Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
File: DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer (raw, json)
Hash identifier: 4+5eMkQ27SduPwDRnFP+tAdXDCaUukl4uuxJQLDDoF8=
Subject key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:23:22 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 59067
IP: 103.25.156.0/24
IP: 103.36.96.0/22
IP: 103.202.116.0/22
IP: 103.255.140.0/22
IP: 111.221.28.0/24
IP: 202.89.232.0/21
IP: 2401:a980::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 May 2024 11:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44857 (0xaf39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:56:dc:15:6f:dc:46:a8:8b:4d:97:4e:cf:
10:d2:ae:42:2d:09:7f:77:85:0c:18:d9:9e:04:e4:
a9:9c:20:3c:b7:a6:14:3a:ac:95:8b:bd:d7:af:dc:
d3:3c:cb:bd:ff:bf:5a:57:95:a0:2c:6f:9d:d3:0d:
1a:01:c6:ee:93:c9:65:52:e3:46:3a:93:15:c8:9f:
49:6d:48:32:15:f0:c4:d3:66:7b:d9:8b:bd:c3:9a:
4f:18:4d:1d:22:48:21:74:b2:92:2c:f6:9a:3f:6b:
73:4c:14:03:9e:15:29:01:3a:95:91:4a:64:4d:f1:
77:41:3c:13:2f:63:ee:b8:d1:a5:f4:b9:80:99:d0:
fb:d9:b7:38:a8:f9:54:da:8f:5d:73:90:a5:bc:46:
ce:84:e4:cf:2f:64:81:26:85:0c:44:31:bb:45:b6:
ef:4e:57:1c:e1:4f:9e:5c:4e:fb:2f:07:77:0f:a7:
e6:01:87:af:a1:45:10:67:05:de:c6:ef:4a:9d:d8:
f3:7d:32:34:2b:26:62:7c:fb:30:11:13:8c:f1:b4:
bc:60:36:d8:70:30:c0:9f:25:9d:49:66:4d:47:cf:
6c:9c:fd:c5:9f:ae:bc:84:d0:65:0d:a6:8f:1e:6b:
29:07:10:2b:f6:7b:46:71:6d:71:28:c0:3e:16:b9:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59067
sbgp-ipAddrBlock: critical
IPv4:
103.25.156.0/24
103.36.96.0/22
103.202.116.0/22
103.255.140.0/22
111.221.28.0/24
202.89.232.0/21
IPv6:
2401:a980::/32
Signature Algorithm: sha256WithRSAEncryption
76:a9:34:bd:98:da:96:17:1d:5c:da:83:8f:bd:0e:5a:0a:35:
2a:46:08:09:52:23:d6:80:66:aa:5c:8a:45:ba:81:9c:50:2a:
6d:ce:56:9a:4c:98:d0:72:b7:db:4d:26:aa:49:b6:2f:f1:18:
e3:f4:f5:04:e7:85:a9:aa:7e:14:50:e6:65:70:b7:ec:2d:a2:
19:1e:d8:f9:0b:ee:7d:1c:8d:cf:3b:44:00:c2:e0:49:a8:40:
83:23:ba:a0:32:f1:8d:02:2b:58:0d:92:4f:b0:ab:16:0d:0f:
05:57:fb:e2:93:2d:63:8f:87:bc:24:9a:b6:ef:86:88:d4:dc:
f6:39:ce:85:37:38:88:1c:52:06:d2:9a:32:85:45:56:da:0d:
d2:a0:57:be:1a:10:bb:e3:e3:fa:a8:d2:74:3e:47:c1:c1:10:
ee:0b:3a:5a:5e:33:bd:d9:d9:11:6f:13:64:2d:7f:70:df:d5:
d5:a8:24:4b:64:f7:d6:cf:d6:bc:7d:f4:e0:cb:29:4d:a3:04:
91:f7:62:78:ae:b4:cd:17:e9:e1:73:6a:47:b3:11:11:7b:0b:
ef:c3:80:59:e8:cf:db:b4:d6:72:12:d0:1a:bf:24:74:52:4f:
ed:23:94:30:f0:5d:25:16:25:d4:bc:ed:7e:60:39:45:7e:69:
80:38:5c:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org