Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer (raw, json)
Hash identifier: uGDOt9UcRWaUY+umoq0dEG0B+6akAhWfsO+gQ0Mkk24=
Subject key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AEF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:21:56 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 59048
IP: 43.224.56.0/22
IP: 43.228.132.0 -- 43.228.139.255
IP: 43.242.60.0 -- 43.242.67.255
IP: 45.124.80.0/22
IP: 45.253.24.0/22
IP: 45.253.32.0/22
IP: 103.192.212.0/22
IP: 103.222.32.0/22
IP: 103.222.40.0/22
IP: 103.222.164.0/22
IP: 103.222.172.0/22
IP: 103.223.140.0/22
IP: 103.223.188.0/22
IP: 103.224.228.0/22
IP: 103.255.88.0/22
IP: 103.255.200.0/22
IP: 2401:a140::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 May 2024 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44787 (0xaef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:21:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:a3:03:d2:c1:28:c7:2b:2c:0f:37:d3:82:
4c:70:35:fe:6b:55:c1:15:b0:a6:ee:33:c4:38:a9:
69:c4:a5:fa:f3:4a:ca:9d:73:2d:6f:af:c2:82:8b:
17:1e:5e:28:92:26:d4:40:fa:25:b6:4a:1c:69:d8:
c6:e6:3a:ac:76:b4:c2:3e:a8:f9:b8:10:f3:97:76:
48:9a:08:56:3e:15:6e:94:82:22:5c:e0:f2:7e:cd:
0b:32:aa:a5:12:ab:8c:5f:8c:2c:a2:58:12:ba:91:
d8:43:77:d7:cc:f4:51:c5:27:54:92:fe:d7:16:6a:
08:8a:28:fe:d2:6e:6e:45:0d:c1:86:31:de:15:f1:
d6:89:46:04:b5:09:e2:56:4a:74:f7:e0:26:ee:51:
b6:2d:79:fa:13:40:e5:4d:5d:06:af:45:d0:4d:ad:
d7:20:14:9c:3d:f4:2f:95:84:02:a5:ca:fa:7f:95:
43:b7:a9:82:91:f8:c9:9a:ff:85:a9:02:8e:14:5e:
cc:e2:d2:60:2b:1b:d6:08:96:d7:02:a3:93:dd:d4:
cf:66:12:20:3d:a6:2c:87:27:ea:d9:45:9b:36:4e:
12:ba:ae:87:99:e6:99:c5:07:5c:ea:ab:bd:7a:86:
cb:b5:d3:80:8c:b2:d4:74:e5:66:55:4d:3a:60:02:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59048
sbgp-ipAddrBlock: critical
IPv4:
43.224.56.0/22
43.228.132.0-43.228.139.255
43.242.60.0-43.242.67.255
45.124.80.0/22
45.253.24.0/22
45.253.32.0/22
103.192.212.0/22
103.222.32.0/22
103.222.40.0/22
103.222.164.0/22
103.222.172.0/22
103.223.140.0/22
103.223.188.0/22
103.224.228.0/22
103.255.88.0/22
103.255.200.0/22
IPv6:
2401:a140::/32
Signature Algorithm: sha256WithRSAEncryption
b5:04:0b:04:77:b8:df:50:47:af:fd:49:77:c0:c2:80:88:91:
9c:d6:44:44:52:b4:9a:b1:0d:95:b3:aa:bf:9a:db:4c:da:aa:
