Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/7z6j5ovlIQHmUZX6cIQJVc858dU.cer
File: 7z6j5ovlIQHmUZX6cIQJVc858dU.cer (raw, json)
Hash identifier: SEqE9qccC5G4HgQjVQ+TAjCQ+5e5Gl0+fxl4rUEagrQ=
Subject key identifier: EF:3E:A3:E6:8B:E5:21:01:E6:51:95:FA:70:84:09:55:CF:39:F1:D5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A0A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 08 Aug 2023 05:01:11 +0000
Certificate not after: Fri 07 Jun 2024 02:16:11 +0000
Subordinate resources: IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
IP: 2400:ee00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41129 (0xa0a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 8 05:01:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=EF3EA3E68BE52101E65195FA70840955CF39F1D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:1f:61:b3:e4:49:92:44:b1:d3:8e:c6:cd:
f9:bc:a3:8d:b8:ba:14:b3:94:8f:1d:55:bb:ff:fb:
18:16:b1:06:9a:5d:65:c4:53:a4:f3:99:fa:57:89:
7d:f6:91:48:d7:c4:d6:96:78:fc:63:4d:fb:63:d1:
76:ab:a6:08:79:8b:cd:95:87:fc:93:0a:c3:4b:44:
80:88:5c:5b:c5:dd:68:f6:d5:05:84:0c:04:46:32:
6d:42:8f:fe:ab:91:79:01:88:4e:23:97:e5:c5:76:
3d:09:21:9f:db:67:51:41:e9:9b:32:ff:14:42:b5:
23:af:41:8c:63:ca:82:87:89:71:2d:7e:0c:f6:47:
78:6e:1e:61:2a:e6:ad:16:ef:e9:24:eb:26:91:36:
c4:68:93:0b:b8:19:34:b3:74:3c:61:82:36:a6:a5:
f9:1b:fc:0c:98:cb:b4:76:5f:37:70:dc:a9:f3:5d:
4c:d8:36:87:95:0e:d4:67:a1:a8:69:30:4d:06:c3:
4b:75:dd:46:9a:fb:da:09:b1:28:fc:08:58:4f:f1:
79:9d:59:4d:87:12:ae:2d:79:fe:ba:cc:af:55:43:
93:a2:16:a7:05:13:73:e5:fa:d5:ba:43:a1:12:7f:
0d:08:f1:92:3b:0f:8b:18:6d:ed:a7:86:f1:a3:5a:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3E:A3:E6:8B:E5:21:01:E6:51:95:FA:70:84:09:55:CF:39:F1:D5
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/7z6j5ovlIQHmUZX6cIQJVc858dU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
IPv6:
2400:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
92:a4:f2:f3:fa:df:83:ba:1b:1e:d0:9a:e3:fa:0a:e6:7f:a3:
b9:b2:37:0d:76:00:6a:3c:c4:4c:7f:90:3d:dd:ee:84:02:fe:
28:1a:08:15:3f:17:0f:c4:13:9f:0a:bf:4d:b5:fc:3a:da:ed:
eb:44:b3:74:7d:fa:2c:61:8b:46:c0:5f:bc:71:db:20:23:92:
92:30:4d:69:7f:0d:d6:f7:52:ee:9b:32:8b:f7:4a:a2:57:34:
45:15:79:19:1d:a1:61:14:d6:b2:4d:20:12:74:03:ea:7c:3e:
9e:ba:e7:6b:3b:4c:e1:16:b3:b6:3d:ff:9f:e7:eb:fd:a1:c2:
f6:9f:6e:f8:a8:51:40:5d:c9:ff:2d:d2:00:dc:f4:94:37:0e:
97:c5:43:ee:dc:09:01:99:79:60:26:5c:3d:ef:bc:e2:0c:bd:
a4:98:c2:70:49:8a:72:c0:8f:43:a8:fa:2d:2f:e9:c6:08:24:
a3:8c:04:4c:f5:a2:02:05:86:f8:dc:cd:72:06:0b:bd:88:51:
e4:90:fb:bf:eb:ee:b9:47:1d:78:8d:34:09:22:e4:fe:ca:6e:
c6:d6:58:34:d9:a6:ea:33:0f:13:bc:c9:f7:19:62:bf:86:87:
ac:cd:64:85:55:7c:3a:76:1e:d1:7b:83:5b:ac:81:99:66:85:
b1:ad:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:38:45 2024 by rpki-client on console-ams.rpki-client.org