Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DLBMxaazmxSN1xDvXG4_LZOAtFU.cer
File: DLBMxaazmxSN1xDvXG4_LZOAtFU.cer (raw, json)
Hash identifier: tOgQGO8IwoJ/wohGFjAXUoYczcIskCGXtB5/wdnb8Zs=
Subject key identifier: 0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:55:42 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 55989
IP: 45.124.76.0/22
IP: 103.43.132.0/22
IP: 103.157.212.0/23
IP: 103.192.208.0/22
IP: 103.235.100.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48209 (0xbc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:55:42 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0CB04CC5A6B39B148DD710EF5C6E3F2D9380B455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:c6:32:88:0d:3d:7f:d7:d6:ce:f9:ee:ab:
6b:dd:e0:96:44:da:62:2e:12:ed:08:42:b9:15:23:
d1:a0:3c:86:ee:62:ad:db:96:42:6c:b0:5b:38:05:
3c:93:77:02:53:1e:db:42:3f:73:71:db:be:2a:f1:
8c:71:92:b5:42:87:8a:e4:5c:eb:be:a8:75:7e:6b:
dc:d0:fd:fc:31:02:be:6f:98:19:f7:4b:a6:26:0c:
7f:05:42:19:02:9a:94:07:9b:5b:65:ed:15:f9:58:
b1:49:f6:4f:bd:e6:51:67:19:d1:00:58:e1:3a:1e:
58:5f:4c:b0:ec:e9:ac:c6:70:bb:52:4c:6b:f7:df:
04:3d:91:b8:48:94:b6:20:59:51:16:bb:68:71:04:
fd:14:2c:06:c2:52:ab:c2:0e:60:3d:54:e1:ca:88:
21:9f:ce:8e:af:dd:27:22:74:eb:d2:f4:76:fd:8b:
9e:ed:c6:36:a1:b5:f8:80:23:8b:ce:9d:13:a8:af:
ef:c5:60:1e:69:2d:c9:79:16:e3:ea:56:e8:bd:ae:
b3:42:37:34:33:30:4d:dd:6b:25:fd:2c:3e:ce:e4:
93:84:94:8f:ba:a8:df:3d:12:e8:3f:0a:b1:ad:52:
cf:6e:1c:2a:ea:1b:d9:12:ce:46:57:49:7f:00:c1:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55989
sbgp-ipAddrBlock: critical
IPv4:
45.124.76.0/22
103.43.132.0/22
103.157.212.0/23
103.192.208.0/22
103.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:54:e3:bf:02:60:32:1e:05:af:83:72:d2:f8:75:79:3e:8a:
37:84:cc:35:36:93:27:b1:df:52:2d:b4:78:2c:30:76:b7:c7:
9a:2b:2b:f8:73:2f:14:73:b5:73:1d:1c:a0:54:26:1e:79:95:
47:12:67:f9:3b:54:1a:4d:a8:df:c1:0f:79:fe:24:04:2e:93:
b7:ac:96:b0:fe:4f:34:53:81:14:9f:fa:4a:e6:8a:08:31:a1:
e4:c3:6c:e8:5b:15:91:73:25:dd:81:09:29:3f:8b:9d:27:ca:
f8:49:16:86:e5:2c:ea:76:87:40:ad:7b:bf:0c:87:c7:6b:2b:
e4:15:2d:ce:b3:42:cd:10:63:e9:35:f7:53:fc:71:91:94:9c:
4e:36:33:30:48:63:32:e7:f7:85:64:b2:32:6d:ef:ce:c6:2f:
10:0c:eb:ca:6a:58:2d:91:50:8a:ed:2e:dc:19:2b:81:5e:bb:
83:31:be:01:6b:36:34:b4:cc:2e:83:9b:98:64:9b:e7:c1:16:
d3:0c:e5:95:5b:12:ff:b1:08:32:8c:43:85:bf:78:e8:f9:25:
0e:d3:8c:bc:12:7c:d2:da:21:0f:ea:c0:19:2f:84:a2:d3:96:
4e:a1:b2:e9:2b:64:7c:dc:bb:1b:3f:87:62:54:b6:1d:be:84:
e2:cf:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:25 2024 by rpki-client on console-fra.rpki-client.org