Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer (raw, json)
Hash identifier: A79MtvA/sjITrfLROy9IL3Yi4V4MZBOydHuJeLscR1o=
Subject key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:52:01 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 59048
IP: 43.224.56.0/22
IP: 43.228.132.0 -- 43.228.139.255
IP: 43.242.60.0 -- 43.242.67.255
IP: 45.124.80.0/22
IP: 45.253.24.0/22
IP: 45.253.32.0/22
IP: 103.192.212.0/22
IP: 103.222.32.0/22
IP: 103.222.40.0/22
IP: 103.222.164.0/22
IP: 103.222.172.0/22
IP: 103.223.140.0/22
IP: 103.223.188.0/22
IP: 103.224.228.0/22
IP: 103.255.88.0/22
IP: 103.255.200.0/22
IP: 2401:a140::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48027 (0xbb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:52:01 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:a3:03:d2:c1:28:c7:2b:2c:0f:37:d3:82:
4c:70:35:fe:6b:55:c1:15:b0:a6:ee:33:c4:38:a9:
69:c4:a5:fa:f3:4a:ca:9d:73:2d:6f:af:c2:82:8b:
17:1e:5e:28:92:26:d4:40:fa:25:b6:4a:1c:69:d8:
c6:e6:3a:ac:76:b4:c2:3e:a8:f9:b8:10:f3:97:76:
48:9a:08:56:3e:15:6e:94:82:22:5c:e0:f2:7e:cd:
0b:32:aa:a5:12:ab:8c:5f:8c:2c:a2:58:12:ba:91:
d8:43:77:d7:cc:f4:51:c5:27:54:92:fe:d7:16:6a:
08:8a:28:fe:d2:6e:6e:45:0d:c1:86:31:de:15:f1:
d6:89:46:04:b5:09:e2:56:4a:74:f7:e0:26:ee:51:
b6:2d:79:fa:13:40:e5:4d:5d:06:af:45:d0:4d:ad:
d7:20:14:9c:3d:f4:2f:95:84:02:a5:ca:fa:7f:95:
43:b7:a9:82:91:f8:c9:9a:ff:85:a9:02:8e:14:5e:
cc:e2:d2:60:2b:1b:d6:08:96:d7:02:a3:93:dd:d4:
cf:66:12:20:3d:a6:2c:87:27:ea:d9:45:9b:36:4e:
12:ba:ae:87:99:e6:99:c5:07:5c:ea:ab:bd:7a:86:
cb:b5:d3:80:8c:b2:d4:74:e5:66:55:4d:3a:60:02:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59048
sbgp-ipAddrBlock: critical
IPv4:
43.224.56.0/22
43.228.132.0-43.228.139.255
43.242.60.0-43.242.67.255
45.124.80.0/22
45.253.24.0/22
45.253.32.0/22
103.192.212.0/22
103.222.32.0/22
103.222.40.0/22
103.222.164.0/22
103.222.172.0/22
103.223.140.0/22
103.223.188.0/22
103.224.228.0/22
103.255.88.0/22
103.255.200.0/22
IPv6:
2401:a140::/32
Signature Algorithm: sha256WithRSAEncryption
7f:b0:07:82:a4:f1:7e:55:33:b4:89:87:46:eb:a7:33:49:d9:
20:91:b0:44:8a:b8:6b:4a:1d:11:0a:c9:38:bc:15:e1:c4:29:
8f:a7:d9:c9:93:98:44:af:c2:a8:bf:b0:06:db:c5:f6:64:7c:
17:b5:33:44:b7:8b:ea:4d:92:06:43:4d:af:0a:91:de:6c:7e:
47:bf:0e:25:36:cd:e8:0f:01:24:38:f5:f3:ea:5f:bf:57:cf:
00:5b:26:2e:4e:29:da:e8:25:c9:a5:18:cc:30:32:59:95:45:
8f:d9:a9:54:81:b2:51:94:98:87:81:1e:5f:54:0e:2f:d7:9e:
3a:d1:e8:54:de:5f:64:b4:b6:ee:fc:db:e7:22:11:aa:8e:cf:
f6:d6:80:6a:ea:8f:b0:4d:a2:92:48:cf:a9:36:fb:80:ae:25:
7e:b7:1e:20:42:b0:59:5e:db:68:93:ef:5a:78:0c:fa:42:c4:
b3:8b:58:87:7f:ca:85:4a:6b:43:e9:1a:ca:5b:80:41:b7:24:
91:00:18:51:b6:31:82:9e:11:89:b0:71:c4:2c:32:2a:b2:12:
a5:a4:05:2c:1c:81:75:d8:75:d3:50:24:44:52:c7:c8:52:b1:
82:2f:96:82:9b:c7:29:8f:bd:62:61:be:14:71:ec:f0:39:71:
42:50:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:26 2024 by rpki-client on console-fra.rpki-client.org