b4:d8:cd:67:6d:26:7b:85:de:77:88:17:de:42:e1:ab:2f:2f:
3f:05:89:21:cd:bb:00:90:75:b5:70:73:71:1d:87:f6:42:91:
a2:16:45:8b:a7:87:c2:33:4e:3f:58:78:8c:34:ae:e3:cf:e0:
c4:2c:7b:14:ce:55:46:29:48:91:ab:88:f5:1a:ef:51:df:a6:
6d:b4:77:e6:2f:05:0b:d8:8e:a1:07:f0:6f:11:ad:46:2f:14:
ea:dc:6c:6a:09:93:ec:3d:7c:75:9b:1e:c6:a5:91:e9:4f:91:
da:46:48:38:13:b4:8c:c2:03:a6:2c:b6:92:1e:a6:f5:24:bb:
4f:20:29:89:8a:45:3a:42:e7:bb:88:4e:39:78:68:38:18:71:
cd:aa:09:d2:37:7d:8a:79:f8:36:75:e5:cd:97:47:0f:f2:f6:
cf:31:26:fd:4a:ab:89:08:c8:7b:c2:41:d8:cf:d7:38:72:54:
44:c7:47:85:84:f3:30:d5:cf:b7:78:1e:51:a0:55:f9:5c:22:
cc:0d:a3:9b:82:fb:bc:db:e0:22:74:10:fd:7f:77:41:4e:18:
3e:d4:24:1b
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgIDAK7zMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIxNTZaFw0yNTAxMzEwMTEzNDZaMDMx
MTAvBgNVBAMTKDUwOTE5NzJGQUI2RDFDNDU0RTJCNDQxMkRDNDQ4NUE0NzQ1OEJF
MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlqMD0sEoxyssDzfT
gkxwNf5rVcEVsKbuM8Q4qWnEpfrzSsqdcy1vr8KCixceXiiSJtRA+iW2Shxp2Mbm
Oqx2tMI+qPm4EPOXdkiaCFY+FW6UgiJc4PJ+zQsyqqUSq4xfjCyiWBK6kdhDd9fM
9FHFJ1SS/tcWagiKKP7Sbm5FDcGGMd4V8daJRgS1CeJWSnT34CbuUbYtefoTQOVN
XQavRdBNrdcgFJw99C+VhAKlyvp/lUO3qYKR+Mma/4WpAo4UXszi0mArG9YIltcC
o5Pd1M9mEiA9piyHJ+rZRZs2ThK6roeZ5pnFB1zqq716hsu104CMstR05WZVTTpg
AhqTAgMBAAGjggLrMIIC5zAdBgNVHQ4EFgQUUJGXL6ttHEVOK0QS3ESFpHRYvjYw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY3
OC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC82NzgvVUpHWEw2dHRIRVZPSzBRUzNFU0ZwSFJZdmpZLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5qgwgZoGCCsGAQUFBwEHAQH/BIGKMIGH
MHYEAgABMHADBAIr4DgwDAMEAivkhAMEAivkiDAMAwQCK/I8AwQCK/JAAwQCLXxQ
AwQCLf0YAwQCLf0gAwQCZ8DUAwQCZ94gAwQCZ94oAwQCZ96kAwQCZ96sAwQCZ9+M
AwQCZ9+8AwQCZ+DkAwQCZ/9YAwQCZ//IMA0EAgACMAcDBQAkAaFAMA0GCSqGSIb3
DQEBCwUAA4IBAQC1BAsEd7jfUEev/Ul3wMKAiJGc1kREUrSasQ2Vs6q/mttM2qq0
2M1nbSZ7hd53iBfeQuGrLy8/BYkhzbsAkHW1cHNxHYf2QpGiFkWLp4fCM04/WHiM
NK7jz+DELHsUzlVGKUiRq4j1Gu9R36ZttHfmLwUL2I6hB/BvEa1GLxTq3GxqCZPs
PXx1mx7GpZHpT5HaRkg4E7SMwgOmLLaSHqb1JLtPICmJikU6Que7iE45eGg4GHHN
qgnSN32Kefg2deXNl0cP8vbPMSb9SquJCMh7wkHYz9c4clREx0eFhPMw1c+3eB5R
oFX5XCLMDaObgvu82+AidBD9f3dBThg+1CQb
-----END CERTIFICATE-----
Generated at Fri May 17 11:08:25 2024 by rpki-client on console-ams.rpki-client.org