Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
File: O3WyLEecFpumBZHB3tRCDFNoHbo.cer (raw, json)
Hash identifier: CkYiRaAE/T5KH4ST+eWoQ11jXV92p1LLg4uATxgv3eU=
Subject key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AE8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:20:45 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 58993
IP: 27.0.160.0/22
IP: 43.228.116.0/22
IP: 43.243.12.0/22
IP: 43.254.88.0/22
IP: 103.82.224.0/22
IP: 103.208.12.0/22
IP: 103.233.52.0/22
IP: 103.238.132.0/22
IP: 182.50.112.0/20
IP: 223.223.192.0/20
IP: 2404:1c80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44683 (0xae8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:20:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:10:28:dd:a3:cf:eb:82:0e:9b:67:b4:13:
b8:c0:28:36:7f:44:ad:a3:24:3f:ca:76:0a:83:e2:
2a:3d:c2:2e:5b:cc:d6:88:7b:19:15:2e:d8:7b:b5:
de:6b:a0:d4:42:95:b2:76:8c:6c:c7:ac:6f:7c:d8:
e6:9a:fc:a2:0c:46:75:88:33:8a:dd:52:e6:9b:bc:
65:42:92:78:df:e3:38:aa:89:c5:da:27:2f:20:fb:
9d:33:10:bb:27:bc:4e:bb:62:fb:e5:7c:d0:f2:b6:
80:e1:9b:56:ec:32:7a:99:7e:91:e2:3d:29:69:40:
28:df:8a:e8:8c:e9:17:64:07:7a:8f:f6:39:8b:a8:
d4:92:9f:31:a6:bd:c3:a9:b0:ac:63:5a:e7:56:8e:
15:75:9b:eb:af:f8:de:01:0f:45:56:c5:b2:e6:5d:
cb:73:80:a0:c4:75:fa:05:15:49:dd:be:13:67:9e:
5f:ef:07:47:b7:d9:e4:a0:e4:27:b3:c6:34:e2:58:
55:60:57:dd:29:a5:68:a7:5c:ee:99:cc:77:0a:92:
91:65:d0:41:a9:22:8d:64:a7:b3:51:1a:1d:8b:46:
a8:f2:a0:9a:f4:05:a7:d2:a4:50:e6:c8:a3:c5:50:
15:2c:3a:8d:25:50:9d:b3:c8:5b:0b:2e:67:2c:43:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58993
sbgp-ipAddrBlock: critical
IPv4:
27.0.160.0/22
43.228.116.0/22
43.243.12.0/22
43.254.88.0/22
103.82.224.0/22
103.208.12.0/22
103.233.52.0/22
103.238.132.0/22
182.50.112.0/20
223.223.192.0/20
IPv6:
2404:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
2e:8d:ba:e8:35:7e:21:be:6a:41:f4:3b:c5:b7:20:05:68:9a:
79:2f:5a:86:1a:73:86:dc:74:8f:9a:c9:7c:83:f9:6c:05:ef:
7e:55:81:72:9c:4f:2e:41:85:a0:c7:88:bc:84:21:e1:c4:40:
a5:93:c8:0c:6b:aa:ed:54:17:24:65:70:ba:e0:ce:ce:da:31:
7e:00:c2:a2:7c:d2:3a:11:ff:1f:a2:36:7d:2c:36:62:59:e8:
37:85:32:72:63:0d:4d:27:b4:62:a7:fb:a1:93:07:26:63:e1:
57:d0:44:bc:14:bf:ec:3c:04:14:9e:47:fd:0f:a6:86:d7:c4:
91:08:7d:25:91:0a:87:4e:3c:88:3f:45:d7:71:08:6e:0f:4c:
f4:3d:3d:16:76:42:bf:f3:40:fd:da:be:29:9b:fb:a2:fa:13:
52:58:c1:bc:4a:b6:54:8b:6a:c3:13:17:0d:b6:78:63:c3:a1:
7c:0a:f9:eb:22:6e:97:47:99:b2:f4:d6:8b:39:16:1e:f4:cc:
a9:5a:85:f2:8e:69:b9:23:9e:39:c7:af:5c:f1:f2:8a:54:eb:
d0:01:91:1f:9e:cf:a8:74:17:7e:7f:5b:49:07:fb:c9:25:48:
11:5d:4f:65:f3:62:59:37:45:ac:ad:23:a4:22:f4:d2:9a:65:
37:8d:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:38:45 2024 by rpki-client on console-ams.rpki-client.org