Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
File: OrqLQlIyvliWg5beMqjrWgXuplg.cer (raw, json)
Hash identifier: /ShCovWXJ77f70OFI7RIlV9g3qcqXQxTJtBIv2yDvlQ=
Subject key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:22:33 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 45.115.228.0/22
IP: 45.127.216.0/22
IP: 103.56.8.0/22
IP: 103.196.204.0/22
IP: 103.207.48.0/22
IP: 210.16.104.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 May 2024 15:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44835 (0xaf23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:13:69:d0:e7:46:c3:70:52:5d:34:ad:e2:
6e:e7:01:c8:4c:12:db:32:46:0f:c9:3c:c7:7e:aa:
c9:b8:cc:48:f0:91:06:6e:f4:3a:36:d0:e9:79:6c:
36:18:db:37:77:be:eb:26:df:73:d8:e3:25:53:9a:
57:42:08:ef:76:5d:cf:c0:38:65:33:8f:ee:ea:3f:
48:41:4d:8a:a2:e0:38:2d:28:a9:e2:01:04:50:2e:
0a:58:48:ac:97:23:6c:58:a7:ce:c3:a9:e9:c4:3d:
95:df:d0:9b:3d:9c:b9:39:cf:cd:5c:bd:bf:45:74:
9f:90:31:03:89:fb:41:2b:74:65:de:ec:e7:08:44:
fa:7d:1d:e5:a5:fe:01:50:ea:16:3d:b5:c6:32:bf:
e1:49:4d:5f:18:8f:b7:59:c5:f6:8f:8d:8f:0d:c2:
ad:9d:cb:f7:c1:3e:41:a9:39:1c:07:1f:89:3a:9a:
e3:bb:e1:86:27:80:56:e2:a2:39:18:10:60:b2:2b:
86:11:0e:95:71:85:15:6d:6d:dc:13:80:67:5d:13:
8f:85:ef:d3:d2:cf:8a:72:1c:2b:7e:ba:8b:e4:a2:
00:6a:c1:de:4d:b0:4c:87:d6:f2:9b:cf:d3:45:23:
4c:52:eb:cf:a2:58:e0:fc:26:25:1c:0f:f9:5f:37:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.228.0/22
45.127.216.0/22
103.56.8.0/22
103.196.204.0/22
103.207.48.0/22
210.16.104.0/22
Signature Algorithm: sha256WithRSAEncryption
79:2d:ef:34:66:06:1b:49:cc:cb:5e:a2:13:56:53:15:8e:6b:
a0:6c:ab:60:12:40:f6:9e:7d:78:75:a5:af:7d:10:50:15:84:
b0:02:2a:b9:7e:59:32:10:c0:ba:d6:be:82:93:3a:a8:12:56:
78:7a:d7:13:8e:18:4d:21:2f:d8:59:05:a6:4e:25:70:56:ca:
03:0b:e8:be:94:18:ad:27:2a:f9:98:37:c5:76:ea:c4:32:38:
91:32:84:cc:ce:0a:d7:83:23:9f:e0:63:5e:6e:5d:3e:67:40:
2c:15:44:af:7b:80:6e:6a:4f:c7:90:dd:d1:75:a6:8e:0d:f3:
da:9f:10:a6:2a:18:ad:61:5d:dd:8c:db:09:90:46:14:c1:81:
1c:73:5b:ba:1b:0b:89:05:f9:e9:26:ab:23:73:1e:d8:9a:65:
6c:16:2a:c2:28:9d:5c:0e:38:a0:00:4c:c6:f9:8d:f8:a3:d1:
22:81:be:dc:e3:94:4d:7b:68:3c:e3:e5:d2:4b:eb:c7:35:63:
b2:ba:2a:a9:8c:4f:2c:09:fb:68:fd:14:47:ee:34:06:84:b2:
76:12:9a:8d:a4:4f:98:90:c2:63:21:ec:96:da:0d:fa:8a:c6:
86:1d:5d:b9:6c:b3:e8:80:3b:7f:62:fb:ae:23:ae:6f:fd:8d:
a4:00:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 09:57:57 2024 by rpki-client on console-fra.rpki-client.org