Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer
File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer (raw, json)
Hash identifier: 0vcgVmEEu0eZCgsDavzz4D24tAQw/F10vUhnrIqUip0=
Subject key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:55:52 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 1.2.2.0/24
IP: 1.4.4.0/24
IP: 1.8.0.0 -- 1.8.17.255
IP: 1.8.19.0 -- 1.8.255.255
IP: 103.235.132.0/22
IP: 210.2.2.0/23
IP: 210.2.5.0 -- 210.2.15.255
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48219 (0xbc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:55:52 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:75:43:d4:7a:e8:35:5e:7b:47:4c:7d:01:
04:9e:4b:21:b1:31:b1:2d:38:97:07:43:4e:81:27:
d9:e1:6a:69:ee:63:9c:33:aa:e5:ce:f8:61:73:2a:
6a:72:97:7e:1a:22:59:f5:a7:3a:fe:25:15:20:ce:
20:c4:49:40:66:b5:99:ea:e4:0f:c3:cd:25:16:a8:
72:1c:45:6e:ab:f8:70:b8:b8:9c:dc:89:fd:70:ac:
68:0f:dc:c8:2a:11:23:c6:f9:43:84:c4:11:ff:58:
6a:b5:3f:69:16:a3:8e:3b:3d:51:9c:82:ac:85:e0:
16:cb:a5:48:ed:46:e1:12:45:39:29:1b:0d:59:6e:
e7:54:dc:b0:cf:22:f2:23:1e:1d:33:71:18:70:4e:
ba:c5:9d:c5:f0:b5:43:f8:e7:dc:da:40:0b:58:3b:
c9:3e:4b:b1:08:e0:f3:dc:19:c1:06:a7:3e:40:58:
fc:9f:6f:2e:f5:38:f4:bc:1c:3f:ff:57:1b:16:28:
1b:6f:dc:55:b8:57:fd:5c:2e:7d:9c:bf:72:d1:a1:
cf:e1:00:8e:ac:28:7b:71:8c:9e:f4:b7:25:14:7d:
39:57:0d:78:c1:70:05:15:82:82:e8:f3:61:8e:63:
e4:65:65:88:17:a2:b7:05:b2:20:ce:7d:bd:ae:5b:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.2.2.0/24
1.4.4.0/24
1.8.0.0-1.8.17.255
1.8.19.0-1.8.255.255
103.235.132.0/22
210.2.2.0/23
210.2.5.0-210.2.15.255
Signature Algorithm: sha256WithRSAEncryption
05:93:f1:05:97:24:4c:8f:77:31:8b:31:6f:ee:22:86:eb:98:
ca:f4:88:5f:6b:1e:e1:1f:37:00:c4:78:f6:55:fd:f1:b6:9b:
a9:7e:24:41:6d:d7:4c:00:c9:fd:97:7c:07:89:11:8c:55:36:
5b:bf:09:37:ec:f3:52:63:bb:ca:00:5c:4d:22:73:eb:e3:ad:
8f:94:f6:6a:6c:8f:3e:2a:89:f6:d1:ff:b1:75:e0:83:70:dd:
59:66:11:1e:9d:0d:d5:42:67:73:f6:88:52:43:67:aa:bc:8e:
a7:6f:b9:6d:59:17:b1:54:0c:35:12:9d:04:79:14:78:69:b0:
81:c0:42:34:7b:6d:0e:fa:c3:18:1d:55:2e:ab:0a:07:98:50:
08:e6:77:02:19:3c:08:24:b8:b1:08:e4:c0:49:5f:82:5d:f9:
6b:a6:ee:1a:e0:af:07:65:25:c6:80:77:35:25:1a:cf:79:8b:
a3:e6:e9:cb:a8:25:6f:20:65:a1:6e:e2:ef:c4:ef:4f:e9:b5:
b3:e2:f2:25:2c:62:cc:e9:93:32:ec:ee:f6:9f:0c:0a:f8:79:
30:39:82:d6:a4:4f:d8:6d:81:70:c0:45:0e:ff:e6:9b:5f:a0:
af:c4:d5:07:73:f8:ed:e0:4e:61:87:8e:13:f9:7e:c3:3e:63:
3c:be:90:88
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDALxbMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU1NTJaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKEYyRTg0ODJCRjEwQjRFRTY3MzZGNDAxQUZGRjM3MTJGQjQ0NkJG
MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOnVD1HroNV57R0x9
AQSeSyGxMbEtOJcHQ06BJ9nhamnuY5wzquXO+GFzKmpyl34aIln1pzr+JRUgziDE
SUBmtZnq5A/DzSUWqHIcRW6r+HC4uJzcif1wrGgP3MgqESPG+UOExBH/WGq1P2kW
o447PVGcgqyF4BbLpUjtRuESRTkpGw1ZbudU3LDPIvIjHh0zcRhwTrrFncXwtUP4
59zaQAtYO8k+S7EI4PPcGcEGpz5AWPyfby71OPS8HD//VxsWKBtv3FW4V/1cLn2c
v3LRoc/hAI6sKHtxjJ70tyUUfTlXDXjBcAUVgoLo82GOY+RlZYgXorcFsiDOfb2u
WyvJAgMBAAGjggKNMIICiTAdBgNVHQ4EFgQU8uhIK/ELTuZzb0Aa//NxL7RGvy8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQz
MC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC80MzAvOHVoSUtfRUxUdVp6YjBBYV9fTnhMN1JHdnk4Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDBZ
BggrBgEFBQcBBwEB/wRKMEgwRgQCAAEwQAMEAAECAgMEAAEEBDALAwMDAQgDBAEB
CBAwCwMEAAEIEwMDAAEIAwQCZ+uEAwQB0gICMAwDBADSAgUDBATSAgAwDQYJKoZI
hvcNAQELBQADggEBAAWT8QWXJEyPdzGLMW/uIobrmMr0iF9rHuEfNwDEePZV/fG2
m6l+JEFt10wAyf2XfAeJEYxVNlu/CTfs81Jju8oAXE0ic+vjrY+U9mpsjz4qifbR
/7F14INw3VlmER6dDdVCZ3P2iFJDZ6q8jqdvuW1ZF7FUDDUSnQR5FHhpsIHAQjR7
bQ76wxgdVS6rCgeYUAjmdwIZPAgkuLEI5MBJX4Jd+Wum7hrgrwdlJcaAdzUlGs95
i6Pm6cuoJW8gZaFu4u/E70/ptbPi8iUsYszpkzLs7vafDAr4eTA5gtakT9htgXDA
RQ7/5ptfoK/E1Qdz+O3gTmGHjhP5fsM+Yzy+kIg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:37 2024 by rpki-client on console-ams.rpki-client.org