Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/JAYub_eOGiv-CxWIf_OE9ltu6qA.cer
File: JAYub_eOGiv-CxWIf_OE9ltu6qA.cer (raw, json)
Hash identifier: RUnsXwE8lyZ2f5qAFy0jtdOYqMz3Gyq3oRYRHhFOw6Q=
Subject key identifier: 24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:11:56 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 9814
IP: 125.96.0.0 -- 125.98.255.255
IP: 180.202.0.0/15
IP: 210.72.224.0 -- 210.72.247.255
IP: 211.99.0.0/19
IP: 211.160.0.0/16
IP: 2402:3c00::/32
IP: 2408:6000::/24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52737 (0xce01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Apr 3 08:11:56 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=24062E6FF78E1A2BFE0B15887FF384F65B6EEAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:98:8c:c1:16:6e:e1:d0:1b:34:93:82:c2:
41:5b:62:4f:47:e9:2a:32:b0:ea:a8:81:0d:b7:2a:
46:8b:e7:21:0e:c0:e0:15:4b:20:46:bd:5d:17:b3:
68:5e:ae:a0:9a:7f:54:2e:72:27:b0:17:44:2e:38:
77:e3:84:4f:8e:b5:e3:20:8c:dd:86:3d:80:13:5b:
30:71:b0:cc:58:f8:de:27:93:11:61:72:07:95:3a:
23:05:de:58:ac:5c:3f:c7:d4:27:83:1c:de:20:b5:
62:13:72:f9:c2:ab:d1:26:e6:35:2b:dd:6e:80:fa:
46:72:f4:20:2b:75:fa:c2:90:09:e0:18:74:36:5c:
48:b8:81:fc:4d:2b:7d:22:2b:1f:74:82:83:14:72:
25:af:c2:9f:c2:90:18:d5:f9:2d:85:9b:e2:35:a5:
b4:1c:2b:58:29:d9:32:22:98:cf:3a:ad:1e:a9:de:
1b:3a:c0:de:5e:0e:52:ad:5d:c5:d2:df:83:53:36:
78:da:2c:1d:dc:d3:10:47:c0:4f:37:eb:01:4c:c8:
06:3b:cf:a7:b4:a7:64:19:27:1b:ba:d5:c9:06:8e:
9e:41:2b:3c:8a:22:3c:d3:60:34:ea:d1:79:de:a8:
94:fe:8e:a2:7b:a4:4a:9d:dc:29:1e:e4:70:ce:1f:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:2E:6F:F7:8E:1A:2B:FE:0B:15:88:7F:F3:84:F6:5B:6E:EA:A0
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/80/JAYub_eOGiv-CxWIf_OE9ltu6qA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9814
sbgp-ipAddrBlock: critical
IPv4:
125.96.0.0-125.98.255.255
180.202.0.0/15
210.72.224.0-210.72.247.255
211.99.0.0/19
211.160.0.0/16
IPv6:
2402:3c00::/32
2408:6000::/24
Signature Algorithm: sha256WithRSAEncryption
82:83:f8:52:b4:95:6e:9d:0a:61:c5:d2:41:55:81:4c:d7:ca:
de:98:f8:87:29:ae:92:45:70:f7:8a:09:62:f1:0c:95:91:a5:
6c:71:4b:8e:89:3d:2d:b2:81:17:f5:ad:9a:c8:6d:78:64:13:
ef:dd:b9:a0:b9:b7:06:ff:51:6a:8e:dc:99:ab:7a:be:68:e5:
cb:47:81:39:9e:47:fd:fc:22:c1:6d:96:b3:22:70:47:18:64:
70:f8:46:64:7e:9d:80:7b:68:a5:92:70:f1:2d:32:14:d7:7f:
e1:34:3e:44:1e:8c:f3:af:5e:06:b2:e3:a5:f9:46:ae:98:d1:
64:a6:0b:b9:a6:d1:1c:af:36:11:10:f5:67:b3:b0:66:c8:64:
44:af:12:59:30:97:b1:53:4c:bb:a5:7a:84:c9:e2:6a:94:d3:
28:35:d8:4a:77:81:ad:8d:83:be:a5:52:24:33:01:8a:6d:20:
a2:d7:79:73:ad:de:61:60:f9:18:4a:80:3f:31:82:a7:9c:47:
05:cc:b1:90:c9:c5:89:c9:8c:98:d9:3c:51:aa:7d:d1:b9:2e:
1f:54:46:46:5a:0b:27:62:83:a3:51:09:bc:03:3d:44:67:d3:
77:30:e5:3d:1b:ef:48:f9:51:7f:fc:25:52:29:2c:70:8a:ac:
9e:83:46:3a
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAM4BMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODExNTZaFw0yNjA0MDMwODAwMDlaMDMx
MTAvBgNVBAMTKDI0MDYyRTZGRjc4RTFBMkJGRTBCMTU4ODdGRjM4NEY2NUI2RUVB
QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBpiMwRZu4dAbNJOC
wkFbYk9H6SoysOqogQ23KkaL5yEOwOAVSyBGvV0Xs2herqCaf1QuciewF0QuOHfj
hE+OteMgjN2GPYATWzBxsMxY+N4nkxFhcgeVOiMF3lisXD/H1CeDHN4gtWITcvnC
q9Em5jUr3W6A+kZy9CArdfrCkAngGHQ2XEi4gfxNK30iKx90goMUciWvwp/CkBjV
+S2Fm+I1pbQcK1gp2TIimM86rR6p3hs6wN5eDlKtXcXS34NTNnjaLB3c0xBHwE83
6wFMyAY7z6e0p2QZJxu61ckGjp5BKzyKIjzTYDTq0XneqJT+jqJ7pEqd3Cke5HDO
H5OtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJAYub/eOGiv+CxWIf/OE9ltu6qAw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHUBggrBgEFBQcBCwSBxzCBxDA3BggrBgEF
BQcwBYYrcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzgw
LzBWBggrBgEFBQcwCoZKcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzgwL0pBWXViX2VPR2l2LUN4V0lmX09FOWx0dTZxQS5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWwwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICJlYwWAYIKwYBBQUHAQcBAf8ESTBHMDAEAgAB
MCowCgMDBX1gAwMAfWIDAwG0yjAMAwQF0kjgAwQD0kjwAwQF02MAAwMA06AwEwQC
AAIwDQMFACQCPAADBAAkCGAwDQYJKoZIhvcNAQELBQADggEBAIKD+FK0lW6dCmHF
0kFVgUzXyt6Y+IcprpJFcPeKCWLxDJWRpWxxS46JPS2ygRf1rZrIbXhkE+/duaC5
twb/UWqO3Jmrer5o5ctHgTmeR/38IsFtlrMicEcYZHD4RmR+nYB7aKWScPEtMhTX
f+E0PkQejPOvXgay46X5Rq6Y0WSmC7mm0RyvNhEQ9WezsGbIZESvElkwl7FTTLul
eoTJ4mqU0yg12Ep3ga2Ng76lUiQzAYptIKLXeXOt3mFg+RhKgD8xgqecRwXMsZDJ
xYnJjJjZPFGqfdG5Lh9URkZaCydig6NRCbwDPURn03cw5T0b70j5UX/8JVIpLHCK
rJ6DRjo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:44 2025 by rpki-client