Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
File: O3WyLEecFpumBZHB3tRCDFNoHbo.cer (raw, json)
Hash identifier: 3UELoJ1wI7zDnmTPGoe7nSk/nBYPZqWt9/ZnbWJS2sU=
Subject key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:50:19 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 58993
IP: 27.0.160.0/22
IP: 43.228.116.0/22
IP: 43.243.12.0/22
IP: 43.254.88.0/22
IP: 103.82.224.0/22
IP: 103.208.12.0/22
IP: 103.233.52.0/22
IP: 103.238.132.0/22
IP: 182.50.112.0/20
IP: 223.223.192.0/20
IP: 2404:1c80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47905 (0xbb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:50:19 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:10:28:dd:a3:cf:eb:82:0e:9b:67:b4:13:
b8:c0:28:36:7f:44:ad:a3:24:3f:ca:76:0a:83:e2:
2a:3d:c2:2e:5b:cc:d6:88:7b:19:15:2e:d8:7b:b5:
de:6b:a0:d4:42:95:b2:76:8c:6c:c7:ac:6f:7c:d8:
e6:9a:fc:a2:0c:46:75:88:33:8a:dd:52:e6:9b:bc:
65:42:92:78:df:e3:38:aa:89:c5:da:27:2f:20:fb:
9d:33:10:bb:27:bc:4e:bb:62:fb:e5:7c:d0:f2:b6:
80:e1:9b:56:ec:32:7a:99:7e:91:e2:3d:29:69:40:
28:df:8a:e8:8c:e9:17:64:07:7a:8f:f6:39:8b:a8:
d4:92:9f:31:a6:bd:c3:a9:b0:ac:63:5a:e7:56:8e:
15:75:9b:eb:af:f8:de:01:0f:45:56:c5:b2:e6:5d:
cb:73:80:a0:c4:75:fa:05:15:49:dd:be:13:67:9e:
5f:ef:07:47:b7:d9:e4:a0:e4:27:b3:c6:34:e2:58:
55:60:57:dd:29:a5:68:a7:5c:ee:99:cc:77:0a:92:
91:65:d0:41:a9:22:8d:64:a7:b3:51:1a:1d:8b:46:
a8:f2:a0:9a:f4:05:a7:d2:a4:50:e6:c8:a3:c5:50:
15:2c:3a:8d:25:50:9d:b3:c8:5b:0b:2e:67:2c:43:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58993
sbgp-ipAddrBlock: critical
IPv4:
27.0.160.0/22
43.228.116.0/22
43.243.12.0/22
43.254.88.0/22
103.82.224.0/22
103.208.12.0/22
103.233.52.0/22
103.238.132.0/22
182.50.112.0/20
223.223.192.0/20
IPv6:
2404:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
13:be:95:ef:e5:bb:0d:d8:4e:a7:85:5d:cc:2c:ca:66:95:25:
0c:32:80:f2:1a:9b:17:1e:22:1a:83:b6:83:02:33:38:83:a4:
e8:92:02:fc:ef:be:1b:83:1d:15:78:0e:75:de:6f:ab:1c:eb:
d8:f2:72:95:64:89:35:89:af:28:79:29:ac:f4:12:43:03:66:
f1:6b:58:cf:91:47:ed:6b:90:2d:30:2d:95:1a:b9:79:3e:54:
05:4e:5b:0c:82:4d:35:42:be:2d:1e:e4:b9:2d:22:ff:f7:87:
a9:3f:52:2d:eb:4d:18:a1:3a:dc:9c:d4:2b:33:a1:25:fe:20:
7e:71:d0:72:0c:2f:84:09:27:08:26:ad:67:1a:23:a4:72:be:
5a:6c:f2:1b:81:28:11:68:60:9e:1b:df:44:18:80:5d:a5:98:
bb:6d:8b:f8:98:a4:64:23:1b:7b:b0:94:91:18:5d:8e:11:7a:
c4:92:fc:e2:a8:b6:aa:8f:44:e3:90:e5:b4:0f:bc:55:42:24:
b2:bd:d7:43:1d:91:0a:79:4d:24:91:cc:25:e9:a4:7f:9f:e1:
0b:79:35:ed:09:5b:bd:3b:a9:23:b6:3a:bd:f8:c0:b1:41:9c:
3f:ab:fd:2f:a6:49:ec:62:39:2f:d8:aa:1d:56:10:f7:fd:b5:
94:a9:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org