Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
File: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer (raw, json)
Hash identifier: lhLezCXBA+2Z7XJd9vjQbomm6ZD0TIeubkQYqXAm6GA=
Subject key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:54:15 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 58832
IP: 43.247.176.0/20
IP: 43.254.136.0/22
IP: 101.239.0.0/16
IP: 103.227.136.0/22
IP: 103.237.248.0 -- 103.238.7.255
IP: 103.238.160.0/22
IP: 103.242.172.0/22
IP: 114.112.96.0 -- 114.112.107.255
IP: 150.242.232.0/22
IP: 150.242.248.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48159 (0xbc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:54:15 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:ad:0d:11:d1:7e:b6:99:0d:b7:9d:66:21:
9e:0e:f7:49:af:63:fd:2b:d7:51:50:89:10:44:9a:
bf:16:cd:26:e3:da:75:e4:12:4b:41:cb:b3:7b:e8:
7f:63:9e:9d:a7:af:7e:d7:4f:92:09:bc:0a:eb:68:
9b:32:9b:b9:63:b8:fe:3f:e3:d4:40:0a:9b:73:42:
31:89:97:a5:89:ec:0a:27:9b:fa:fb:6d:72:d4:3b:
6e:6d:64:75:46:51:ba:7b:d3:4a:c6:9e:dc:66:0e:
7a:27:c7:3c:84:1b:53:d2:74:e2:c4:2a:a0:d6:6c:
17:49:34:8e:c1:08:a4:d4:e8:f7:2e:46:ab:03:8e:
5c:73:ef:18:15:f9:32:53:24:66:20:32:7f:54:3f:
da:41:09:27:12:f8:43:02:b7:78:27:d3:e8:47:31:
cb:4e:9d:f3:cd:7f:62:d0:dd:2c:9a:af:35:85:f5:
9b:81:e8:76:6f:0b:4f:ec:62:d5:5a:74:47:d1:fa:
09:c5:07:c7:d0:e1:54:90:04:12:7e:13:d3:3c:9b:
c4:8a:59:0f:eb:c0:71:2b:9a:c3:9f:d3:3d:67:21:
93:73:4f:0f:6e:b2:a1:14:dc:83:33:d7:32:f6:2d:
b2:3a:28:1d:89:55:a3:57:b8:99:97:05:f9:8d:2a:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58832
sbgp-ipAddrBlock: critical
IPv4:
43.247.176.0/20
43.254.136.0/22
101.239.0.0/16
103.227.136.0/22
103.237.248.0-103.238.7.255
103.238.160.0/22
103.242.172.0/22
114.112.96.0-114.112.107.255
150.242.232.0/22
150.242.248.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d6:dd:7f:63:52:74:c7:46:96:bd:fc:b1:b2:17:11:d5:85:
34:d7:1f:5a:a9:d5:20:d2:19:4a:40:4d:16:cf:29:d5:83:15:
17:cf:c5:1e:a7:5a:85:8b:32:62:2b:cb:6c:6b:7d:b6:50:00:
95:dd:84:c5:e2:40:84:5c:2a:59:69:06:0d:e7:9c:23:a4:ca:
de:f8:ef:4e:ca:80:a7:b6:16:8c:66:f5:86:31:33:59:63:bf:
4a:e0:22:ed:92:d9:d0:cd:6a:72:3a:a6:a9:43:8e:60:6f:a5:
88:3e:f3:d8:cf:11:51:41:2f:a6:06:66:55:71:54:c8:78:03:
6b:63:25:fb:2b:f6:e7:24:d5:d2:99:93:c7:cf:30:6a:45:12:
42:a8:c0:26:65:31:62:34:e4:14:23:44:b3:c6:a8:9e:95:3c:
1f:31:33:02:7d:5e:10:23:1e:80:3e:ba:fd:5f:85:2f:fe:fa:
c9:eb:75:94:e2:d6:9e:2d:f2:83:f3:45:5b:93:9c:30:73:75:
1d:8e:5e:a9:2c:a2:bc:39:ce:8c:2b:69:93:a2:a3:62:dc:48:
67:d8:13:5b:ad:8c:26:d2:33:d0:09:32:fd:fe:d8:af:f0:2b:
31:eb:eb:9f:57:f2:fc:cb:52:4f:00:8b:7d:a6:e4:7c:5d:dc:
58:c2:a8:60
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDALwfMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU0MTVaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDBGRDExQ0Q1OUY0RjVDQTY2MzVCMEY3RkFCNEVBMjNDOUQ0RUEy
RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk0q0NEdF+tpkNt51m
IZ4O90mvY/0r11FQiRBEmr8WzSbj2nXkEktBy7N76H9jnp2nr37XT5IJvArraJsy
m7ljuP4/49RACptzQjGJl6WJ7Aonm/r7bXLUO25tZHVGUbp700rGntxmDnonxzyE
G1PSdOLEKqDWbBdJNI7BCKTU6PcuRqsDjlxz7xgV+TJTJGYgMn9UP9pBCScS+EMC
t3gn0+hHMctOnfPNf2LQ3SyarzWF9ZuB6HZvC0/sYtVadEfR+gnFB8fQ4VSQBBJ+
E9M8m8SKWQ/rwHErmsOf0z1nIZNzTw9usqEU3IMz1zL2LbI6KB2JVaNXuJmXBfmN
KjvVAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUD9Ec1Z9PXKZjWw9/q06iPJ1Oou8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0
Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC82NDYvRDlFYzFaOVBYS1pqV3c5X3EwNmlQSjFPb3U4Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5dAwZAYIKwYBBQUHAQcBAf8EVTBTMFEE
AgABMEsDBAQr97ADBAIr/ogDAwBl7wMEAmfjiDAMAwQDZ+34AwQDZ+4AAwQCZ+6g
AwQCZ/KsMAwDBAVycGADBAJycGgDBAKW8ugDBAKW8vgwDQYJKoZIhvcNAQELBQAD
ggEBABfW3X9jUnTHRpa9/LGyFxHVhTTXH1qp1SDSGUpATRbPKdWDFRfPxR6nWoWL
MmIry2xrfbZQAJXdhMXiQIRcKllpBg3nnCOkyt74707KgKe2Foxm9YYxM1ljv0rg
Iu2S2dDNanI6pqlDjmBvpYg+89jPEVFBL6YGZlVxVMh4A2tjJfsr9uck1dKZk8fP
MGpFEkKowCZlMWI05BQjRLPGqJ6VPB8xMwJ9XhAjHoA+uv1fhS/++snrdZTi1p4t
8oPzRVuTnDBzdR2OXqksorw5zowraZOio2LcSGfYE1utjCbSM9AJMv3+2K/wKzHr
659X8vzLUk8Ai32m5Hxd3FjCqGA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:38 2024 by rpki-client on console-ams.rpki-client.org