Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer (raw, json)
Hash identifier: fszewsXjGFpR0lUsVOnXcrGwtmR/9R6ElJQ1lxrHC5o=
Subject key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: B111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 01 Apr 2024 07:16:19 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 45110
IP: 43.254.228.0 -- 43.254.243.255
IP: 43.254.248.0/22
IP: 43.255.0.0/22
IP: 45.125.76.0/22
IP: 45.125.84.0 -- 45.125.103.255
IP: 103.23.160.0/22
IP: 103.103.188.0/22
IP: 103.193.212.0 -- 103.193.239.255
IP: 103.200.220.0 -- 103.201.3.255
IP: 103.201.192.0 -- 103.201.219.255
IP: 103.229.216.0/21
IP: 103.229.228.0/22
IP: 103.229.236.0 -- 103.229.243.255
IP: 111.118.200.0/21
IP: 113.21.232.0/21
IP: 114.31.64.0/21
IP: 114.141.80.0/21
IP: 119.161.120.0/21
IP: 120.136.16.0/21
IP: 202.47.104.0/21
IP: 202.57.192.0/20
IP: 202.65.96.0/22
IP: 203.114.244.0/22
IP: 2401:f7c0::/32
IP: 2403:9b00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 May 2024 00:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45329 (0xb111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 1 07:16:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:2c:cf:1d:e3:6b:44:6f:78:c6:23:43:04:
ad:eb:e0:99:00:0b:61:37:4e:83:2e:04:8a:e2:ea:
b5:47:fb:a8:1c:9d:a3:aa:a5:a7:3d:93:5a:a5:01:
ca:62:f2:94:2b:f9:ae:ee:4b:23:62:06:d3:54:b6:
6e:3b:46:3c:4f:98:88:d8:31:d6:a8:35:d2:5e:2e:
8f:42:43:9f:8f:fb:67:11:df:32:38:26:ac:28:ca:
55:e8:05:01:55:e7:a8:8d:b2:12:08:47:72:91:34:
a7:cf:91:1c:9f:60:1c:c6:d9:0a:28:6a:74:7d:9b:
81:b4:29:b0:4a:cc:b9:45:02:49:42:4b:11:68:4e:
db:39:2c:57:a4:c1:bb:86:ff:b5:93:d0:56:7e:23:
ba:b9:c8:14:e5:6e:1e:c7:a1:04:26:93:e7:eb:5f:
54:2c:bc:ae:c7:54:81:9a:0d:20:21:55:d1:2f:79:
39:7e:27:96:a8:73:c6:6a:d6:68:42:4c:36:d2:81:
41:21:48:a8:5f:dd:bc:fe:be:14:95:a8:33:a5:a4:
2f:1c:6a:43:b1:9f:54:75:d4:b0:d9:f8:d8:86:bb:
4c:56:5c:92:19:76:69:e6:48:96:1a:c9:8f:84:9d:
16:8b:6a:a1:72:d1:0b:f6:c1:f9:79:1c:2a:a7:f3:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45110
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0-43.254.243.255
43.254.248.0/22
43.255.0.0/22
45.125.76.0/22
45.125.84.0-45.125.103.255
103.23.160.0/22
103.103.188.0/22
103.193.212.0-103.193.239.255
103.200.220.0-103.201.3.255
103.201.192.0-103.201.219.255
103.229.216.0/21
103.229.228.0/22
103.229.236.0-103.229.243.255
111.118.200.0/21
113.21.232.0/21
114.31.64.0/21
114.141.80.0/21
119.161.120.0/21
120.136.16.0/21
202.47.104.0/21
202.57.192.0/20
202.65.96.0/22
203.114.244.0/22
IPv6:
2401:f7c0::/32
2403:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
5e:09:41:e0:ca:ca:c6:0c:5d:9d:3e:35:93:a3:8d:07:79:c3:
7f:f2:bb:4b:09:9d:db:a8:af:9f:7d:1c:24:6b:d8:7a:ee:64:
26:c6:d6:ae:32:d5:0c:28:57:34:ea:50:43:61:64:c1:7b:70:
2b:d5:79:d7:83:54:ae:a8:3e:be:bf:84:51:ba:22:6e:50:58:
af:bf:60:11:ce:b5:0c:cf:df:2c:ed:84:76:4c:78:40:45:44:
fa:3f:bf:54:51:7c:24:0c:ba:e1:f5:79:ee:05:55:37:01:fb:
3d:99:28:ea:4f:72:3a:75:a6:2a:11:6e:d5:e1:34:8d:fb:78:
9d:14:03:46:2e:b1:09:2e:6b:6d:e9:80:3f:3d:32:9c:fb:0e:
59:c9:02:30:96:13:c8:17:f5:64:79:f8:63:89:aa:39:3d:08:
74:38:51:e6:ee:fe:d5:5d:43:8d:1a:d1:73:bd:bf:8e:f6:4a:
d9:44:4b:73:00:13:90:b6:42:25:9a:9c:0c:38:e6:94:27:cc:
4b:89:09:7d:cc:a3:99:64:55:99:ee:3b:88:4b:fd:07:46:b8:
27:32:3c:12:8e:fc:36:3b:99:57:65:4e:f0:b2:bc:be:d9:e8:
08:cf:19:67:46:5a:d2:3e:2f:78:b3:d9:7c:5c:0d:09:8e:d5:
f8:60:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 19:43:01 2024 by rpki-client on console-ams.rpki-client.org