Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HsPdz0dl7wGHxupiZgyDpkGedEQ.cer
File: HsPdz0dl7wGHxupiZgyDpkGedEQ.cer (raw, json)
Hash identifier: hEBOqxGbd97l/tDNPeWobXdUome3Vdwv1NxlIcqZuMA=
Subject key identifier: 1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AC02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 24 Nov 2023 06:21:50 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: IP: 43.247.208.0/22
IP: 49.221.0.0/16
IP: 103.23.56.0/22
IP: 103.24.184.0/22
IP: 115.172.0.0/19
IP: 115.172.96.0 -- 115.172.191.255
IP: 124.14.64.0 -- 124.14.191.255
IP: 124.14.224.0/19
IP: 124.15.128.0/18
IP: 124.254.0.0/18
IP: 175.188.128.0/17
IP: 175.190.0.0/17
IP: 180.88.0.0 -- 180.89.127.255
IP: 180.91.128.0/17
IP: 211.161.0.0 -- 211.161.59.255
IP: 211.161.64.0/19
IP: 211.161.112.0 -- 211.161.191.255
IP: 211.162.0.0/18
IP: 211.162.80.0 -- 211.162.111.255
IP: 211.162.128.0/18
IP: 211.162.196.0 -- 211.162.255.255
IP: 220.112.128.0/18
IP: 220.112.208.0/20
IP: 220.113.0.0 -- 220.113.149.255
IP: 220.113.168.0 -- 220.113.223.255
IP: 220.115.0.0/19
IP: 220.115.64.0 -- 220.115.247.255
IP: 223.210.0.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 May 2024 19:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44034 (0xac02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Nov 24 06:21:50 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=1EC3DDCF4765EF0187C6EA62660C83A6419E7444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:8b:b4:3c:44:1f:6c:c8:6f:11:f7:3f:5a:
e8:98:b2:2f:95:61:3d:3a:38:0b:56:8b:2e:93:a2:
bf:75:ab:08:35:ec:c0:51:e3:7d:6a:43:d3:b6:49:
d1:df:5b:cd:e1:61:6f:8c:46:6c:5e:4e:74:81:ce:
15:35:d8:c9:77:5d:e1:48:10:f4:71:59:4d:3d:5d:
6d:59:10:a4:97:11:79:8a:59:3f:c0:cc:f7:0a:f3:
dc:6d:3c:6c:6f:bc:18:ba:c3:69:c1:a0:0a:55:eb:
ce:bb:bf:fe:ca:7c:2d:80:0f:60:ce:a0:be:1f:85:
85:6e:21:fb:fd:ce:18:46:1b:f6:13:cb:b2:5f:00:
7e:d4:c7:71:25:16:8d:c6:12:c9:b0:af:d9:6a:5e:
63:d1:80:31:94:ab:a7:0b:5a:b8:17:81:a1:97:9d:
87:fb:5b:ac:45:19:d2:9c:93:82:94:f0:a3:7a:33:
ac:9f:88:b9:da:bb:f8:74:92:4e:50:dc:29:aa:aa:
3b:37:dc:2f:14:7e:a2:25:1b:fd:5b:4d:63:39:62:
b2:12:a9:21:12:b3:60:ba:0a:b5:0b:3c:6b:82:3d:
89:6a:3f:48:e6:b8:e6:01:47:a9:15:b1:16:e6:38:
36:c0:fd:8e:db:db:95:fe:6e:93:5a:4d:ce:02:2d:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.208.0/22
49.221.0.0/16
103.23.56.0/22
103.24.184.0/22
115.172.0.0/19
115.172.96.0-115.172.191.255
124.14.64.0-124.14.191.255
124.14.224.0/19
124.15.128.0/18
124.254.0.0/18
175.188.128.0/17
175.190.0.0/17
180.88.0.0-180.89.127.255
180.91.128.0/17
211.161.0.0-211.161.59.255
211.161.64.0/19
211.161.112.0-211.161.191.255
211.162.0.0/18
211.162.80.0-211.162.111.255
211.162.128.0/18
211.162.196.0-211.162.255.255
220.112.128.0/18
