Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.cer
File: Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.cer (raw, json)
Hash identifier: bxjYSWMtUwjx6hnBd71/MvliIYqjBYNsb7Q++NBkF0k=
Subject key identifier: 4A:BD:40:77:86:47:33:21:29:CF:2A:1E:FD:FF:2B:1F:A9:5F:56:96
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:51:37 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 59037
AS: 137803
IP: 43.225.180.0/22
IP: 43.227.152.0 -- 43.227.156.255
IP: 43.227.158.0 -- 43.227.183.255
IP: 43.227.192.0/19
IP: 43.228.0.0 -- 43.228.6.255
IP: 43.228.8.0 -- 43.228.31.255
IP: 43.228.40.0 -- 43.228.71.255
IP: 43.230.72.0/22
IP: 103.46.12.0 -- 103.46.68.255
IP: 103.46.72.0 -- 103.46.139.255
IP: 103.49.108.0/22
IP: 2403:1f80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47999 (0xbb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:51:37 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4ABD40778647332129CF2A1EFDFF2B1FA95F5696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:c2:68:12:d8:f4:50:8b:db:2c:2f:6b:4b:
4f:07:08:80:d4:10:49:70:4c:09:bb:0d:1a:10:0d:
4b:fa:ef:d6:01:04:8b:2e:14:90:a7:c2:3e:05:0c:
98:fe:6b:de:08:d4:65:12:63:4c:ef:2f:9e:65:96:
86:75:8c:ee:50:fe:f7:74:51:61:1a:c5:d0:44:aa:
14:00:9d:65:dd:17:40:67:9d:1e:f6:23:1d:9e:26:
6c:0c:9b:8d:7c:17:cb:96:af:0a:0b:d4:7a:2a:4e:
9d:92:0b:b3:b3:21:1b:f9:1f:9f:1b:31:7b:95:d9:
90:01:bf:bc:1b:73:c0:db:d6:e4:42:db:9d:f3:4a:
83:4c:c4:27:3c:99:9e:95:54:fe:27:b4:68:cc:68:
31:c6:2c:5e:d7:ce:22:90:49:ff:72:39:5c:de:c7:
59:36:05:a8:a6:eb:2f:a6:30:d4:67:fc:28:a4:39:
4f:b8:56:42:4f:4d:16:d2:87:3b:6e:7e:d1:b9:be:
b0:ba:cf:82:29:8f:47:71:75:4f:c9:04:e8:78:53:
ab:3d:e3:da:b0:4e:60:0b:18:67:48:b3:59:bb:79:
04:c3:20:60:d9:b7:4f:f5:47:31:14:b2:db:86:36:
38:f0:b7:8d:35:67:27:60:0a:8d:3c:b0:21:c7:52:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:40:77:86:47:33:21:29:CF:2A:1E:FD:FF:2B:1F:A9:5F:56:96
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3279/Sr1Ad4ZHMyEpzyoe_f8rH6lfVpY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59037
137803
sbgp-ipAddrBlock: critical
IPv4:
43.225.180.0/22
43.227.152.0-43.227.156.255
43.227.158.0-43.227.183.255
43.227.192.0/19
43.228.0.0-43.228.6.255
43.228.8.0-43.228.31.255
43.228.40.0-43.228.71.255
43.230.72.0/22
103.46.12.0-103.46.68.255
103.46.72.0-103.46.139.255
103.49.108.0/22
IPv6:
2403:1f80::/32
Signature Algorithm: sha256WithRSAEncryption
