Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
File: T04zJwO54ZxdoBGkjEsnbpsp11w.cer (raw, json)
Hash identifier: TRz8j7DYt5r6ndG8lJZYX+FiV0jZJed3GL5V9hlISdQ=
Subject key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:56:05 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45093
IP: 45.124.44.0/22
IP: 101.251.128.0/20
IP: 103.192.164.0/22
IP: 111.67.192.0/20
IP: 182.18.0.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48233 (0xbc69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:56:05 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:1c:7f:53:41:d3:5d:fb:89:ea:3a:8d:70:
e7:8c:32:46:b5:83:37:1f:ce:1e:b7:af:d2:63:96:
83:3b:1d:dc:cd:5d:98:bd:19:40:40:34:02:dd:a0:
5e:bc:04:9e:b0:8b:4e:1a:6e:1d:5f:e8:c8:99:6b:
d8:de:2a:51:f6:38:62:06:fa:2e:54:f2:92:5d:ad:
8d:6e:61:a3:05:e6:a4:56:33:f4:57:e6:90:c3:b0:
4a:5a:0c:29:8b:30:a9:4e:a8:ab:3b:c5:08:46:3c:
28:01:61:a6:76:56:63:fa:23:68:c3:a9:74:19:fc:
4f:f2:fb:2d:2b:35:54:0f:a2:52:b6:6b:fb:6b:c7:
aa:48:5a:5b:f8:de:0a:e1:3c:0b:b1:66:ed:19:e5:
84:53:d5:cd:96:a3:4a:e5:54:97:70:87:bf:9a:b2:
b7:ac:bc:59:28:1d:37:04:e4:fd:19:f1:ab:2e:3b:
ca:33:c6:94:ac:28:24:f9:3a:ce:1a:b5:b3:a0:c9:
b8:ab:bb:8b:8c:9c:d3:75:d2:6b:b1:e1:19:4a:18:
09:93:53:8a:d0:0b:88:4a:5e:81:49:31:ec:f4:20:
3e:d9:8d:e6:ae:c0:53:db:e9:d7:5c:a9:4b:c7:37:
39:de:2d:d2:31:a0:df:2e:87:51:e2:28:fe:e5:4c:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45093
sbgp-ipAddrBlock: critical
IPv4:
45.124.44.0/22
101.251.128.0/20
103.192.164.0/22
111.67.192.0/20
182.18.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6d:44:98:f6:56:9d:c1:c7:c0:e4:37:24:bc:1c:61:32:1c:40:
c8:c0:f6:00:60:f1:1a:67:e9:30:8c:23:1c:48:0a:e0:04:45:
5c:7b:40:76:58:77:5b:45:2f:c4:2f:c9:d2:94:12:f9:8e:16:
5d:12:66:d8:ad:31:51:3d:54:e6:dd:a2:1a:8f:d1:b5:32:0e:
f3:4b:e6:71:89:f6:66:38:5a:b6:40:04:3a:32:7c:17:1b:c8:
e2:aa:39:ee:7d:cb:6b:fb:a6:f1:2a:f4:90:2f:93:48:f9:ea:
1e:b7:a7:d2:94:59:22:4f:c1:51:ca:d0:26:fb:48:0b:ce:05:
09:75:df:2f:54:30:e3:34:0c:cf:b8:8d:67:00:1d:df:bd:77:
a8:e0:8f:93:5a:79:0e:ae:4d:9e:05:94:09:58:6a:1f:05:79:
de:50:73:96:da:59:ce:f2:fb:9a:13:20:dd:00:bc:3f:b9:6f:
0f:c7:05:25:4f:a7:79:a5:04:80:59:06:75:5c:37:c0:fa:7d:
11:0a:37:78:a2:f3:78:40:31:a6:1f:37:ff:96:f0:0d:b1:9a:
14:f1:15:99:48:2b:68:db:eb:e2:36:cd:b1:cd:b8:30:d5:8f:
f1:07:bc:f8:44:a1:03:da:17:8d:2a:f7:9e:58:42:48:9f:ed:
b2:e1:29:fb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDALxpMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjU2MDVaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDRGNEUzMzI3MDNCOUUxOUM1REEwMTFBNDhDNEIyNzZFOUIyOUQ3
NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKhx/U0HTXfuJ6jqN
cOeMMka1gzcfzh63r9JjloM7HdzNXZi9GUBANALdoF68BJ6wi04abh1f6MiZa9je
KlH2OGIG+i5U8pJdrY1uYaMF5qRWM/RX5pDDsEpaDCmLMKlOqKs7xQhGPCgBYaZ2
VmP6I2jDqXQZ/E/y+y0rNVQPolK2a/trx6pIWlv43grhPAuxZu0Z5YRT1c2Wo0rl
VJdwh7+asresvFkoHTcE5P0Z8asuO8ozxpSsKCT5Os4atbOgybiru4uMnNN10mux
4RlKGAmTU4rQC4hKXoFJMez0ID7ZjeauwFPb6ddcqUvHNzneLdIxoN8uh1HiKP7l
TM8BAgMBAAGjggKHMIICgzAdBgNVHQ4EFgQUT04zJwO54ZxdoBGkjEsnbpsp11ww
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw
OC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zMDgvVDA0ekp3TzU0Wnhkb0JHa2pFc25icHNwMTF3Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAsCUwNwYIKwYBBQUHAQcBAf8EKDAmMCQE
AgABMB4DBAItfCwDBARl+4ADBAJnwKQDBARvQ8ADBAe2EgAwDQYJKoZIhvcNAQEL
BQADggEBAG1EmPZWncHHwOQ3JLwcYTIcQMjA9gBg8Rpn6TCMIxxICuAERVx7QHZY
d1tFL8QvydKUEvmOFl0SZtitMVE9VObdohqP0bUyDvNL5nGJ9mY4WrZABDoyfBcb
yOKqOe59y2v7pvEq9JAvk0j56h63p9KUWSJPwVHK0Cb7SAvOBQl13y9UMOM0DM+4
jWcAHd+9d6jgj5NaeQ6uTZ4FlAlYah8Fed5Qc5baWc7y+5oTIN0AvD+5bw/HBSVP
p3mlBIBZBnVcN8D6fREKN3ii83hAMaYfN/+W8A2xmhTxFZlIK2jb6+I2zbHNuDDV
j/EHvPhEoQPaF40q955YQkif7bLhKfs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org