Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer
File: JAYub_eOGiv-CxWIf_OE9ltu6qA.cer (raw, json)
Hash identifier: zqfcimCc/oa6VljRy57qzWIZcsIPYW51XwpB3Txv+wc=
Subject key identifier: 24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AECB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:21:29 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 9814
IP: 125.96.0.0 -- 125.98.255.255
IP: 180.202.0.0/15
IP: 210.72.224.0 -- 210.72.247.255
IP: 211.99.0.0/19
IP: 211.160.0.0/16
IP: 2402:3c00::/32
IP: 2408:6000::/24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 10:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44747 (0xaecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:21:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:98:8c:c1:16:6e:e1:d0:1b:34:93:82:c2:
41:5b:62:4f:47:e9:2a:32:b0:ea:a8:81:0d:b7:2a:
46:8b:e7:21:0e:c0:e0:15:4b:20:46:bd:5d:17:b3:
68:5e:ae:a0:9a:7f:54:2e:72:27:b0:17:44:2e:38:
77:e3:84:4f:8e:b5:e3:20:8c:dd:86:3d:80:13:5b:
30:71:b0:cc:58:f8:de:27:93:11:61:72:07:95:3a:
23:05:de:58:ac:5c:3f:c7:d4:27:83:1c:de:20:b5:
62:13:72:f9:c2:ab:d1:26:e6:35:2b:dd:6e:80:fa:
46:72:f4:20:2b:75:fa:c2:90:09:e0:18:74:36:5c:
48:b8:81:fc:4d:2b:7d:22:2b:1f:74:82:83:14:72:
25:af:c2:9f:c2:90:18:d5:f9:2d:85:9b:e2:35:a5:
b4:1c:2b:58:29:d9:32:22:98:cf:3a:ad:1e:a9:de:
1b:3a:c0:de:5e:0e:52:ad:5d:c5:d2:df:83:53:36:
78:da:2c:1d:dc:d3:10:47:c0:4f:37:eb:01:4c:c8:
06:3b:cf:a7:b4:a7:64:19:27:1b:ba:d5:c9:06:8e:
9e:41:2b:3c:8a:22:3c:d3:60:34:ea:d1:79:de:a8:
94:fe:8e:a2:7b:a4:4a:9d:dc:29:1e:e4:70:ce:1f:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9814
sbgp-ipAddrBlock: critical
IPv4:
125.96.0.0-125.98.255.255
180.202.0.0/15
210.72.224.0-210.72.247.255
211.99.0.0/19
211.160.0.0/16
IPv6:
2402:3c00::/32
2408:6000::/24
Signature Algorithm: sha256WithRSAEncryption
24:d1:42:f7:45:fa:59:de:e7:98:ed:76:88:cc:25:2a:2d:b1:
a5:8e:68:d7:9f:18:76:80:69:6f:dc:c3:0b:bc:92:eb:22:3e:
37:26:c8:6d:0a:4b:98:08:1d:8f:58:1d:0d:84:fc:2b:09:f6:
de:41:a5:22:e6:06:b0:1b:04:31:1f:84:16:ad:d4:eb:fc:b4:
1f:d0:c5:e1:1c:4d:36:fe:9e:40:c1:21:6c:a1:60:45:85:7b:
d2:ee:51:44:d3:ed:8a:68:49:af:3f:11:29:2a:dd:f2:26:7a:
c7:2c:56:24:4f:e0:ac:d2:ec:a3:02:64:3a:8d:d3:f2:38:97:
ad:c3:47:e3:5a:94:ec:8c:39:29:21:c1:fe:66:39:5f:f9:a8:
5e:63:8f:e3:4e:a6:49:e6:76:04:ce:b8:43:90:cc:80:11:33:
32:98:41:a8:e4:19:dd:d7:9d:80:22:37:5b:22:a5:ce:4b:3a:
07:e0:fd:6f:c4:04:26:ed:40:02:46:20:5c:80:69:f3:09:95:
35:07:89:4d:56:11:8f:c1:4b:e1:f2:5a:5b:b6:fd:04:de:9b:
f0:26:58:00:1a:d0:d4:9b:7e:32:e0:49:ee:a5:76:9c:97:4b:
e5:6f:4b:9d:dc:49:aa:b2:ff:9e:e1:9c:ac:66:dc:bd:79:22:
53:4a:34:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:49:00 2024 by rpki-client on console-fra.rpki-client.org