Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
File: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer (raw, json)
Hash identifier: j6NJVvMBipknHUdF5N7hrhMr9T2KiZeVltNTWj8+gXk=
Subject key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:14:51 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 58832
IP: 43.247.176.0/20
IP: 43.254.136.0/22
IP: 101.239.0.0/16
IP: 103.227.136.0/22
IP: 103.237.248.0 -- 103.238.7.255
IP: 103.238.160.0/22
IP: 103.242.172.0/22
IP: 114.112.96.0 -- 114.112.107.255
IP: 150.242.232.0/22
IP: 150.242.248.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52859 (0xce7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Apr 3 08:14:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:ad:0d:11:d1:7e:b6:99:0d:b7:9d:66:21:
9e:0e:f7:49:af:63:fd:2b:d7:51:50:89:10:44:9a:
bf:16:cd:26:e3:da:75:e4:12:4b:41:cb:b3:7b:e8:
7f:63:9e:9d:a7:af:7e:d7:4f:92:09:bc:0a:eb:68:
9b:32:9b:b9:63:b8:fe:3f:e3:d4:40:0a:9b:73:42:
31:89:97:a5:89:ec:0a:27:9b:fa:fb:6d:72:d4:3b:
6e:6d:64:75:46:51:ba:7b:d3:4a:c6:9e:dc:66:0e:
7a:27:c7:3c:84:1b:53:d2:74:e2:c4:2a:a0:d6:6c:
17:49:34:8e:c1:08:a4:d4:e8:f7:2e:46:ab:03:8e:
5c:73:ef:18:15:f9:32:53:24:66:20:32:7f:54:3f:
da:41:09:27:12:f8:43:02:b7:78:27:d3:e8:47:31:
cb:4e:9d:f3:cd:7f:62:d0:dd:2c:9a:af:35:85:f5:
9b:81:e8:76:6f:0b:4f:ec:62:d5:5a:74:47:d1:fa:
09:c5:07:c7:d0:e1:54:90:04:12:7e:13:d3:3c:9b:
c4:8a:59:0f:eb:c0:71:2b:9a:c3:9f:d3:3d:67:21:
93:73:4f:0f:6e:b2:a1:14:dc:83:33:d7:32:f6:2d:
b2:3a:28:1d:89:55:a3:57:b8:99:97:05:f9:8d:2a:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58832
sbgp-ipAddrBlock: critical
IPv4:
43.247.176.0/20
43.254.136.0/22
101.239.0.0/16
103.227.136.0/22
103.237.248.0-103.238.7.255
103.238.160.0/22
103.242.172.0/22
114.112.96.0-114.112.107.255
150.242.232.0/22
150.242.248.0/22
Signature Algorithm: sha256WithRSAEncryption
88:59:0b:10:5e:49:07:12:c5:85:84:05:7e:fb:04:de:4f:bb:
b4:7a:16:33:31:d6:5f:96:6b:c9:fb:38:f5:70:0b:e0:66:29:
10:06:f4:23:39:92:b5:72:ce:4f:9b:e2:7d:7b:44:e0:e2:84:
13:4c:6a:ef:84:36:9c:e8:32:16:27:06:b0:fa:33:e5:b3:e1:
43:b5:57:18:c0:c6:e6:c8:58:fa:93:32:79:88:f0:38:db:60:
40:e6:86:77:67:fd:8b:ea:71:f4:e6:9b:45:95:cd:dd:35:23:
43:24:6f:ce:31:83:76:51:24:ed:9c:36:f5:e6:50:a5:4b:08:
45:b8:81:37:c7:d5:19:02:76:99:28:38:74:79:f9:65:de:45:
ce:13:ac:39:9b:2a:58:0f:15:07:ae:a6:b7:c3:9e:bd:56:6b:
7a:5f:73:9c:2a:97:e8:e1:ff:fd:d8:71:aa:64:6c:72:21:4c:
7f:66:ee:a4:55:f4:4e:a1:3b:08:f3:12:d8:b3:89:ba:b2:b7:
ee:5e:64:02:3d:a8:f6:a5:fc:47:88:85:c8:1f:38:32:ee:3d:
06:de:22:07:9a:36:3f:7e:8d:0e:47:61:1f:a0:c7:68:a7:52:
85:c8:8e:35:e6:02:74:81:c4:07:37:5b:15:15:4b:ad:9d:83:
1d:9c:a3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:44 2025 by rpki-client