Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer
File: TS1a-PNilt7eZELYEcBKdAhswCk.cer (raw, json)
Hash identifier: 0LSJYR0T/iYRjT32W/e4s/nL8FPCkemC59FLWhdYVmQ=
Subject key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:13:30 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 139134
IP: 103.120.72.0/22
IP: 116.70.64.0/18
IP: 123.99.192.0/18
IP: 124.248.64.0/18
IP: 203.135.96.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52795 (0xce3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Apr 3 08:13:30 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:28:87:a4:2e:ec:67:71:a5:10:2d:f4:06:
8a:f9:a0:e6:c9:ed:87:01:7d:08:28:61:08:8f:27:
41:55:ec:98:21:2b:a7:ee:f0:e0:e0:27:08:09:5c:
31:23:d2:14:bf:b7:a5:c7:2a:f7:24:4e:30:d9:3d:
a2:b7:68:8b:6e:af:20:e7:c2:14:a0:fc:10:b1:69:
8b:b0:58:d1:26:5e:35:04:8e:cf:e1:da:98:9d:db:
bc:c3:43:46:50:58:24:ae:7f:85:ce:44:c8:af:b8:
1f:fe:58:dc:53:e2:ff:64:d4:67:03:e5:56:30:e3:
d7:af:c9:d9:99:61:be:f5:1c:c8:f4:b0:8c:da:00:
dd:c6:53:f2:ba:3d:be:91:cd:9c:3a:5f:62:d3:e6:
fa:e2:57:b2:8b:0f:ca:5d:e3:0c:24:4b:c7:c5:30:
b4:b5:77:17:4e:ea:46:72:ff:f7:09:fb:f7:2c:d7:
d8:fb:2a:4b:aa:43:b9:0c:ac:a2:ed:b9:49:c1:94:
6b:bf:1a:70:81:55:ff:a1:4d:c0:11:a7:da:f1:ff:
82:eb:81:fa:c0:2f:2d:00:da:e2:0f:16:8b:83:13:
94:7c:8e:c8:d6:7d:57:b8:36:01:fc:17:db:56:9b:
88:19:32:5c:20:44:c7:ad:2c:f2:00:1f:9d:2b:92:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139134
sbgp-ipAddrBlock: critical
IPv4:
103.120.72.0/22
116.70.64.0/18
123.99.192.0/18
124.248.64.0/18
203.135.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:09:f7:d9:6c:e7:49:68:5a:e8:6a:72:11:1f:88:bb:31:31:
25:dd:95:fe:bd:5e:73:48:1b:00:5b:10:1b:f7:61:5a:c3:db:
43:94:e0:12:91:db:53:0b:d1:b8:37:ad:7c:f2:0e:80:b2:96:
44:24:62:d4:c7:d8:7a:de:cd:ac:1f:d5:a2:33:e7:9f:45:fe:
4d:68:6c:7e:b4:f5:85:ef:56:a8:c8:cc:55:a1:80:fe:7f:ed:
c1:60:c7:f5:df:02:40:50:c5:d9:6d:38:2c:ba:8b:26:9b:0a:
78:a9:54:52:9d:a6:4e:36:d8:62:32:62:71:09:18:ac:81:e1:
25:03:1e:52:34:61:45:14:80:c7:7b:5f:88:52:1f:84:3e:c5:
e0:6c:3c:42:7c:1e:0d:d3:82:51:21:ab:94:cb:45:c2:fe:aa:
ad:46:aa:99:12:67:9b:a6:30:95:5c:c7:ae:93:b4:6f:8b:37:
55:dd:d2:35:fe:2b:f8:fa:5c:62:fb:36:d9:a5:04:d4:5a:15:
44:21:31:b4:3e:7e:ca:d5:8b:85:d7:d7:6a:00:27:75:b4:93:
c7:9b:c0:66:53:09:3e:e4:83:c5:ab:83:2f:e8:53:1d:73:1f:
8e:22:c9:9e:df:0c:81:0f:3f:cc:f8:1f:1b:fe:ef:02:94:a3:
8e:c0:6a:8c
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIDAM47MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODEzMzBaFw0yNjA0MDMwODAwMDlaMDMx
MTAvBgNVBAMTKDREMkQ1QUY4RjM2Mjk2REVERTY0NDJEODExQzA0QTc0MDg2Q0Mw
MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwCiHpC7sZ3GlEC30
Bor5oObJ7YcBfQgoYQiPJ0FV7JghK6fu8ODgJwgJXDEj0hS/t6XHKvckTjDZPaK3
aIturyDnwhSg/BCxaYuwWNEmXjUEjs/h2pid27zDQ0ZQWCSuf4XORMivuB/+WNxT
4v9k1GcD5VYw49evydmZYb71HMj0sIzaAN3GU/K6Pb6RzZw6X2LT5vriV7KLD8pd
4wwkS8fFMLS1dxdO6kZy//cJ+/cs19j7KkuqQ7kMrKLtuUnBlGu/GnCBVf+hTcAR
p9rx/4LrgfrALy0A2uIPFouDE5R8jsjWfVe4NgH8F9tWm4gZMlwgRMetLPIAH50r
kpMJAgMBAAGjggKJMIIChTAdBgNVHQ4EFgQUTS1a+PNilt7eZELYEcBKdAhswCkw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3
OTAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjc5MC9UUzFhLVBOaWx0N2VaRUxZRWNCS2RBaHN3Q2subWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIffjA3BggrBgEFBQcBBwEB/wQoMCYw
JAQCAAEwHgMEAmd4SAMEBnRGQAMEBntjwAMEBnz4QAMEBcuHYDANBgkqhkiG9w0B
AQsFAAOCAQEAjwn32WznSWha6GpyER+IuzExJd2V/r1ec0gbAFsQG/dhWsPbQ5Tg
EpHbUwvRuDetfPIOgLKWRCRi1MfYet7NrB/VojPnn0X+TWhsfrT1he9WqMjMVaGA
/n/twWDH9d8CQFDF2W04LLqLJpsKeKlUUp2mTjbYYjJicQkYrIHhJQMeUjRhRRSA
x3tfiFIfhD7F4Gw8QnweDdOCUSGrlMtFwv6qrUaqmRJnm6YwlVzHrpO0b4s3Vd3S
Nf4r+PpcYvs22aUE1FoVRCExtD5+ytWLhdfXagAndbSTx5vAZlMJPuSDxauDL+hT
HXMfjiLJnt8MgQ8/zPgfG/7vApSjjsBqjA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:46 2025 by rpki-client