Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer
File: S8aptYu-6tUN3Uj4RHgsgpShizk.cer (raw, json)
Hash identifier: drRMShv1T5MZEaudoN6ktmo1K0K1V/54uOQQjZUNEyo=
Subject key identifier: 4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:51:53 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 38378
AS: 131134
IP: 103.92.88.0/22
IP: 119.40.64.0/20
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48017 (0xbb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:51:53 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:58:14:a6:a0:38:54:9d:4b:13:c5:18:50:
ea:df:7a:ef:7e:cf:72:c0:41:11:0f:a6:ee:7d:9b:
4b:72:7f:bc:af:3e:42:bb:17:46:3e:73:06:81:62:
59:5f:81:35:25:dc:a9:52:ff:db:ca:ba:72:62:dd:
53:d8:42:3b:1c:91:df:f2:ad:0c:bc:4e:4d:a4:b9:
21:5a:9e:5b:74:50:91:39:6a:2d:28:9e:e2:5e:22:
92:56:ea:57:f0:c5:04:f1:3e:46:7a:be:ac:13:35:
ae:cc:a7:1d:a0:cc:c2:a6:5f:af:d4:89:c2:c0:64:
0b:d9:12:dd:dc:2e:b6:8a:99:1a:84:a9:38:6c:11:
61:39:b9:48:02:6c:0c:de:c7:c0:83:7b:3a:7c:3d:
8c:5f:7d:19:1a:6f:09:d5:f8:ac:87:7c:b4:da:4b:
f2:d2:8e:2a:b3:1c:09:e7:eb:7d:fe:58:46:9d:ea:
28:99:88:4c:ad:8b:00:6e:ec:8e:7e:47:9b:41:9e:
72:9b:8e:41:ac:76:d8:64:bc:0e:f0:eb:6b:35:6e:
09:84:9b:a3:64:f1:7e:17:0c:48:c1:e5:39:08:a5:
76:ec:ec:a7:3c:fc:1c:6d:2c:93:53:c2:a0:6e:93:
9f:88:ef:f0:54:3d:2b:2c:e0:ec:fb:51:51:02:ed:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38378
131134
sbgp-ipAddrBlock: critical
IPv4:
103.92.88.0/22
119.40.64.0/20
Signature Algorithm: sha256WithRSAEncryption
92:57:1d:be:c4:36:dc:f1:04:71:4b:a9:bb:be:e2:70:09:96:
fd:45:23:99:c9:1f:45:c9:00:35:78:54:90:45:5e:20:51:d3:
4d:a2:65:4c:c7:1f:87:6f:b2:3c:a2:8b:d7:26:f9:5f:1a:94:
e9:ad:84:71:8f:f3:75:79:52:db:32:78:65:f5:e4:a5:f6:60:
65:fb:12:b4:7d:f5:cb:de:ad:08:27:69:8f:c0:13:01:97:03:
b2:c8:c2:a1:a4:a3:9e:42:6f:35:1e:8a:a5:82:7e:18:ef:c6:
60:8d:12:6f:6e:44:7e:27:ee:7c:84:34:6c:26:5f:61:33:be:
fa:46:2a:dc:1f:6e:62:ba:04:af:4f:f9:39:4e:33:50:46:77:
8e:34:f0:f7:57:5d:ca:56:27:3c:34:77:bb:9d:54:6e:6c:ec:
cd:e5:35:1e:dc:33:cf:01:7a:d2:54:0b:96:e1:99:df:2f:46:
73:99:0c:08:81:40:9b:1a:07:fd:7e:60:44:ff:b1:c3:6b:01:
17:b1:b9:c8:70:0e:e9:17:7a:d7:dc:85:67:37:70:f1:74:89:
e9:a5:09:6d:9d:67:41:e0:0e:7b:fc:b9:5e:e8:43:2b:fa:cb:
27:40:66:07:4a:62:1b:fa:fc:b8:20:19:3d:b7:63:81:0c:1c:
c7:b9:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org