220.112.208.0/20
220.113.0.0-220.113.149.255
220.113.168.0-220.113.223.255
220.115.0.0/19
220.115.64.0-220.115.247.255
223.210.0.0/17
Signature Algorithm: sha256WithRSAEncryption
26:65:55:75:84:99:98:51:a2:58:61:c0:15:3a:c3:ba:00:47:
3c:95:97:20:09:a9:c8:10:55:f3:82:27:c0:d6:fa:e5:0f:26:
04:71:de:56:4e:b8:06:78:f8:19:db:ef:23:9c:4e:ba:d7:03:
cf:19:2b:7c:f1:b1:fc:4c:aa:01:92:54:5c:14:08:82:63:6a:
3f:19:13:46:dc:b9:54:56:ec:a6:81:f9:ad:e9:af:9a:f6:59:
fc:09:6d:4c:68:a3:fb:d2:9b:76:98:90:9e:75:66:4c:3a:13:
a1:3e:f2:e8:d2:6b:84:a3:f8:8a:1b:07:42:6a:10:a8:39:87:
02:c1:54:75:b2:d4:bf:d6:38:e7:12:30:e2:3e:75:b7:67:f7:
01:2d:ce:7e:ec:3e:c0:63:ea:6f:0c:61:a5:48:3b:12:7a:e4:
83:6f:05:75:dc:ef:98:a6:88:28:6d:dc:40:25:89:ec:32:e9:
66:10:8a:e2:96:94:55:51:5d:2f:3e:ba:4a:cc:0c:fa:f5:76:
ee:a9:3c:21:90:e4:3c:7e:b4:8c:e3:71:5e:df:5d:95:94:c5:
95:02:52:63:91:d7:28:dc:a7:7d:6b:aa:94:7d:81:51:79:b2:
eb:45:a1:c4:37:d8:e0:d3:db:de:16:73:01:43:47:75:1c:aa:
67:7d:5a:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIDAKwCMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yMzExMjQwNjIxNTBaFw0yNDEwMDgwMDE2MzNaMDMx
MTAvBgNVBAMTKDFFQzNERENGNDc2NUVGMDE4N0M2RUE2MjY2MEM4M0E2NDE5RTc0
NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sYu0PEQfbMhvEfc/
WuiYsi+VYT06OAtWiy6Tor91qwg17MBR431qQ9O2SdHfW83hYW+MRmxeTnSBzhU1
2Ml3XeFIEPRxWU09XW1ZEKSXEXmKWT/AzPcK89xtPGxvvBi6w2nBoApV6867v/7K
fC2AD2DOoL4fhYVuIfv9zhhGG/YTy7JfAH7Ux3ElFo3GEsmwr9lqXmPRgDGUq6cL
WrgXgaGXnYf7W6xFGdKck4KU8KN6M6yfiLnau/h0kk5Q3Cmqqjs33C8UfqIlG/1b
TWM5YrISqSESs2C6CrULPGuCPYlqP0jmuOYBR6kVsRbmODbA/Y7b25X+bpNaTc4C
LXYzAgMBAAGjggNHMIIDQzAdBgNVHQ4EFgQUHsPdz0dl7wGHxupiZgyDpkGedEQw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzU4
My8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC81ODMvSHNQZHowZGw3d0dIeHVwaVpneURwa0dlZEVRLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDCC
AREGCCsGAQUFBwEHAQH/BIIBADCB/TCB+gQCAAEwgfMDBAIr99ADAwAx3QMEAmcX
OAMEAmcYuAMEBXOsADAMAwQFc6xgAwQGc6yAMAwDBAZ8DkADBAZ8DoADBAV8DuAD
BAZ8D4ADBAZ8/gADBAevvIADBAevvgAwCwMDA7RYAwQHtFkAAwQHtFuAMAsDAwDT
oQMEAtOhOAMEBdOhQDAMAwQE06FwAwQG06GAAwQG06IAMAwDBATTolADBATTomAD
BAbTooAwCwMEAtOixAMDANOiAwQG3HCAAwQE3HDQMAsDAwDccQMEAdxxlDAMAwQD
3HGoAwQF3HHAAwQF3HMAMAwDBAbcc0ADBAPcc/ADBAff0gAwDQYJKoZIhvcNAQEL
BQADggEBACZlVXWEmZhRolhhwBU6w7oARzyVlyAJqcgQVfOCJ8DW+uUPJgRx3lZO
uAZ4+Bnb7yOcTrrXA88ZK3zxsfxMqgGSVFwUCIJjaj8ZE0bcuVRW7KaB+a3pr5r2
WfwJbUxoo/vSm3aYkJ51Zkw6E6E+8ujSa4Sj+IobB0JqEKg5hwLBVHWy1L/WOOcS
MOI+dbdn9wEtzn7sPsBj6m8MYaVIOxJ65INvBXXc75imiCht3EAliewy6WYQiuKW
lFVRXS8+ukrMDPr1du6pPCGQ5Dx+tIzjcV7fXZWUxZUCUmOR1yjcp31rqpR9gVF5
sutFocQ32ODT294WcwFDR3Ucqmd9WrI=
-----END CERTIFICATE-----
Generated at Sat May 18 15:40:30 2024 by rpki-client on console-fra.rpki-client.org