Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
File: 7oh6zHzktfZsz0lG8Cv6y94ot2o.cer (raw, json)
Hash identifier: bkafH3Y9jUq/BL5+q1GwgO8GlFcnoCUkFkeAeIr1Vfc=
Subject key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CD5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:08:44 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 63578
AS: 63708
IP: 43.247.88.0/22
IP: 43.255.84.0/22
IP: 43.255.212.0/22
IP: 45.65.24.0/21
IP: 103.210.160.0/22
IP: 103.210.172.0 -- 103.210.183.255
IP: 103.228.160.0/22
IP: 103.229.212.0/22
IP: 139.5.60.0/22
IP: 160.19.208.0/22
IP: 163.53.168.0/22
IP: 211.150.192.0/18
IP: 211.154.96.0/19
IP: 2404:1f40::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52573 (0xcd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Apr 3 08:08:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:da:a8:7d:55:00:5e:71:1f:36:a2:62:ca:
a1:e6:27:7a:5a:fb:40:6a:98:06:bc:44:f3:67:48:
f6:93:32:8f:c6:a2:aa:0a:38:27:d0:83:b0:fa:37:
ce:23:bf:f0:1f:a1:d9:f8:fe:33:b7:e3:18:2f:d4:
be:0c:e4:87:8c:99:cc:78:c0:18:13:27:66:eb:09:
6b:6f:a9:93:3b:ad:5a:42:b1:35:41:a1:7b:f3:f2:
04:f4:e3:c9:a4:a7:b0:70:de:12:87:a7:e5:94:ad:
77:76:ff:9b:64:b2:61:cd:ec:72:c2:13:0e:69:d9:
d0:a9:67:f0:90:a4:70:ad:d3:f1:70:84:77:22:96:
c9:1e:db:6b:6c:c3:97:8f:15:3c:dd:40:d3:88:74:
c8:eb:41:d9:e5:cf:3c:7a:90:00:77:c2:f9:0d:ba:
0c:8d:5d:c2:79:4b:09:a9:df:55:fa:10:7c:ba:36:
41:b9:7e:ab:02:83:c4:0d:8b:81:bd:cc:85:c3:99:
e1:3f:11:54:3e:65:22:06:51:ff:8f:bd:0b:5f:c7:
17:c1:8e:9a:d8:4a:7f:ce:cd:10:f4:8a:9f:e8:e1:
8f:4e:01:fd:1a:86:23:e8:25:ef:5c:a5:9d:02:69:
52:ec:d6:09:c9:e2:3d:a3:f7:75:ee:67:a4:fd:29:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63578
63708
sbgp-ipAddrBlock: critical
IPv4:
43.247.88.0/22
43.255.84.0/22
43.255.212.0/22
45.65.24.0/21
103.210.160.0/22
103.210.172.0-103.210.183.255
103.228.160.0/22
103.229.212.0/22
139.5.60.0/22
160.19.208.0/22
163.53.168.0/22
211.150.192.0/18
211.154.96.0/19
IPv6:
2404:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
3a:01:e9:c5:d8:0d:7f:ea:10:5b:2c:16:f4:de:b2:08:87:d7:
dd:64:3f:3e:bc:51:7d:76:e5:2f:03:68:15:e0:af:80:be:9d:
19:bd:ef:a9:26:b5:0a:66:e1:20:f1:bd:a6:f6:b7:bb:6a:0f:
6d:d7:c8:a0:e8:26:27:f0:9c:84:c9:98:de:57:04:6e:72:90:
df:32:29:dc:f6:2a:9b:99:b5:34:9e:f2:f2:32:04:71:e0:34:
6e:9c:73:70:96:47:2b:e5:22:54:15:82:66:fa:72:d7:59:02:
dd:58:37:32:78:a9:f3:40:ed:25:2b:87:d6:ad:bf:83:7c:be:
de:9b:00:23:1d:0e:e6:34:10:9f:18:b5:e2:7e:d5:7e:82:26:
b8:d2:3d:a3:f9:40:f5:b1:30:66:ef:ea:5a:08:ba:19:3f:db:
7a:8d:da:bc:71:23:8c:19:b5:b6:e9:3d:53:34:7f:be:a6:73:
33:0d:2a:ab:fa:e6:11:6d:b5:9a:6d:50:2f:13:8a:ea:b0:1f:
99:f2:ea:1c:5f:af:73:df:f0:ef:e2:13:6d:51:a8:f4:b1:d9:
f9:4f:c9:ed:d2:0c:6b:b3:9e:b4:18:cd:a1:e4:bc:75:96:99:
7e:67:85:b4:2f:69:85:a6:74:c2:82:2f:8c:13:99:a2:8b:cd:
0d:9e:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:15:44 2025 by rpki-client