Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
File: 5W2kwnXzzMktCGICoe2neD8MPQ0.cer (raw, json)
Hash identifier: TTYo3iDpKJgrM6B2k56G8OnnTFfLdF9Q1/XV+4ZVfSQ=
Subject key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A1F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 11 Aug 2023 07:43:19 +0000
Certificate not after: Sat 10 Aug 2024 07:41:13 +0000
Subordinate resources: AS: 58854
IP: 27.0.132.0/22
IP: 43.242.72.0/22
IP: 45.119.60.0/22
IP: 45.126.120.0/22
IP: 103.27.4.0/22
IP: 103.59.112.0/22
IP: 103.64.156.0/22
IP: 103.64.212.0/22
IP: 103.73.136.0/21
IP: 103.81.8.0/22
IP: 103.81.16.0/21
IP: 103.236.252.0/22
IP: 150.242.96.0/22
IP: 211.155.96.0 -- 211.155.115.255
IP: 2400:60c0::/32
IP: 2400:73c0::/32
IP: 2400:74c0::/32
IP: 2402:d980::/32
IP: 2407:7d00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 May 2024 05:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41463 (0xa1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 11 07:43:19 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:7b:ed:1d:6d:aa:33:9a:67:6b:9c:da:3a:
bb:aa:e9:0e:c7:65:89:73:bb:fa:a9:19:f2:f2:ff:
37:40:7f:77:3e:c0:de:3b:ac:3b:aa:b6:49:ca:73:
93:7a:26:d1:21:75:6a:00:a8:b0:06:28:ff:f5:a4:
c7:a1:0d:65:cf:62:ed:06:0b:73:e0:9b:85:a1:1b:
e1:0d:c9:66:22:99:15:0a:cd:a0:5c:af:bb:79:ba:
18:1e:92:fa:45:d9:ca:93:4f:c5:e6:6e:4d:3c:12:
df:4f:a5:44:de:44:bd:da:16:06:60:8d:1f:4d:8c:
11:39:e6:4d:97:56:8d:75:70:b7:e8:d4:13:f7:0c:
f3:e0:83:fb:ab:e4:5a:55:0a:d8:e0:3c:4d:7a:5e:
d4:09:43:d1:af:64:7e:da:e5:d9:53:8d:f6:e9:59:
f8:17:d4:f6:61:6c:1b:5a:59:e5:c9:e1:dc:56:89:
71:9e:74:6c:7d:f7:85:9f:de:d5:de:c8:f3:41:8c:
dc:5b:1a:43:bc:00:ba:6d:1a:6c:2b:ee:7d:cb:9c:
c6:ca:84:df:18:47:30:87:07:45:ed:cd:57:06:60:
e2:27:6d:d5:ba:72:f7:59:90:cb:de:86:3f:ed:9a:
41:12:3a:4a:c7:1f:7e:dd:7b:d7:41:9a:23:1b:ff:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58854
sbgp-ipAddrBlock: critical
IPv4:
27.0.132.0/22
43.242.72.0/22
45.119.60.0/22
45.126.120.0/22
103.27.4.0/22
103.59.112.0/22
103.64.156.0/22
103.64.212.0/22
103.73.136.0/21
103.81.8.0/22
103.81.16.0/21
103.236.252.0/22
150.242.96.0/22
211.155.96.0-211.155.115.255
IPv6:
2400:60c0::/32
2400:73c0::/32
2400:74c0::/32
2402:d980::/32
2407:7d00::/32
Signature Algorithm: sha256WithRSAEncryption
a8:08:af:4a:3e:13:42:9e:6c:aa:35:0d:37:65:0b:c7:74:3b:
