Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
File: ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer (raw, json)
Hash identifier: kRse20TpvGoG12gCWrymd9TZJe4nVnvqimNA2ykfq1g=
Subject key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AF33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:23:17 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 58835
IP: 1.12.0.0/14
IP: 1.116.0.0/15
IP: 14.196.0.0 -- 14.197.127.255
IP: 42.187.128.0/17
IP: 42.192.0.0/15
IP: 42.194.128.0/17
IP: 43.242.252.0/22
IP: 49.51.0.0/16
IP: 49.223.0.0/16
IP: 49.232.0.0/14
IP: 58.87.64.0/18
IP: 101.130.0.0/15
IP: 101.244.0.0/16
IP: 101.246.0.0/17
IP: 103.38.116.0/22
IP: 103.234.0.0/22
IP: 106.50.0.0/16
IP: 106.52.0.0/14
IP: 110.40.128.0/17
IP: 110.42.128.0/17
IP: 111.229.0.0 -- 111.231.255.255
IP: 114.117.0.0/17
IP: 114.132.0.0/16
IP: 115.159.0.0/16
IP: 117.75.0.0/16
IP: 118.89.0.0/16
IP: 118.126.64.0/18
IP: 118.205.0.0 -- 118.206.255.255
IP: 119.27.160.0/19
IP: 119.28.0.0/15
IP: 119.45.0.0/16
IP: 119.91.0.0/16
IP: 120.53.0.0/16
IP: 121.4.0.0/15
IP: 121.68.0.0/16
IP: 122.51.0.0/16
IP: 122.152.192.0/18
IP: 123.197.128.0/17
IP: 123.206.0.0/15
IP: 124.220.0.0/14
IP: 175.24.0.0/16
IP: 175.27.0.0/16
IP: 175.178.0.0/16
IP: 175.188.0.0/17
IP: 180.91.0.0/17
IP: 182.254.128.0/17
IP: 203.195.128.0/17
IP: 210.73.160.0/19
IP: 210.74.48.0/20
IP: 211.159.128.0/17
IP: 223.210.128.0 -- 223.211.255.255
IP: 2402:4e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 May 2024 05:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44851 (0xaf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:23:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:f1:ef:39:67:b3:c4:c6:a8:3a:4b:e9:8a:
38:97:24:eb:65:22:06:3c:f8:2f:dd:85:8e:80:4a:
ad:35:e9:71:37:df:96:17:e7:e1:a5:48:51:f4:b5:
f9:56:e2:8e:c4:bf:86:92:6e:1f:c7:46:c4:ed:f8:
e5:8b:89:d0:31:11:18:3a:29:03:fa:01:18:6e:26:
68:72:5f:a1:68:fa:8f:c8:e3:20:08:49:f7:55:76:
76:0a:3e:7e:e8:fa:56:ef:ba:d8:c6:2b:cd:84:73:
6d:84:77:44:34:b7:29:a7:0d:4d:f3:2c:53:05:a8:
86:c6:75:91:25:5b:a7:de:91:6a:e4:7b:e3:9e:e0:
4a:29:b0:89:ac:55:63:97:3b:07:a3:c1:12:f5:46:
31:28:13:a8:f7:b0:dc:10:f6:1a:af:58:ad:ee:b8:
5a:81:d9:29:10:33:0d:b4:5a:73:e6:22:ba:bd:66:
b1:9e:a7:93:99:52:6e:8b:37:b7:20:69:3c:27:15:
53:02:53:d6:27:41:de:98:db:12:da:a0:7a:49:ff:
f7:10:b5:f0:56:d4:39:fe:bf:df:cd:ec:4b:a9:16:
d6:63:e9:c9:d1:6f:40:ce:65:eb:1b:ff:a6:df:70:
f1:fb:03:9b:01:da:ab:be:60:02:fd:9f:af:40:37:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58835
sbgp-ipAddrBlock: critical
IPv4:
1.12.0.0/14
1.116.0.0/15
14.196.0.0-14.197.127.255
42.187.128.0/17
42.192.0.0/15
42.194.128.0/17
43.242.252.0/22
49.51.0.0/16
49.223.0.0/16
49.232.0.0/14
58.87.64.0/18
101.130.0.0/15
101.244.0.0/16
101.246.0.0/17
103.38.116.0/22
103.234.0.0/22
106.50.0.0/16
106.52.0.0/14
110.40.128.0/17
110.42.128.0/17
111.229.0.0-111.231.255.255
114.117.0.0/17
114.132.0.0/16
115.159.0.0/16
117.75.0.0/16
118.89.0.0/16
118.126.64.0/18
118.205.0.0-118.206.255.255
119.27.160.0/19
119.28.0.0/15
119.45.0.0/16
119.91.0.0/16
120.53.0.0/16
121.4.0.0/15
121.68.0.0/16
122.51.0.0/16
122.152.192.0/18
123.197.128.0/17
123.206.0.0/15
124.220.0.0/14
175.24.0.0/16
175.27.0.0/16
175.178.0.0/16
175.188.0.0/17
180.91.0.0/17
182.254.128.0/17
203.195.128.0/17
210.73.160.0/19
210.74.48.0/20
211.159.128.0/17
223.210.128.0-223.211.255.255
IPv6:
2402:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
b1:92:72:95:25:5e:6e:a7:53:83:e3:89:0b:5d:1a:f9:28:a1:
4b:c9:e7:f9:80:74:5d:f1:54:0e:79:b6:3d:c6:7d:ab:6b:e4:
9d:c0:47:84:35:61:35:51:83:ac:f3:73:b1:c1:0d:dc:b1:30:
83:c7:60:51:bb:a5:22:19:70:cf:78:f7:85:91:35:3a:68:29:
f5:8a:9d:ef:99:f9:a3:d7:fc:f4:5c:2f:88:4f:9c:99:ce:05:
6b:89:66:c9:7d:a8:62:11:bd:93:0a:0e:e9:7b:6e:27:09:83:
bd:a9:3c:cc:9e:39:cc:14:0f:71:c0:cd:fe:f3:35:cf:bf:20:
50:12:fb:1c:ac:44:2e:c6:61:fa:6d:85:05:2b:f4:19:62:fe:
4b:4a:1b:81:6a:97:50:94:b0:cf:22:23:c9:23:4a:55:8b:34:
0c:89:ab:92:ef:d8:b9:c3:9c:62:63:fe:7e:f7:c5:76:30:b0:
81:b1:16:9a:b0:02:7f:a7:d7:e1:0e:ef:bd:3d:81:0f:05:02:
e0:05:98:07:f4:5c:5f:35:ba:65:0b:7e:c4:85:ea:06:94:1c:
2e:18:e3:ad:25:70:35:c6:17:2f:8e:92:d7:30:10:c8:83:a1:
61:2e:43:e4:9e:51:e9:f2:e7:db:b1:45:4f:ee:43:2e:21:0d:
61:9c:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:17:34 2024 by rpki-client on console-fra.rpki-client.org