Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer
File: UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer (raw, json)
Hash identifier: OZfW+9fKcyEVrmp3nae1++TzB6d2JkBlY2dagtOL9pQ=
Subject key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:24:15 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 45090
IP: 43.247.196.0/22
IP: 103.18.208.0/21
IP: 103.238.16.0/22
IP: 121.51.0.0/16
IP: 182.254.0.0/17
IP: 203.205.128.0/17
IP: 210.74.32.0/21
IP: 211.152.128.0/19
IP: 211.159.96.0/19
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 May 2024 05:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44925 (0xaf7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:24:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:31:74:cb:9a:ce:e7:e0:b4:c9:6a:97:b0:
1a:5b:37:42:26:30:53:19:07:ce:f3:13:ab:1c:71:
a3:01:71:73:f6:41:07:c4:30:3a:6b:7f:6a:4e:d2:
b5:9b:78:3f:85:c9:3b:cb:69:19:e9:dd:3e:75:df:
20:3e:88:a7:35:cf:1d:d8:09:7f:38:4a:01:9d:59:
56:f8:43:79:9e:2c:5d:67:0b:11:6d:e2:e4:2d:88:
a7:6a:4f:a2:21:5c:d2:0f:bb:bf:93:99:42:bc:2f:
88:50:98:e6:27:c5:81:52:f5:59:32:28:9c:1e:3a:
43:71:dc:14:b1:1c:7e:29:96:6f:7e:06:be:42:33:
fb:68:9f:ee:8e:9a:86:85:a5:df:82:7c:9c:2a:35:
26:1a:b1:57:6f:d7:a5:8e:09:c1:5f:07:9a:cd:fc:
07:77:e4:cd:5e:4b:1f:69:96:42:93:e8:85:c1:ef:
cf:20:9b:95:61:7a:5e:20:3d:67:c3:fc:5a:81:68:
1d:b7:b7:e9:1a:e7:af:f4:e1:74:26:e2:ec:e1:24:
6d:82:20:e4:1b:24:9b:88:cb:60:1a:54:04:d4:02:
0c:43:40:1a:f0:14:19:b5:c3:d6:c7:43:5c:56:f5:
bc:34:3a:74:81:65:42:2b:7f:5e:17:28:00:71:e4:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45090
sbgp-ipAddrBlock: critical
IPv4:
43.247.196.0/22
103.18.208.0/21
103.238.16.0/22
121.51.0.0/16
182.254.0.0/17
203.205.128.0/17
210.74.32.0/21
211.152.128.0/19
211.159.96.0/19
Signature Algorithm: sha256WithRSAEncryption
58:90:10:15:4e:63:9b:3d:fe:51:92:ca:73:bd:fb:c5:fe:7d:
cb:04:d3:4c:f8:92:05:b7:85:77:2f:47:b8:68:69:9e:3c:ac:
53:7e:12:b0:b8:1e:b2:83:1f:26:b6:5d:5c:03:8c:84:25:39:
eb:99:22:d9:51:8e:85:f9:6b:dc:49:7a:07:fd:18:04:26:54:
8a:a0:52:f9:b4:90:fd:61:47:04:53:79:04:f4:37:8c:27:58:
41:00:20:63:96:2d:fa:3b:f3:44:eb:2a:c9:63:44:71:10:2e:
96:86:12:bc:25:11:7f:00:7d:f2:96:ce:ae:63:6e:ab:d7:b9:
39:ab:3c:67:87:7e:ae:85:d1:67:57:f7:89:27:af:ed:f5:f5:
5b:fe:2b:9d:ed:3b:e1:35:3a:63:2e:2a:48:b1:45:ac:9f:55:
90:b7:7d:f4:f8:05:ea:b6:77:6f:86:94:23:c0:aa:e9:37:a3:
ac:59:33:79:0d:7e:38:5c:67:b4:dc:31:e8:7f:62:03:a8:b0:
87:f6:09:d4:ea:e6:ed:8a:eb:fa:0a:b7:00:c4:56:4b:0e:c3:
86:f1:d9:d3:b8:43:9f:e2:1a:f8:db:52:ea:90:5d:31:72:f6:
7f:11:fa:e7:aa:0c:5c:cc:dc:00:cb:a0:9a:93:fb:f5:c1:b9:
65:66:46:de
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 20 00:17:34 2024 by rpki-client on console-fra.rpki-client.org