Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9euPypj-UzInW6lNheaTl5Vsvkc.cer
File: 9euPypj-UzInW6lNheaTl5Vsvkc.cer (raw, json)
Hash identifier: W+fk763KQ2YVo8HgDc/zBnFfH/z0e/kW9FpEo0yPXhw=
Subject key identifier: F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AE93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:20:50 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 38365
AS: 45076
AS: 45085
AS: 55967
AS: 63728 -- 63729
AS: 131138 -- 131141
IP: 42.199.0.0/16
IP: 101.247.0.0/17
IP: 103.6.76.0/22
IP: 106.12.0.0/15
IP: 114.110.64.0/18
IP: 114.111.0.0/19
IP: 117.58.0.0/17
IP: 119.75.208.0/20
IP: 120.48.0.0/15
IP: 122.248.48.0/20
IP: 150.242.120.0/22
IP: 180.76.0.0/16
IP: 182.61.0.0/16
IP: 202.181.112.0/20
IP: 2400:da00::/32
IP: 240c:4000::/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 May 2024 11:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44691 (0xae93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:20:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F5EB8FCA98FE5332275BA94D85E69397956CBE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:bd:73:2a:00:c9:72:3d:11:bf:5f:53:42:
6a:3b:1c:ac:00:5a:34:26:f4:63:a4:a5:e1:fd:71:
18:39:65:47:a7:04:d0:ca:5d:e8:7d:78:4d:9d:f0:
06:a1:d1:28:ce:ab:c8:67:8f:c3:d5:cc:28:f2:1a:
b2:ed:c1:7d:52:a0:e0:17:94:16:96:e8:0a:23:f8:
63:4d:08:ef:5c:ae:86:82:72:1a:d6:51:8c:a1:6d:
4d:40:a1:2d:44:fa:b7:20:fb:79:2b:dc:a8:f4:c9:
f6:8f:84:4b:b9:80:52:1e:36:ee:47:58:11:f4:b8:
f0:df:63:42:22:da:29:fb:23:1c:d6:da:52:84:b1:
96:57:33:af:85:0c:ef:43:0a:c6:3b:b0:a0:cd:5f:
b7:bb:78:6b:df:92:f8:d7:1b:c6:2e:98:95:4e:0d:
c0:32:87:67:c0:5d:18:38:c1:a3:4e:f3:98:e0:19:
af:8c:3c:1f:b5:1a:d6:33:11:99:de:73:86:87:39:
9e:98:0e:09:5b:11:c7:2f:b4:82:0b:31:3d:8d:c7:
6b:ed:e5:7e:48:cf:24:04:d2:f1:fb:d2:3f:ea:ac:
dc:ff:3b:53:00:5c:5b:a3:15:e9:f5:49:12:98:a1:
01:78:83:dc:d4:c3:29:c4:3e:60:8c:44:c3:9a:4d:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EB:8F:CA:98:FE:53:32:27:5B:A9:4D:85:E6:93:97:95:6C:BE:47
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/313/9euPypj-UzInW6lNheaTl5Vsvkc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38365
45076
45085
55967
63728-63729
131138-131141
sbgp-ipAddrBlock: critical
IPv4:
42.199.0.0/16
101.247.0.0/17
103.6.76.0/22
106.12.0.0/15
114.110.64.0/18
114.111.0.0/19
117.58.0.0/17
119.75.208.0/20
120.48.0.0/15
122.248.48.0/20
150.242.120.0/22
180.76.0.0/16
182.61.0.0/16
202.181.112.0/20
IPv6:
2400:da00::/32
240c:4000::/22
Signature Algorithm: sha256WithRSAEncryption
48:11:bf:b5:33:72:fa:f3:c3:b5:96:18:81:38:a7:62:59:9c:
6e:1b:e2:8a:c4:3e:0d:12:47:a3:60:ac:c9:47:e4:1f:26:f1:
31:82:78:95:56:50:49:b2:ec:45:9b:5e:7e:80:a1:a7:85:ae:
7d:66:62:63:f1:82:d5:e8:0d:e7:3a:3e:fa:b3:00:a3:cb:7a:
a2:3a:e2:ac:0e:45:b1:17:7a:71:36:15:81:bf:db:78:54:61:
93:0e:be:e5:a5:50:ce:61:ea:6c:8c:b9:20:bc:a1:01:d1:35:
51:88:cf:90:3b:89:e4:5f:b6:69:5c:9e:60:56:1e:61:3b:d8:
0b:f4:a6:66:ad:bf:f1:ce:94:99:99:a5:8e:43:c0:18:5a:3c:
a9:c0:97:48:43:a1:4b:bb:7d:9a:d5:7b:6b:e7:e4:4f:19:18:
dd:dc:71:0e:f5:31:70:04:9b:44:3e:ba:ac:b4:28:d8:35:1d:
7f:ed:8e:54:95:f6:e6:aa:c2:1f:ab:00:6c:db:97:12:f0:bb:
cf:c5:d1:32:46:e3:13:fd:e4:25:aa:2f:1e:fc:5d:27:27:5e:
29:db:66:b8:f0:99:13:40:88:71:7b:64:ec:5d:49:a3:17:c0:
8c:fe:b5:a2:40:b6:c7:f6:b5:ae:ba:13:ae:cd:22:ce:d6:92:
4a:1b:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org