3f:fb:ed:d8:21:57:ef:52:63:da:f9:51:4d:69:b0:b7:31:2a:
ee:b4:12:06:af:a5:bc:44:1c:a8:25:26:5f:aa:44:c6:d0:ce:
96:4d:4b:c5:1d:9b:95:96:7f:df:fb:dc:4d:52:ea:46:80:31:
f7:e8:bb:86:97:04:21:7b:29:29:20:b5:03:de:bc:2f:62:df:
1c:fb:30:a3:14:20:b6:b3:14:5d:cd:ee:34:8f:3f:0e:8e:24:
6b:13:ff:ff:5d:6e:0d:3d:21:46:9d:08:65:d8:5e:37:f4:2c:
04:cc:ab:39:25:9e:3c:8b:9f:3e:d9:67:39:54:e4:7d:e9:8d:
b3:3e:a8:26:91:fb:83:23:28:5c:75:7c:5e:67:9d:8a:2d:ea:
bd:57:c2:08:86:fa:d6:6f:e8:70:7b:3e:6e:6a:34:4b:ac:3d:
a0:42:88:4d:75:c7:9f:28:03:3e:c5:dd:37:76:b8:2f:bd:bb:
ee:6a:15:46:da:23:ff:44:bf:b4:fc:35:d1:63:59:3e:a2:d0:
ea:79:15:e4:fd:29:de:52:0b:7c:36:ea:43:36:cf:58:3b:14:
03:f3:d3:de:3f:2e:82:2e:3d:c9:d3:73:da:cf:49:01:a7:0a:
4d:be:0f:b2:39:30:50:da:0d:7c:46:08:67:bd:88:7a:bb:3c:
7b:3f:81:3d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIDALt/MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUxMzdaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDRBQkQ0MDc3ODY0NzMzMjEyOUNGMkExRUZERkYyQjFGQTk1RjU2
OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6d8JoEtj0UIvbLC9r
S08HCIDUEElwTAm7DRoQDUv679YBBIsuFJCnwj4FDJj+a94I1GUSY0zvL55lloZ1
jO5Q/vd0UWEaxdBEqhQAnWXdF0BnnR72Ix2eJmwMm418F8uWrwoL1HoqTp2SC7Oz
IRv5H58bMXuV2ZABv7wbc8Db1uRC253zSoNMxCc8mZ6VVP4ntGjMaDHGLF7XziKQ
Sf9yOVzex1k2Baim6y+mMNRn/CikOU+4VkJPTRbShztuftG5vrC6z4Ipj0dxdU/J
BOh4U6s949qwTmALGGdIs1m7eQTDIGDZt0/1RzEUstuGNjjwt401ZydgCo08sCHH
UkthAgMBAAGjggL7MIIC9zAdBgNVHQ4EFgQUSr1Ad4ZHMyEpzyoe/f8rH6lfVpYw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy
NzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMzI3OS9TcjFBZDRaSE15RXB6eW9lX2Y4ckg2bGZWcFkubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDmnQIDAhpLMIGjBggrBgEFBQcBBwEB
/wSBkzCBkDB/BAIAATB5AwQCK+G0MAwDBAMr45gDBAAr45wwDAMEASvjngMEAyvj
sAMEBSvjwDALAwMCK+QDBAAr5AYwDAMEAyvkCAMEBSvkADAMAwQDK+QoAwQDK+RA
AwQCK+ZIMAwDBAJnLgwDBABnLkQwDAMEA2cuSAMEAmcuiAMEAmcxbDANBAIAAjAH
AwUAJAMfgDANBgkqhkiG9w0BAQsFAAOCAQEAP/vt2CFX71Jj2vlRTWmwtzEq7rQS
Bq+lvEQcqCUmX6pExtDOlk1LxR2blZZ/3/vcTVLqRoAx9+i7hpcEIXspKSC1A968
L2LfHPswoxQgtrMUXc3uNI8/Do4kaxP//11uDT0hRp0IZdheN/QsBMyrOSWePIuf
PtlnOVTkfemNsz6oJpH7gyMoXHV8Xmedii3qvVfCCIb61m/ocHs+bmo0S6w9oEKI
TXXHnygDPsXdN3a4L7277moVRtoj/0S/tPw10WNZPqLQ6nkV5P0p3lILfDbqQzbP
WDsUA/PT3j8ugi49ydNz2s9JAacKTb4PsjkwUNoNfEYIZ72Iers8ez+BPQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org