Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer
File: D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.cer (raw, json)
Hash identifier: ULtSkvUr8vcFBcf5nODoYR1u7o29VQ7hGB48iffRtQw=
Subject key identifier: 0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:23:23 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 58832
IP: 43.247.176.0/20
IP: 43.254.136.0/22
IP: 101.239.0.0/16
IP: 103.227.136.0/22
IP: 103.237.248.0 -- 103.238.7.255
IP: 103.238.160.0/22
IP: 103.242.172.0/22
IP: 114.112.96.0 -- 114.112.107.255
IP: 150.242.232.0/22
IP: 150.242.248.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 May 2024 11:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44859 (0xaf3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:23:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0FD11CD59F4F5CA6635B0F7FAB4EA23C9D4EA2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d2:ad:0d:11:d1:7e:b6:99:0d:b7:9d:66:21:
9e:0e:f7:49:af:63:fd:2b:d7:51:50:89:10:44:9a:
bf:16:cd:26:e3:da:75:e4:12:4b:41:cb:b3:7b:e8:
7f:63:9e:9d:a7:af:7e:d7:4f:92:09:bc:0a:eb:68:
9b:32:9b:b9:63:b8:fe:3f:e3:d4:40:0a:9b:73:42:
31:89:97:a5:89:ec:0a:27:9b:fa:fb:6d:72:d4:3b:
6e:6d:64:75:46:51:ba:7b:d3:4a:c6:9e:dc:66:0e:
7a:27:c7:3c:84:1b:53:d2:74:e2:c4:2a:a0:d6:6c:
17:49:34:8e:c1:08:a4:d4:e8:f7:2e:46:ab:03:8e:
5c:73:ef:18:15:f9:32:53:24:66:20:32:7f:54:3f:
da:41:09:27:12:f8:43:02:b7:78:27:d3:e8:47:31:
cb:4e:9d:f3:cd:7f:62:d0:dd:2c:9a:af:35:85:f5:
9b:81:e8:76:6f:0b:4f:ec:62:d5:5a:74:47:d1:fa:
09:c5:07:c7:d0:e1:54:90:04:12:7e:13:d3:3c:9b:
c4:8a:59:0f:eb:c0:71:2b:9a:c3:9f:d3:3d:67:21:
93:73:4f:0f:6e:b2:a1:14:dc:83:33:d7:32:f6:2d:
b2:3a:28:1d:89:55:a3:57:b8:99:97:05:f9:8d:2a:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:1C:D5:9F:4F:5C:A6:63:5B:0F:7F:AB:4E:A2:3C:9D:4E:A2:EF
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/646/D9Ec1Z9PXKZjWw9_q06iPJ1Oou8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58832
sbgp-ipAddrBlock: critical
IPv4:
43.247.176.0/20
43.254.136.0/22
101.239.0.0/16
103.227.136.0/22
103.237.248.0-103.238.7.255
103.238.160.0/22
103.242.172.0/22
114.112.96.0-114.112.107.255
150.242.232.0/22
150.242.248.0/22
Signature Algorithm: sha256WithRSAEncryption
58:10:8d:e3:b4:9b:1f:75:42:36:ae:06:09:83:7c:86:8a:ee:
04:c1:0b:22:72:ee:ee:2f:3b:28:47:0b:a6:e7:c1:ed:f2:23:
d7:92:9b:e6:97:32:ef:7a:2e:2d:bd:cd:ff:43:ca:eb:7f:3e:
ec:f3:91:5d:1b:66:1a:28:8f:3a:c4:2a:96:ad:52:8d:02:96:
43:6a:11:25:fe:5a:ee:7d:67:12:b7:a8:0e:54:91:af:6b:a0:
d8:36:9a:7a:fa:ec:00:75:12:4e:14:1b:17:03:38:17:73:9b:
ea:d2:50:05:e4:75:5e:a6:62:83:97:64:76:2b:20:f0:88:7d:
34:e9:4d:b3:e5:c8:f7:00:6c:32:8d:4d:4c:28:36:e8:a0:ff:
35:11:f6:94:68:09:75:76:6a:c6:df:1d:7e:07:d0:1c:b2:a7:
47:f0:67:9e:a0:e6:be:0e:bb:e9:3a:73:75:15:a7:bc:b2:6a:
ba:c8:cf:5d:0e:59:2f:dc:4c:d6:a5:e8:cf:c9:aa:28:b5:9b:
bc:fc:e4:c2:2a:a7:1c:a9:3a:9f:02:cc:ea:24:f4:b6:7e:3d:
83:4c:4c:0a:cd:b6:c4:c0:90:5d:99:b4:94:51:ba:c2:31:a6:
71:72:e2:c3:42:60:fe:02:72:3f:36:a0:6b:bb:48:92:15:06:
c8:ff:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org