Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer (raw, json)
Hash identifier: wBV938vT9RmyF3hCBAhl6lzG9XVGpb9B9hb+ZnSh4eg=
Subject key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:23:41 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 45081
IP: 121.255.0.0/16
IP: 202.141.160.0/19
IP: 2400:b600::/32
IP: 2401:1e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 May 2024 15:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44879 (0xaf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:23:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:f5:b5:df:6c:77:c7:c5:1a:52:d8:dd:5e:
30:a7:f4:78:b7:d5:93:77:2d:9a:37:c1:b3:07:00:
d7:3e:27:18:00:6b:db:84:96:f0:b4:24:6c:df:78:
5b:f9:1f:09:d9:b2:5b:6d:1e:e7:cf:aa:5c:43:38:
cb:ed:71:6f:1b:16:40:89:e0:e7:c9:b0:89:08:f4:
6c:59:8a:ef:1c:16:e1:8d:0c:c2:42:3c:3f:7b:5d:
12:ca:2d:76:17:00:b2:bc:c8:c8:6e:28:24:20:7f:
39:0a:8e:d3:eb:aa:93:d8:4b:a9:c2:70:1b:7b:0a:
61:46:3a:ea:6e:20:57:a1:6d:33:2c:a4:c4:29:08:
41:89:dd:6f:46:a3:0c:33:ad:8c:c6:d9:76:17:7a:
8c:70:58:be:52:7a:e2:d5:63:de:64:89:42:ea:90:
b3:30:f8:4a:6f:d6:54:53:6a:38:79:89:d9:cd:18:
a9:45:f6:c3:10:15:a3:2b:56:95:c6:a2:7e:5e:6b:
69:b2:e6:db:39:da:48:b6:6f:31:ba:87:f8:89:08:
bb:b8:13:46:75:4f:a8:69:58:4d:07:f3:f5:b3:da:
91:7a:67:f8:2a:59:fa:83:8e:e8:28:2b:a4:06:5d:
a6:cf:49:8a:05:aa:18:54:c7:51:83:b2:17:d8:a5:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45081
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
202.141.160.0/19
IPv6:
2400:b600::/32
2401:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
51:af:8b:62:77:0d:7d:72:7a:29:c1:33:9b:6e:29:0c:cf:99:
bf:35:e1:24:b6:91:08:2f:5e:31:eb:5b:43:82:24:8e:51:f2:
9a:6b:2a:32:86:a0:cb:89:f9:e1:3c:c8:b2:bf:dc:71:39:52:
f8:47:bb:aa:84:16:96:b0:d6:b5:75:2b:08:97:82:20:26:7d:
5d:51:e2:fa:4b:76:cb:ee:05:f4:13:00:a5:d9:5e:64:8d:88:
41:9a:55:18:dc:4c:b9:b2:22:b2:d3:1a:89:19:af:b6:ef:c6:
ac:1b:9b:0c:cf:fc:56:88:0a:d0:e6:81:17:f8:6e:be:2b:52:
c4:66:08:d3:a1:0c:ea:0c:9c:ad:bf:0e:23:ff:f3:a6:36:2d:
29:2d:5d:ce:58:2d:16:a2:c9:49:c5:aa:2f:5e:81:3b:3e:9d:
1d:83:8e:91:69:0f:0c:76:7b:06:42:b3:bf:f5:c9:72:22:e8:
98:40:15:63:1b:67:6e:27:bf:b9:2c:c5:d2:67:6a:4c:ad:ae:
80:14:2d:b0:85:83:5c:01:1d:5f:1f:ca:98:4d:e9:65:2d:a0:
25:59:ca:f6:ad:9e:54:d6:57:03:3a:e1:c2:92:e9:18:d4:60:
d7:f1:c5:54:ab:fc:ce:52:c5:2e:cb:68:0d:b1:09:64:92:28:
77:c1:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 09:57:57 2024 by rpki-client on console-fra.rpki-client.org