Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/TS1a-PNilt7eZELYEcBKdAhswCk.cer
File: TS1a-PNilt7eZELYEcBKdAhswCk.cer (raw, json)
Hash identifier: STi8L+4Bb+98TwvWJvHtGSviPpWGe4HismpUbdXozaI=
Subject key identifier: 4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:56:36 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 139134
IP: 103.120.72.0/22
IP: 116.70.64.0/18
IP: 123.99.192.0/18
IP: 124.248.64.0/18
IP: 203.135.96.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48269 (0xbc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:56:36 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4D2D5AF8F36296DEDE6442D811C04A74086CC029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:28:87:a4:2e:ec:67:71:a5:10:2d:f4:06:
8a:f9:a0:e6:c9:ed:87:01:7d:08:28:61:08:8f:27:
41:55:ec:98:21:2b:a7:ee:f0:e0:e0:27:08:09:5c:
31:23:d2:14:bf:b7:a5:c7:2a:f7:24:4e:30:d9:3d:
a2:b7:68:8b:6e:af:20:e7:c2:14:a0:fc:10:b1:69:
8b:b0:58:d1:26:5e:35:04:8e:cf:e1:da:98:9d:db:
bc:c3:43:46:50:58:24:ae:7f:85:ce:44:c8:af:b8:
1f:fe:58:dc:53:e2:ff:64:d4:67:03:e5:56:30:e3:
d7:af:c9:d9:99:61:be:f5:1c:c8:f4:b0:8c:da:00:
dd:c6:53:f2:ba:3d:be:91:cd:9c:3a:5f:62:d3:e6:
fa:e2:57:b2:8b:0f:ca:5d:e3:0c:24:4b:c7:c5:30:
b4:b5:77:17:4e:ea:46:72:ff:f7:09:fb:f7:2c:d7:
d8:fb:2a:4b:aa:43:b9:0c:ac:a2:ed:b9:49:c1:94:
6b:bf:1a:70:81:55:ff:a1:4d:c0:11:a7:da:f1:ff:
82:eb:81:fa:c0:2f:2d:00:da:e2:0f:16:8b:83:13:
94:7c:8e:c8:d6:7d:57:b8:36:01:fc:17:db:56:9b:
88:19:32:5c:20:44:c7:ad:2c:f2:00:1f:9d:2b:92:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:5A:F8:F3:62:96:DE:DE:64:42:D8:11:C0:4A:74:08:6C:C0:29
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2790/TS1a-PNilt7eZELYEcBKdAhswCk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139134
sbgp-ipAddrBlock: critical
IPv4:
103.120.72.0/22
116.70.64.0/18
123.99.192.0/18
124.248.64.0/18
203.135.96.0/19
Signature Algorithm: sha256WithRSAEncryption
05:44:90:bd:55:38:a8:bb:07:7d:10:8b:4d:69:41:5c:ce:77:
2f:c3:f9:83:ca:d3:03:ab:50:ee:1a:ef:46:7c:73:a3:21:91:
61:b8:df:7a:8b:22:25:18:21:4f:dd:9e:76:b7:d3:01:cc:15:
50:03:5c:c7:c2:c1:70:82:b9:c3:0b:ae:ec:a7:58:82:6a:8b:
3c:b2:d8:a3:dc:2f:0c:6f:e4:0a:01:4a:94:c4:a6:2e:99:9b:
96:60:78:a3:c0:08:4b:a7:0b:81:52:73:93:0a:4b:9b:10:f8:
28:8e:19:b8:33:13:01:58:40:3f:bb:1b:46:69:b7:25:20:0a:
32:fb:88:68:c5:e8:cd:a0:ea:28:a2:2a:16:07:30:f4:56:5b:
ec:9a:52:c7:40:3e:ed:27:e6:24:0e:f8:ba:3c:d1:bc:cb:b0:
d0:09:32:fe:56:b0:16:bc:1c:98:0f:3d:bd:40:65:b5:0e:06:
d5:7c:ab:2e:53:0e:0c:6a:8d:56:05:61:66:0f:31:b0:8d:52:
1c:02:4f:f1:64:a2:1f:b7:1c:64:e7:68:81:87:70:31:d9:0f:
28:5b:ec:14:53:12:f9:d3:d8:8a:8d:4f:d8:af:f5:b1:87:09:
61:fe:da:39:b6:12:92:da:85:48:50:66:5b:64:2b:2d:39:33:
1c:8b:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:39 2024 by rpki-client on console-ams.rpki-client.org