Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GCxI0kg50SP5l56XkJ1BMn9OVj8.cer
File: GCxI0kg50SP5l56XkJ1BMn9OVj8.cer (raw, json)
Hash identifier: tbxd7sojhwDwub3I4SeNrPQA/9z+joI4423QKkI++1o=
Subject key identifier: 18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A307
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 11 Aug 2023 07:49:57 +0000
Certificate not after: Sat 10 Aug 2024 07:41:13 +0000
Subordinate resources: AS: 45075
AS: 55468
IP: 43.248.112.0/22
IP: 101.129.0.0/16
IP: 103.39.204.0/22
IP: 122.10.132.0/23
IP: 122.10.136.0/23
IP: 2400:d100::/32
IP: 2402:bac0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 00:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41735 (0xa307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Aug 11 07:49:57 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=182C48D24839D123F9979E97909D41327F4E563F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:93:c7:fb:2c:b5:be:33:2d:45:1c:c3:a5:
ce:8d:4a:03:f8:39:28:ea:17:94:6d:f4:7c:4e:43:
e3:4c:84:f5:7d:7c:38:e5:8e:f0:25:2c:c7:5e:16:
a1:ee:35:94:9b:e7:f4:2f:67:65:41:d1:11:b1:07:
a5:17:47:dd:31:f5:4c:0e:70:b7:94:d5:bd:46:ec:
2f:3a:bc:b8:a6:0e:cd:55:1d:07:25:a1:f6:1d:89:
68:8e:61:b6:48:f1:b8:af:33:16:92:97:ae:06:ab:
d7:90:8d:26:e0:63:4f:2c:4a:2a:b7:d4:2e:63:38:
ca:91:5b:f9:62:ca:fd:eb:4e:e1:04:f2:f9:ad:f4:
78:68:e7:77:9f:4a:5f:ca:73:cb:a7:4d:36:f0:43:
a1:f0:af:ce:18:78:e5:cc:51:9e:33:8a:58:db:84:
5f:9f:78:8d:d5:e9:c2:16:1e:9b:ce:5d:54:28:f9:
7a:fd:90:72:6a:6c:60:a4:b5:86:c0:4c:7e:91:3d:
6b:45:c6:7b:93:94:a1:28:ec:3c:fb:b9:aa:e5:2a:
80:26:ad:de:df:2b:b3:b9:76:24:cd:a8:3f:0e:4f:
40:fb:25:8c:c9:a9:f2:06:91:9e:48:ec:2b:29:42:
09:49:a7:f6:f9:e7:85:25:d0:c8:6e:97:1b:d5:99:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:48:D2:48:39:D1:23:F9:97:9E:97:90:9D:41:32:7F:4E:56:3F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/996/GCxI0kg50SP5l56XkJ1BMn9OVj8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45075
55468
sbgp-ipAddrBlock: critical
IPv4:
43.248.112.0/22
101.129.0.0/16
103.39.204.0/22
122.10.132.0/23
122.10.136.0/23
IPv6:
2400:d100::/32
2402:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
10:c9:a4:60:ac:54:06:e9:59:7e:83:24:c1:cc:1e:e5:f3:5a:
2d:cc:f1:45:61:7c:15:a1:b2:5a:b9:1d:68:cc:19:53:ae:bf:
b9:09:6a:28:a9:1d:e8:dd:33:87:32:f8:d1:5f:1b:51:73:91:
bf:da:d2:9c:0e:bc:42:2e:44:8d:52:c3:fd:1f:7b:c1:6e:98:
ae:25:9e:c2:6e:6e:67:17:0f:07:d0:9d:93:00:75:67:51:8b:
1c:86:7c:e0:f0:ef:f7:67:d3:c1:f8:4e:13:23:d4:ab:4c:c9:
4a:f5:cf:e5:73:d1:e5:a6:e2:01:66:f7:7a:2c:1f:9b:ad:f4:
e0:6d:18:46:78:c3:5b:d6:df:24:8c:26:1e:56:30:ea:ff:19:
e4:51:2e:4d:80:bb:18:fe:11:d3:22:3f:bd:bc:1b:76:7d:71:
c7:cf:b4:e8:e0:e6:56:9e:3a:3a:01:40:49:f6:9c:16:74:fa:
bd:47:61:70:00:8e:1c:da:12:9d:b3:fe:12:ad:4f:0d:f2:44:
dc:2a:b0:a3:42:b2:d4:6e:e6:a1:93:2b:44:ee:19:aa:88:01:
16:9d:4d:0f:97:df:30:60:13:d8:49:18:ad:93:e2:6f:29:81:
81:3b:fb:bb:1b:d3:0a:ed:e9:1a:66:43:be:bc:49:7a:d0:4f:
55:6d:ab:ce
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAKMHMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzA4MTEwNzQ5NTdaFw0yNDA4MTAwNzQxMTNaMDMx
MTAvBgNVBAMTKDE4MkM0OEQyNDgzOUQxMjNGOTk3OUU5NzkwOUQ0MTMyN0Y0RTU2
M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeiZPH+yy1vjMtRRzD
pc6NSgP4OSjqF5Rt9HxOQ+NMhPV9fDjljvAlLMdeFqHuNZSb5/QvZ2VB0RGxB6UX
R90x9UwOcLeU1b1G7C86vLimDs1VHQclofYdiWiOYbZI8bivMxaSl64Gq9eQjSbg
Y08sSiq31C5jOMqRW/liyv3rTuEE8vmt9Hho53efSl/Kc8unTTbwQ6Hwr84YeOXM
UZ4ziljbhF+feI3V6cIWHpvOXVQo+Xr9kHJqbGCktYbATH6RPWtFxnuTlKEo7Dz7
uarlKoAmrd7fK7O5diTNqD8OT0D7JYzJqfIGkZ5I7CspQglJp/b554Ul0MhulxvV
mR/HAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUGCxI0kg50SP5l56XkJ1BMn9OVj8w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzk5
Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC85OTYvR0N4STBrZzUwU1A1bDU2WGtKMUJNbjlPVmo4Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAf
BggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAsBMCAwDYrDBMBggrBgEFBQcBBwEB/wQ9
MDswIwQCAAEwHQMEAiv4cAMDAGWBAwQCZyfMAwQBegqEAwQBegqIMBQEAgACMA4D
BQAkANEAAwUAJAK6wDANBgkqhkiG9w0BAQsFAAOCAQEAEMmkYKxUBulZfoMkwcwe
5fNaLczxRWF8FaGyWrkdaMwZU66/uQlqKKkd6N0zhzL40V8bUXORv9rSnA68Qi5E
jVLD/R97wW6YriWewm5uZxcPB9CdkwB1Z1GLHIZ84PDv92fTwfhOEyPUq0zJSvXP
5XPR5abiAWb3eiwfm6304G0YRnjDW9bfJIwmHlYw6v8Z5FEuTYC7GP4R0yI/vbwb
dn1xx8+06ODmVp46OgFASfacFnT6vUdhcACOHNoSnbP+Eq1PDfJE3Cqwo0Ky1G7m
oZMrRO4ZqogBFp1ND5ffMGAT2EkYrZPibymBgTv7uxvTCu3pGmZDvrxJetBPVW2r
zg==
-----END CERTIFICATE-----
Generated at Sat May 18 19:21:09 2024 by rpki-client on console-fra.rpki-client.org