Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.cer (raw, json)
Hash identifier: liTMluBlZOSrpZHEmi9fTuoHqN1VAuxgXhWhVp5S+CM=
Subject key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:51:39 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 63578
AS: 63708
IP: 43.247.88.0/22
IP: 43.255.84.0/22
IP: 43.255.212.0/22
IP: 45.65.24.0/21
IP: 103.210.160.0/22
IP: 103.210.172.0 -- 103.210.183.255
IP: 103.228.160.0/22
IP: 103.229.212.0/22
IP: 139.5.60.0/22
IP: 160.19.208.0/22
IP: 163.53.168.0/22
IP: 211.150.192.0/18
IP: 211.154.96.0/19
IP: 2404:1f40::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48001 (0xbb81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:51:39 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:da:a8:7d:55:00:5e:71:1f:36:a2:62:ca:
a1:e6:27:7a:5a:fb:40:6a:98:06:bc:44:f3:67:48:
f6:93:32:8f:c6:a2:aa:0a:38:27:d0:83:b0:fa:37:
ce:23:bf:f0:1f:a1:d9:f8:fe:33:b7:e3:18:2f:d4:
be:0c:e4:87:8c:99:cc:78:c0:18:13:27:66:eb:09:
6b:6f:a9:93:3b:ad:5a:42:b1:35:41:a1:7b:f3:f2:
04:f4:e3:c9:a4:a7:b0:70:de:12:87:a7:e5:94:ad:
77:76:ff:9b:64:b2:61:cd:ec:72:c2:13:0e:69:d9:
d0:a9:67:f0:90:a4:70:ad:d3:f1:70:84:77:22:96:
c9:1e:db:6b:6c:c3:97:8f:15:3c:dd:40:d3:88:74:
c8:eb:41:d9:e5:cf:3c:7a:90:00:77:c2:f9:0d:ba:
0c:8d:5d:c2:79:4b:09:a9:df:55:fa:10:7c:ba:36:
41:b9:7e:ab:02:83:c4:0d:8b:81:bd:cc:85:c3:99:
e1:3f:11:54:3e:65:22:06:51:ff:8f:bd:0b:5f:c7:
17:c1:8e:9a:d8:4a:7f:ce:cd:10:f4:8a:9f:e8:e1:
8f:4e:01:fd:1a:86:23:e8:25:ef:5c:a5:9d:02:69:
52:ec:d6:09:c9:e2:3d:a3:f7:75:ee:67:a4:fd:29:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63578
63708
sbgp-ipAddrBlock: critical
IPv4:
43.247.88.0/22
43.255.84.0/22
43.255.212.0/22
45.65.24.0/21
103.210.160.0/22
103.210.172.0-103.210.183.255
103.228.160.0/22
103.229.212.0/22
139.5.60.0/22
160.19.208.0/22
163.53.168.0/22
211.150.192.0/18
211.154.96.0/19
IPv6:
2404:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
2a:3b:af:b8:5f:0f:92:46:91:f8:f3:60:54:40:24:a3:a8:28:
ac:e6:d3:62:db:e5:13:27:bd:a1:58:25:ae:af:cd:08:2a:88:
ea:58:7e:15:73:b0:c8:3c:e1:fa:ba:8f:a1:45:6b:bb:47:ed:
9f:25:20:32:00:a6:fa:88:ca:33:72:a4:f2:74:90:5a:99:66:
1f:1c:64:63:70:c9:0f:75:45:68:31:ee:74:f0:db:53:c9:95:
90:0f:0e:88:b5:9e:c4:c3:cf:ec:29:1b:48:03:19:3e:e9:de:
b4:37:cf:b2:51:ee:3b:bd:82:11:74:78:20:f0:dd:3b:7e:14:
0c:91:05:b8:54:a6:34:eb:1d:f7:52:7c:a5:a9:b5:d1:5f:a9:
d9:5c:8c:26:3d:05:c9:ed:92:2b:6e:11:57:8e:8c:ab:2a:3d:
da:07:87:65:2f:88:e5:6e:eb:11:5d:32:d5:6b:92:cb:8d:33:
e7:e9:d8:28:91:6c:cb:dd:73:6b:6b:2e:44:e8:96:58:07:a1:
0d:9b:a6:1b:f2:26:66:21:75:a1:8f:d6:c8:17:80:89:ca:41:
a2:ea:72:08:7f:a3:b9:c9:8f:15:d7:d7:9b:c1:da:d8:54:0b:
b6:7f:62:2a:23:44:bb:04:59:03:70:db:06:27:a0:09:98:e2:
f4:00:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:26 2024 by rpki-client on console-ams.rpki-client.org