Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
File: OrqLQlIyvliWg5beMqjrWgXuplg.cer (raw, json)
Hash identifier: 1Zs508/Z/BT68b7gvq6OJVkgI6rEP4i2GQAgKka1OYg=
Subject key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BBEB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:53:19 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 45.115.228.0/22
IP: 45.127.216.0/22
IP: 103.56.8.0/22
IP: 103.196.204.0/22
IP: 103.207.48.0/22
IP: 210.16.104.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48107 (0xbbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:53:19 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:13:69:d0:e7:46:c3:70:52:5d:34:ad:e2:
6e:e7:01:c8:4c:12:db:32:46:0f:c9:3c:c7:7e:aa:
c9:b8:cc:48:f0:91:06:6e:f4:3a:36:d0:e9:79:6c:
36:18:db:37:77:be:eb:26:df:73:d8:e3:25:53:9a:
57:42:08:ef:76:5d:cf:c0:38:65:33:8f:ee:ea:3f:
48:41:4d:8a:a2:e0:38:2d:28:a9:e2:01:04:50:2e:
0a:58:48:ac:97:23:6c:58:a7:ce:c3:a9:e9:c4:3d:
95:df:d0:9b:3d:9c:b9:39:cf:cd:5c:bd:bf:45:74:
9f:90:31:03:89:fb:41:2b:74:65:de:ec:e7:08:44:
fa:7d:1d:e5:a5:fe:01:50:ea:16:3d:b5:c6:32:bf:
e1:49:4d:5f:18:8f:b7:59:c5:f6:8f:8d:8f:0d:c2:
ad:9d:cb:f7:c1:3e:41:a9:39:1c:07:1f:89:3a:9a:
e3:bb:e1:86:27:80:56:e2:a2:39:18:10:60:b2:2b:
86:11:0e:95:71:85:15:6d:6d:dc:13:80:67:5d:13:
8f:85:ef:d3:d2:cf:8a:72:1c:2b:7e:ba:8b:e4:a2:
00:6a:c1:de:4d:b0:4c:87:d6:f2:9b:cf:d3:45:23:
4c:52:eb:cf:a2:58:e0:fc:26:25:1c:0f:f9:5f:37:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.228.0/22
45.127.216.0/22
103.56.8.0/22
103.196.204.0/22
103.207.48.0/22
210.16.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:59:5f:d8:db:49:7a:d1:9c:42:8e:29:14:1e:4c:33:90:3a:
3c:16:d2:2f:5b:8e:85:02:21:01:6c:71:1c:2c:a6:a6:1f:be:
8a:6f:86:da:b2:e8:76:bc:1d:12:af:11:46:2a:a2:53:0c:e9:
96:d5:46:c4:12:ec:30:be:88:b4:18:7d:b8:8d:66:19:ed:d3:
fc:8d:2a:7d:4d:9f:9b:69:ba:40:9e:7d:e3:44:e0:67:d4:7c:
b7:b7:8f:d5:aa:3b:ec:da:67:8f:1e:7f:60:0c:28:6b:68:58:
a5:e8:14:47:88:4b:f8:ef:5c:6a:56:be:52:b8:41:58:ed:f4:
d6:95:cd:ea:93:a8:e4:b0:82:0b:4a:e0:ec:0d:4e:50:b1:18:
ac:14:03:e9:ca:45:84:11:64:de:c2:65:85:ee:2f:37:20:f6:
5a:03:c7:98:c3:46:20:f1:a7:d0:4b:c6:12:a1:6b:7f:b9:1d:
55:e3:30:38:6d:46:6f:36:c6:77:72:5b:d2:b9:2d:0f:46:a8:
cd:c1:b0:78:d9:0c:97:d9:0e:25:db:e1:01:26:a1:c5:a8:fa:
49:6b:f7:a9:9f:e2:de:0d:5d:6f:00:e9:da:5b:cc:a3:89:a8:
0c:40:b2:e0:4a:40:7e:96:a3:ad:2d:53:7f:c9:22:80:3d:9b:
18:30:41:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:28 2024 by rpki-client on console-ams.rpki-client.org