Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
File: T04zJwO54ZxdoBGkjEsnbpsp11w.cer (raw, json)
Hash identifier: zFCeQm+M+xTW1QRwXnymniokxt1XwgJNkNmRL+uYT3k=
Subject key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:23:34 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 45093
IP: 45.124.44.0/22
IP: 101.251.128.0/20
IP: 103.192.164.0/22
IP: 111.67.192.0/20
IP: 182.18.0.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 05:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44871 (0xaf47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:23:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:1c:7f:53:41:d3:5d:fb:89:ea:3a:8d:70:
e7:8c:32:46:b5:83:37:1f:ce:1e:b7:af:d2:63:96:
83:3b:1d:dc:cd:5d:98:bd:19:40:40:34:02:dd:a0:
5e:bc:04:9e:b0:8b:4e:1a:6e:1d:5f:e8:c8:99:6b:
d8:de:2a:51:f6:38:62:06:fa:2e:54:f2:92:5d:ad:
8d:6e:61:a3:05:e6:a4:56:33:f4:57:e6:90:c3:b0:
4a:5a:0c:29:8b:30:a9:4e:a8:ab:3b:c5:08:46:3c:
28:01:61:a6:76:56:63:fa:23:68:c3:a9:74:19:fc:
4f:f2:fb:2d:2b:35:54:0f:a2:52:b6:6b:fb:6b:c7:
aa:48:5a:5b:f8:de:0a:e1:3c:0b:b1:66:ed:19:e5:
84:53:d5:cd:96:a3:4a:e5:54:97:70:87:bf:9a:b2:
b7:ac:bc:59:28:1d:37:04:e4:fd:19:f1:ab:2e:3b:
ca:33:c6:94:ac:28:24:f9:3a:ce:1a:b5:b3:a0:c9:
b8:ab:bb:8b:8c:9c:d3:75:d2:6b:b1:e1:19:4a:18:
09:93:53:8a:d0:0b:88:4a:5e:81:49:31:ec:f4:20:
3e:d9:8d:e6:ae:c0:53:db:e9:d7:5c:a9:4b:c7:37:
39:de:2d:d2:31:a0:df:2e:87:51:e2:28:fe:e5:4c:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45093
sbgp-ipAddrBlock: critical
IPv4:
45.124.44.0/22
101.251.128.0/20
103.192.164.0/22
111.67.192.0/20
182.18.0.0/17
Signature Algorithm: sha256WithRSAEncryption
89:53:7f:27:0c:38:53:83:9d:c7:aa:c2:27:e0:50:fd:15:55:
48:c1:9d:d1:86:25:b2:1e:2d:13:66:22:07:7c:3a:85:b5:1e:
eb:a0:7a:b2:a0:d6:0d:e4:cc:5f:10:74:ba:b5:e3:c4:76:2e:
0b:0e:0f:dd:fd:8e:63:7f:ae:19:be:df:24:95:16:6f:af:f5:
40:28:fa:ff:b7:5c:87:6f:5d:c8:30:37:f1:c1:53:8e:0f:4f:
59:03:31:c7:54:11:60:62:fa:bc:1b:f5:f9:ff:62:e0:cc:24:
76:13:9c:d6:3b:0f:e4:29:7e:b5:71:e3:77:bd:6b:de:d2:4d:
6b:a5:23:93:0a:53:7e:ce:d4:9b:ea:40:2f:41:1f:68:1f:4f:
bb:bd:9f:ce:d6:60:27:57:2c:60:a7:8c:66:7e:e8:cf:45:09:
d2:91:ed:b1:54:dd:25:6e:3f:06:96:a4:4b:22:e8:d6:8a:e4:
7f:51:da:75:5e:48:47:cb:e2:50:9e:42:f3:90:1f:dd:b0:f4:
44:66:10:94:64:a2:87:f8:c0:8d:d9:ec:dc:01:3b:d6:d9:b1:
cd:31:7b:aa:fa:0a:ba:81:ac:d3:58:cf:5c:11:2d:1f:d0:60:
6f:83:4d:47:6c:89:e7:27:7c:5d:6b:db:0e:6c:e4:32:82:07:
9f:17:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:38:45 2024 by rpki-client on console-ams.rpki-client.org