112.0/22
IP: 103.64.156.0/22
IP: 103.64.212.0/22
IP: 103.73.136.0/21
IP: 103.81.8.0/22
IP: 103.81.16.0/21
IP: 103.105.60.0/22
IP: 103.236.252.0/22
IP: 150.242.96.0/22
IP: 211.155.96.0/19
IP: 2400:60c0::/32
IP: 2400:73c0::/32
IP: 2400:74c0::/32
IP: 2402:2bc0::/32
IP: 2402:d980::/32
IP: 2407:7d00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48287 (0xbc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:56:53 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:7b:ed:1d:6d:aa:33:9a:67:6b:9c:da:3a:
bb:aa:e9:0e:c7:65:89:73:bb:fa:a9:19:f2:f2:ff:
37:40:7f:77:3e:c0:de:3b:ac:3b:aa:b6:49:ca:73:
93:7a:26:d1:21:75:6a:00:a8:b0:06:28:ff:f5:a4:
c7:a1:0d:65:cf:62:ed:06:0b:73:e0:9b:85:a1:1b:
e1:0d:c9:66:22:99:15:0a:cd:a0:5c:af:bb:79:ba:
18:1e:92:fa:45:d9:ca:93:4f:c5:e6:6e:4d:3c:12:
df:4f:a5:44:de:44:bd:da:16:06:60:8d:1f:4d:8c:
11:39:e6:4d:97:56:8d:75:70:b7:e8:d4:13:f7:0c:
f3:e0:83:fb:ab:e4:5a:55:0a:d8:e0:3c:4d:7a:5e:
d4:09:43:d1:af:64:7e:da:e5:d9:53:8d:f6:e9:59:
f8:17:d4:f6:61:6c:1b:5a:59:e5:c9:e1:dc:56:89:
71:9e:74:6c:7d:f7:85:9f:de:d5:de:c8:f3:41:8c:
dc:5b:1a:43:bc:00:ba:6d:1a:6c:2b:ee:7d:cb:9c:
c6:ca:84:df:18:47:30:87:07:45:ed:cd:57:06:60:
e2:27:6d:d5:ba:72:f7:59:90:cb:de:86:3f:ed:9a:
41:12:3a:4a:c7:1f:7e:dd:7b:d7:41:9a:23:1b:ff:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58854
sbgp-ipAddrBlock: critical
IPv4:
27.0.132.0/22
43.242.72.0/22
45.119.60.0/22
45.126.120.0/22
103.27.4.0/22
103.59.112.0/22
103.64.156.0/22
103.64.212.0/22
103.73.136.0/21
103.81.8.0/22
103.81.16.0/21
103.105.60.0/22
103.236.252.0/22
150.242.96.0/22
211.155.96.0/19
IPv6:
2400:60c0::/32
2400:73c0::/32
2400:74c0::/32
2402:2bc0::/32
2402:d980::/32
2407:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
8c:65:09:6f:37:b2:fc:7f:74:73:d3:b9:0d:da:64:0b:95:ac:
b3:bb:51:06:7c:e2:22:7c:39:07:ec:ca:7a:ab:b7:56:76:50:
45:eb:66:bb:e1:1f:9c:cf:1a:58:3c:87:86:f0:6f:66:7c:56:
1b:7d:3e:04:54:40:26:0c:9a:0d:de:31:95:52:75:a1:27:dc:
c2:f8:b0:ed:e5:01:9c:84:29:d1:8c:10:bb:b1:84:07:8a:11:
35:91:db:54:cd:9b:8d:f4:27:af:94:29:c3:96:4a:73:71:7b:
93:89:3c:df:26:0c:33:e9:e9:73:11:6f:16:d8:73:0d:71:ce:
e4:5e:ef:16:98:e6:c6:3b:fc:0b:14:86:e1:25:3a:6e:31:9e:
a3:d7:73:d8:33:13:fa:ff:a0:c4:6b:7f:c5:57:69:40:cf:74:
6e:32:2e:a4:32:f6:69:46:43:4e:f0:02:13:d1:93:43:4f:45:
2f:97:1d:e6:1d:d3:5c:da:ef:19:22:aa:58:4d:6b:97:a6:a1:
20:b3:fa:f3:63:be:3e:45:42:1e:50:fb:bd:88:21:5e:fa:34:
8a:52:cc:e7:e2:e2:12:a0:02:39:53:fe:d9:bc:70:36:1e:70:
82:95:e9:75:c8:e0:03:b3:52:ba:3e:8c:91:79:ff:b0:ec:70:
c9:05:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:25 2024 by rpki-client on console-ams.rpki-client.org