Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer
File: S8aptYu-6tUN3Uj4RHgsgpShizk.cer (raw, json)
Hash identifier: fp1xl11OkX+qNv3W++2ZfWL/HFVCjBXBNgmn3XeFwzo=
Subject key identifier: 4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AE59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:20:11 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 38378
AS: 131134
IP: 103.92.88.0/22
IP: 119.40.64.0/20
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 May 2024 05:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44633 (0xae59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:20:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:58:14:a6:a0:38:54:9d:4b:13:c5:18:50:
ea:df:7a:ef:7e:cf:72:c0:41:11:0f:a6:ee:7d:9b:
4b:72:7f:bc:af:3e:42:bb:17:46:3e:73:06:81:62:
59:5f:81:35:25:dc:a9:52:ff:db:ca:ba:72:62:dd:
53:d8:42:3b:1c:91:df:f2:ad:0c:bc:4e:4d:a4:b9:
21:5a:9e:5b:74:50:91:39:6a:2d:28:9e:e2:5e:22:
92:56:ea:57:f0:c5:04:f1:3e:46:7a:be:ac:13:35:
ae:cc:a7:1d:a0:cc:c2:a6:5f:af:d4:89:c2:c0:64:
0b:d9:12:dd:dc:2e:b6:8a:99:1a:84:a9:38:6c:11:
61:39:b9:48:02:6c:0c:de:c7:c0:83:7b:3a:7c:3d:
8c:5f:7d:19:1a:6f:09:d5:f8:ac:87:7c:b4:da:4b:
f2:d2:8e:2a:b3:1c:09:e7:eb:7d:fe:58:46:9d:ea:
28:99:88:4c:ad:8b:00:6e:ec:8e:7e:47:9b:41:9e:
72:9b:8e:41:ac:76:d8:64:bc:0e:f0:eb:6b:35:6e:
09:84:9b:a3:64:f1:7e:17:0c:48:c1:e5:39:08:a5:
76:ec:ec:a7:3c:fc:1c:6d:2c:93:53:c2:a0:6e:93:
9f:88:ef:f0:54:3d:2b:2c:e0:ec:fb:51:51:02:ed:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38378
131134
sbgp-ipAddrBlock: critical
IPv4:
103.92.88.0/22
119.40.64.0/20
Signature Algorithm: sha256WithRSAEncryption
33:b7:5e:e7:49:a5:9d:17:53:54:20:ec:27:5b:13:41:99:06:
54:71:83:ad:21:94:23:53:84:bc:72:4f:a7:68:c8:9c:9c:53:
6e:16:af:b1:2a:ad:88:24:01:4a:4d:1a:b6:03:a9:02:02:b7:
2a:d5:38:80:7a:4b:d4:81:ac:3e:ce:77:70:99:35:d4:33:ac:
e7:6b:f3:14:24:7a:61:b6:43:99:39:93:9d:6f:27:a4:6b:e0:
ca:f8:35:2f:a7:e0:c5:01:de:44:df:b9:9f:cb:fe:a6:23:95:
ef:8f:f0:bf:94:2b:86:54:5c:bd:2f:fd:e5:4e:e4:b8:5c:08:
27:c1:12:1f:e7:3d:39:aa:25:19:44:e6:2f:c0:c9:42:d2:86:
ef:97:2e:9a:c0:a7:28:77:00:ca:d6:44:50:fe:be:c6:89:f6:
29:af:06:0c:07:b8:1a:ad:51:72:9d:5f:b0:42:b8:e3:1e:6c:
54:4c:a4:30:d3:15:95:a8:f6:28:0b:11:ab:49:49:4a:61:8b:
b4:17:1a:77:79:f6:34:08:53:39:cc:2e:c9:b3:c4:54:4d:aa:
01:fa:0d:25:13:f5:3c:4b:bc:e1:94:90:c9:91:de:0d:cc:7b:
66:dc:8a:12:dc:e3:33:e0:27:d7:e0:91:f9:18:c7:8f:47:ea:
67:96:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:52:45 2024 by rpki-client on console-ams.rpki-client.org