Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer
File: TS1a-PNilt7eZELYEcBKdAhswCk.cer (raw, json)
Hash identifier: 5FhyxW37Xoop1aUGfpl+FZUG28p78zXM2JZ/EhzMBc0=
Subject key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:23:58 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 139134
IP: 103.120.72.0/22
IP: 116.70.64.0/18
IP: 123.99.192.0/18
IP: 124.248.64.0/18
IP: 203.135.96.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 May 2024 11:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44903 (0xaf67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:23:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:28:87:a4:2e:ec:67:71:a5:10:2d:f4:06:
8a:f9:a0:e6:c9:ed:87:01:7d:08:28:61:08:8f:27:
41:55:ec:98:21:2b:a7:ee:f0:e0:e0:27:08:09:5c:
31:23:d2:14:bf:b7:a5:c7:2a:f7:24:4e:30:d9:3d:
a2:b7:68:8b:6e:af:20:e7:c2:14:a0:fc:10:b1:69:
8b:b0:58:d1:26:5e:35:04:8e:cf:e1:da:98:9d:db:
bc:c3:43:46:50:58:24:ae:7f:85:ce:44:c8:af:b8:
1f:fe:58:dc:53:e2:ff:64:d4:67:03:e5:56:30:e3:
d7:af:c9:d9:99:61:be:f5:1c:c8:f4:b0:8c:da:00:
dd:c6:53:f2:ba:3d:be:91:cd:9c:3a:5f:62:d3:e6:
fa:e2:57:b2:8b:0f:ca:5d:e3:0c:24:4b:c7:c5:30:
b4:b5:77:17:4e:ea:46:72:ff:f7:09:fb:f7:2c:d7:
d8:fb:2a:4b:aa:43:b9:0c:ac:a2:ed:b9:49:c1:94:
6b:bf:1a:70:81:55:ff:a1:4d:c0:11:a7:da:f1:ff:
82:eb:81:fa:c0:2f:2d:00:da:e2:0f:16:8b:83:13:
94:7c:8e:c8:d6:7d:57:b8:36:01:fc:17:db:56:9b:
88:19:32:5c:20:44:c7:ad:2c:f2:00:1f:9d:2b:92:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139134
sbgp-ipAddrBlock: critical
IPv4:
103.120.72.0/22
116.70.64.0/18
123.99.192.0/18
124.248.64.0/18
203.135.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:d3:b9:9b:85:a8:71:21:e2:d7:9d:72:a7:f2:3d:16:88:5b:
41:4a:29:8c:fa:d4:c3:a3:30:e8:85:1a:5f:6e:4a:4e:96:1f:
88:60:59:09:67:48:0b:f6:9c:66:ed:75:8b:a9:8f:62:75:89:
cc:7b:cc:0c:78:38:ba:b2:e1:21:6d:7a:20:30:8d:7f:ed:17:
e5:c1:fc:68:59:9b:f8:04:28:e6:21:02:b8:23:64:05:d7:b9:
f1:9f:9d:b6:76:cc:c2:3c:2a:81:a6:b3:67:54:2e:9c:92:a0:
01:d9:28:5b:ec:3b:b2:5f:1c:83:7b:67:4e:7c:c0:0e:b5:11:
f4:9c:39:45:54:04:99:79:4d:60:6f:7f:a0:d8:81:46:ee:9d:
63:4f:53:d8:52:f1:cc:44:0c:e9:0b:5b:83:ce:28:55:dc:a1:
cd:49:fc:e4:9e:30:16:8f:b0:d6:71:fb:ca:89:24:8d:cf:81:
af:20:7a:8b:49:32:86:7b:ca:7a:4d:b3:cf:28:2a:b7:53:8b:
76:12:2a:37:b7:41:6d:0d:f0:9f:3f:bb:ab:1c:6c:15:f6:09:
a9:28:5b:64:2a:62:07:12:dc:98:40:21:6b:af:11:e7:81:f6:
ee:c4:3e:da:fe:c7:93:8d:d0:18:20:c9:2d:a9:8b:69:7f:49:
43:fc:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:19:02 2024 by rpki-client on console-fra.rpki-client.org