be:cd:71:40:b5:67:45:2b:c5:87:e4:6a:23:75:3d:7c:19:20:
b4:bc:99:a5:3d:18:a3:a7:4a:75:17:bb:d4:26:8c:63:3e:b6:
3e:02:f6:b3:2c:2d:a9:7e:26:26:ba:b8:eb:c8:a2:8d:46:b8:
20:a0:de:ad:1d:39:00:33:03:86:4d:cb:dc:e2:9c:a9:eb:62:
26:6b:d4:26:f8:f2:53:11:60:e5:ed:63:d6:56:17:96:21:0d:
e2:53:bd:6b:ce:c5:d9:01:fd:78:37:25:4b:69:c3:84:fd:00:
25:c7:99:82:80:c7:04:d8:30:a0:fe:1c:ee:e4:8e:26:6f:2f:
56:58:52:38:fa:3c:56:95:db:59:58:ed:ed:e1:98:99:e7:1f:
5e:c5:e0:90:77:8e:ca:ee:5d:0d:18:7d:4d:7a:7b:04:56:45:
f4:07:9e:f3:95:10:66:e7:0a:f0:5d:70:48:e7:e0:83:88:f8:
89:28:28:aa:a4:99:b5:63:b3:fd:ed:cf:ba:2d:4d:70:ec:a3:
fd:d7:a9:14:5c:a7:12:df:22:9f:c2:4c:47:1a:7a:bb:5a:f2:
7c:ce:ba:85:ae:c5:cb:33:2d:8d:d8:f1:c2:9c:43:91:ce:8c:
93:f9:bc:2e
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgIDAKH3MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzA4MTEwNzQzMTlaFw0yNDA4MTAwNzQxMTNaMDMx
MTAvBgNVBAMTKEU1NkRBNEMyNzVGM0NDQzkyRDA4NjIwMkExRURBNzc4M0YwQzNE
MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVnvtHW2qM5pna5za
Oruq6Q7HZYlzu/qpGfLy/zdAf3c+wN47rDuqtknKc5N6JtEhdWoAqLAGKP/1pMeh
DWXPYu0GC3Pgm4WhG+ENyWYimRUKzaBcr7t5uhgekvpF2cqTT8Xmbk08Et9PpUTe
RL3aFgZgjR9NjBE55k2XVo11cLfo1BP3DPPgg/ur5FpVCtjgPE16XtQJQ9GvZH7a
5dlTjfbpWfgX1PZhbBtaWeXJ4dxWiXGedGx994Wf3tXeyPNBjNxbGkO8ALptGmwr
7n3LnMbKhN8YRzCHB0XtzVcGYOInbdW6cvdZkMvehj/tmkESOkrHH37de9dBmiMb
/+r/AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU5W2kwnXzzMktCGICoe2neD8MPQ0w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYy
MS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC82MjEvNVcya3duWHp6TWt0Q0dJQ29lMm5lRDhNUFEwLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5eYwgaIGCCsGAQUFBwEHAQH/BIGSMIGP
MGIEAgABMFwDBAIbAIQDBAIr8kgDBAItdzwDBAItfngDBAJnGwQDBAJnO3ADBAJn
QJwDBAJnQNQDBANnSYgDBAJnUQgDBANnURADBAJn7PwDBAKW8mAwDAMEBdObYAME
AtObcDApBAIAAjAjAwUAJABgwAMFACQAc8ADBQAkAHTAAwUAJALZgAMFACQHfQAw
DQYJKoZIhvcNAQELBQADggEBAKgIr0o+E0KebKo1DTdlC8d0O77NcUC1Z0UrxYfk
aiN1PXwZILS8maU9GKOnSnUXu9QmjGM+tj4C9rMsLal+Jia6uOvIoo1GuCCg3q0d
OQAzA4ZNy9zinKnrYiZr1Cb48lMRYOXtY9ZWF5YhDeJTvWvOxdkB/Xg3JUtpw4T9
ACXHmYKAxwTYMKD+HO7kjiZvL1ZYUjj6PFaV21lY7e3hmJnnH17F4JB3jsruXQ0Y
fU16ewRWRfQHnvOVEGbnCvBdcEjn4IOI+IkoKKqkmbVjs/3tz7otTXDso/3XqRRc
pxLfIp/CTEcaerta8nzOuoWuxcszLY3Y8cKcQ5HOjJP5vC4=
-----END CERTIFICATE-----
Generated at Mon May 20 00:17:33 2024 by rpki-client on console-fra.rpki-client.org