Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.cer (raw, json)
Hash identifier: 7In9YwmO9ic1uow5NuNzmrXiDdMm8iuRSsXKxQ3TDHE=
Subject key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A8A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:24:32 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: AS: 63578
AS: 63708
IP: 43.247.88.0/22
IP: 43.255.84.0/22
IP: 43.255.212.0/22
IP: 45.65.24.0/21
IP: 103.210.160.0/22
IP: 103.210.172.0 -- 103.210.183.255
IP: 103.228.160.0/22
IP: 103.229.212.0/22
IP: 139.5.60.0/22
IP: 160.19.208.0/22
IP: 163.53.168.0/22
IP: 211.150.192.0/18
IP: 211.154.96.0/19
IP: 2404:1f40::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43172 (0xa8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:24:32 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:da:a8:7d:55:00:5e:71:1f:36:a2:62:ca:
a1:e6:27:7a:5a:fb:40:6a:98:06:bc:44:f3:67:48:
f6:93:32:8f:c6:a2:aa:0a:38:27:d0:83:b0:fa:37:
ce:23:bf:f0:1f:a1:d9:f8:fe:33:b7:e3:18:2f:d4:
be:0c:e4:87:8c:99:cc:78:c0:18:13:27:66:eb:09:
6b:6f:a9:93:3b:ad:5a:42:b1:35:41:a1:7b:f3:f2:
04:f4:e3:c9:a4:a7:b0:70:de:12:87:a7:e5:94:ad:
77:76:ff:9b:64:b2:61:cd:ec:72:c2:13:0e:69:d9:
d0:a9:67:f0:90:a4:70:ad:d3:f1:70:84:77:22:96:
c9:1e:db:6b:6c:c3:97:8f:15:3c:dd:40:d3:88:74:
c8:eb:41:d9:e5:cf:3c:7a:90:00:77:c2:f9:0d:ba:
0c:8d:5d:c2:79:4b:09:a9:df:55:fa:10:7c:ba:36:
41:b9:7e:ab:02:83:c4:0d:8b:81:bd:cc:85:c3:99:
e1:3f:11:54:3e:65:22:06:51:ff:8f:bd:0b:5f:c7:
17:c1:8e:9a:d8:4a:7f:ce:cd:10:f4:8a:9f:e8:e1:
8f:4e:01:fd:1a:86:23:e8:25:ef:5c:a5:9d:02:69:
52:ec:d6:09:c9:e2:3d:a3:f7:75:ee:67:a4:fd:29:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63578
63708
sbgp-ipAddrBlock: critical
IPv4:
43.247.88.0/22
43.255.84.0/22
43.255.212.0/22
45.65.24.0/21
103.210.160.0/22
103.210.172.0-103.210.183.255
103.228.160.0/22
103.229.212.0/22
139.5.60.0/22
160.19.208.0/22
163.53.168.0/22
211.150.192.0/18
211.154.96.0/19
IPv6:
2404:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
ab:81:7e:49:48:cf:43:76:83:1c:74:7e:72:d4:e7:11:99:a1:
8b:b8:64:c4:6c:00:11:48:6c:f3:a2:eb:f1:c9:9b:42:d8:fb:
d3:ee:bf:cf:d2:94:28:17:97:79:da:a0:fb:c6:76:6e:da:14:
6b:3b:30:db:19:b2:7f:9b:f1:00:71:0f:d6:70:16:db:d7:ba:
d8:53:c4:8a:27:78:52:cb:4e:70:6b:23:ea:60:ab:06:89:3b:
46:11:9c:f6:26:5b:e1:26:6a:de:65:91:47:7e:a6:b1:6a:9c:
ad:75:d1:76:da:5f:16:30:9d:a1:2c:3a:4e:d1:0b:1b:16:04:
30:f1:43:f6:94:ad:e2:a2:fc:92:c9:ac:84:78:f3:9d:8c:bf:
35:d8:e4:47:02:91:7f:cc:08:15:ee:e6:ae:92:9e:b4:31:3b:
85:cb:4a:18:63:49:1f:d1:cc:41:0e:13:c2:5f:8d:4b:db:6a:
21:77:23:ae:2d:93:05:d5:3a:8b:7a:0e:08:0a:3b:21:89:8b:
8e:8f:ed:5d:af:0b:a0:4a:60:88:0d:95:e1:7c:d5:ec:14:f7:
82:1e:fa:36:81:c9:0b:42:ec:69:fa:19:31:0c:d1:29:43:05:
61:01:7f:1c:04:94:62:51:3a:8f:e3:b3:52:16:b2:5d:b8:0b:
5e:83:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:38:45 2024 by rpki-client on console-ams.rpki-client.org