Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer
File: 8uhIK_ELTuZzb0Aa__NxL7RGvy8.cer (raw, json)
Hash identifier: idOfYJ3v4gydDy+nNdelb2o2h/BhNwQjxbHsxlBbgJs=
Subject key identifier: F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: B1E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 23 Apr 2024 01:40:39 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 1.2.2.0/24
IP: 1.4.4.0/24
IP: 1.8.0.0 -- 1.8.17.255
IP: 1.8.19.0 -- 1.8.255.255
IP: 103.235.132.0/22
IP: 210.2.2.0/23
IP: 210.2.5.0 -- 210.2.15.255
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45545 (0xb1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 23 01:40:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2E8482BF10B4EE6736F401AFFF3712FB446BF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:75:43:d4:7a:e8:35:5e:7b:47:4c:7d:01:
04:9e:4b:21:b1:31:b1:2d:38:97:07:43:4e:81:27:
d9:e1:6a:69:ee:63:9c:33:aa:e5:ce:f8:61:73:2a:
6a:72:97:7e:1a:22:59:f5:a7:3a:fe:25:15:20:ce:
20:c4:49:40:66:b5:99:ea:e4:0f:c3:cd:25:16:a8:
72:1c:45:6e:ab:f8:70:b8:b8:9c:dc:89:fd:70:ac:
68:0f:dc:c8:2a:11:23:c6:f9:43:84:c4:11:ff:58:
6a:b5:3f:69:16:a3:8e:3b:3d:51:9c:82:ac:85:e0:
16:cb:a5:48:ed:46:e1:12:45:39:29:1b:0d:59:6e:
e7:54:dc:b0:cf:22:f2:23:1e:1d:33:71:18:70:4e:
ba:c5:9d:c5:f0:b5:43:f8:e7:dc:da:40:0b:58:3b:
c9:3e:4b:b1:08:e0:f3:dc:19:c1:06:a7:3e:40:58:
fc:9f:6f:2e:f5:38:f4:bc:1c:3f:ff:57:1b:16:28:
1b:6f:dc:55:b8:57:fd:5c:2e:7d:9c:bf:72:d1:a1:
cf:e1:00:8e:ac:28:7b:71:8c:9e:f4:b7:25:14:7d:
39:57:0d:78:c1:70:05:15:82:82:e8:f3:61:8e:63:
e4:65:65:88:17:a2:b7:05:b2:20:ce:7d:bd:ae:5b:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E8:48:2B:F1:0B:4E:E6:73:6F:40:1A:FF:F3:71:2F:B4:46:BF:2F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/430/8uhIK_ELTuZzb0Aa__NxL7RGvy8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.2.2.0/24
1.4.4.0/24
1.8.0.0-1.8.17.255
1.8.19.0-1.8.255.255
103.235.132.0/22
210.2.2.0/23
210.2.5.0-210.2.15.255
Signature Algorithm: sha256WithRSAEncryption
23:34:41:97:1a:68:91:a3:20:46:a8:b5:91:ba:4f:3f:ee:45:
76:3e:2c:16:81:39:6e:90:25:77:14:be:9b:d7:58:65:c7:0e:
85:5e:00:1f:d7:83:7d:75:c3:3e:44:86:93:93:a6:db:5f:26:
85:d0:ff:1a:8c:a7:55:06:d5:e0:fe:fd:0f:b5:f1:d8:d0:c0:
56:31:05:52:a4:5a:8a:26:04:3e:24:4e:45:72:b6:2f:37:b2:
08:83:64:0c:d3:c2:e7:34:21:07:ae:b7:5e:43:92:1e:4b:4b:
42:79:86:d1:66:48:5b:33:4f:ea:16:59:1c:c3:63:0d:99:96:
e1:7a:66:4b:18:9a:60:2a:1c:ba:cd:86:f3:8d:52:a1:5b:f6:
be:57:13:19:90:3a:91:e6:e5:23:09:1d:ee:cb:0f:5e:7a:a1:
f8:11:21:a2:6b:e9:db:fb:f0:91:66:4b:aa:44:ee:e1:d7:99:
1c:8d:72:8e:31:b5:67:f5:08:9a:99:8c:86:91:10:8f:25:74:
7d:75:c8:70:41:36:c7:35:d5:d0:9e:7e:ef:78:6c:eb:f0:66:
ea:3e:e6:54:6b:1a:84:73:36:77:24:e4:3d:da:cc:ac:d7:ec:
bc:92:c8:5e:71:ad:a3:50:e2:c2:76:99:34:05:dd:7f:f7:dd:
71:d1:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:38:45 2024 by rpki-client on console-ams.rpki-client.org