Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
File: 9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer (raw, json)
Hash identifier: QZPzMoO6MrIqVqfryCwNEMUb17y0jHklPjnRB31bbQ4=
Subject key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:56:15 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45081
IP: 121.255.0.0/16
IP: 202.141.160.0/19
IP: 2400:b600::/32
IP: 2401:1e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48245 (0xbc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:56:15 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:f5:b5:df:6c:77:c7:c5:1a:52:d8:dd:5e:
30:a7:f4:78:b7:d5:93:77:2d:9a:37:c1:b3:07:00:
d7:3e:27:18:00:6b:db:84:96:f0:b4:24:6c:df:78:
5b:f9:1f:09:d9:b2:5b:6d:1e:e7:cf:aa:5c:43:38:
cb:ed:71:6f:1b:16:40:89:e0:e7:c9:b0:89:08:f4:
6c:59:8a:ef:1c:16:e1:8d:0c:c2:42:3c:3f:7b:5d:
12:ca:2d:76:17:00:b2:bc:c8:c8:6e:28:24:20:7f:
39:0a:8e:d3:eb:aa:93:d8:4b:a9:c2:70:1b:7b:0a:
61:46:3a:ea:6e:20:57:a1:6d:33:2c:a4:c4:29:08:
41:89:dd:6f:46:a3:0c:33:ad:8c:c6:d9:76:17:7a:
8c:70:58:be:52:7a:e2:d5:63:de:64:89:42:ea:90:
b3:30:f8:4a:6f:d6:54:53:6a:38:79:89:d9:cd:18:
a9:45:f6:c3:10:15:a3:2b:56:95:c6:a2:7e:5e:6b:
69:b2:e6:db:39:da:48:b6:6f:31:ba:87:f8:89:08:
bb:b8:13:46:75:4f:a8:69:58:4d:07:f3:f5:b3:da:
91:7a:67:f8:2a:59:fa:83:8e:e8:28:2b:a4:06:5d:
a6:cf:49:8a:05:aa:18:54:c7:51:83:b2:17:d8:a5:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45081
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
202.141.160.0/19
IPv6:
2400:b600::/32
2401:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
ae:ce:c2:f4:39:55:d8:00:b0:f7:4d:9e:6a:7d:b1:4b:c0:20:
78:71:19:77:b0:ab:91:c6:28:96:88:3d:4f:28:f4:3f:37:59:
37:c3:6b:47:9b:d0:4e:a8:bd:4f:fd:11:ed:25:22:d6:be:f2:
54:14:f7:58:2f:c9:c8:ea:ba:3c:a6:4d:16:43:46:0f:52:b2:
5b:30:26:f7:7e:f4:4a:f5:8d:b9:19:ea:d1:80:c4:73:8b:6d:
04:d9:01:3f:e2:75:80:4e:3b:88:bb:83:d0:42:69:8b:2b:ef:
53:01:aa:04:e6:bc:3f:b5:6b:6d:2f:c0:2b:1f:85:6f:54:f9:
1a:27:c1:2a:c4:fc:ce:09:7b:1d:52:01:19:bd:89:5e:b3:f1:
90:4e:35:6a:29:88:82:52:f7:94:49:55:12:d8:a2:e9:02:62:
f4:ee:6a:be:b4:0b:f7:9e:c0:1d:e5:80:32:81:f9:49:73:93:
c6:74:f2:b6:5d:c0:0e:c3:46:81:56:41:2b:1b:bb:14:4a:4d:
94:a3:b2:db:7d:02:56:14:28:76:2b:2c:48:b6:a6:50:7d:fa:
06:d5:bf:5d:9d:c5:cc:29:ba:d9:2d:84:36:7e:2c:21:51:a8:
40:26:30:7c:b6:1c:3c:6a:37:3e:87:a2:4a:ad:32:fb:ca:25:
9a:e6:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:24 2024 by rpki-client on console-fra.rpki-client.org