Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
File: ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer (raw, json)
Hash identifier: I54N6N+SdnXAGVp72N+sWmkbjg6K/YuRgWZv5RaNeRE=
Subject key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:53:57 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 58835
IP: 1.12.0.0/14
IP: 1.116.0.0/15
IP: 14.196.0.0 -- 14.197.127.255
IP: 42.187.128.0/17
IP: 42.192.0.0/15
IP: 42.194.128.0/17
IP: 43.242.252.0/22
IP: 49.51.0.0/16
IP: 49.223.0.0/16
IP: 49.232.0.0/14
IP: 58.87.64.0/18
IP: 101.130.0.0/15
IP: 101.244.0.0/16
IP: 101.246.0.0/17
IP: 103.38.116.0/22
IP: 103.234.0.0/22
IP: 106.50.0.0/16
IP: 106.52.0.0/14
IP: 110.40.128.0/17
IP: 110.42.128.0/17
IP: 111.229.0.0 -- 111.231.255.255
IP: 114.117.0.0/17
IP: 114.132.0.0/16
IP: 115.159.0.0/16
IP: 117.75.0.0/16
IP: 118.89.0.0/16
IP: 118.126.64.0/18
IP: 118.205.0.0 -- 118.206.255.255
IP: 119.27.160.0/19
IP: 119.28.0.0/15
IP: 119.45.0.0/16
IP: 119.91.0.0/16
IP: 120.53.0.0/16
IP: 121.4.0.0/15
IP: 121.68.0.0/16
IP: 122.51.0.0/16
IP: 122.152.192.0/18
IP: 123.197.128.0/17
IP: 123.206.0.0/15
IP: 124.220.0.0/14
IP: 175.24.0.0/16
IP: 175.27.0.0/16
IP: 175.178.0.0/16
IP: 175.188.0.0/17
IP: 180.91.0.0/17
IP: 182.254.128.0/17
IP: 203.195.128.0/17
IP: 210.73.160.0/19
IP: 210.74.48.0/20
IP: 211.159.128.0/17
IP: 223.210.128.0 -- 223.211.255.255
IP: 2402:4e00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48143 (0xbc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:53:57 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:f1:ef:39:67:b3:c4:c6:a8:3a:4b:e9:8a:
38:97:24:eb:65:22:06:3c:f8:2f:dd:85:8e:80:4a:
ad:35:e9:71:37:df:96:17:e7:e1:a5:48:51:f4:b5:
f9:56:e2:8e:c4:bf:86:92:6e:1f:c7:46:c4:ed:f8:
e5:8b:89:d0:31:11:18:3a:29:03:fa:01:18:6e:26:
68:72:5f:a1:68:fa:8f:c8:e3:20:08:49:f7:55:76:
76:0a:3e:7e:e8:fa:56:ef:ba:d8:c6:2b:cd:84:73:
6d:84:77:44:34:b7:29:a7:0d:4d:f3:2c:53:05:a8:
86:c6:75:91:25:5b:a7:de:91:6a:e4:7b:e3:9e:e0:
4a:29:b0:89:ac:55:63:97:3b:07:a3:c1:12:f5:46:
31:28:13:a8:f7:b0:dc:10:f6:1a:af:58:ad:ee:b8:
5a:81:d9:29:10:33:0d:b4:5a:73:e6:22:ba:bd:66:
b1:9e:a7:93:99:52:6e:8b:37:b7:20:69:3c:27:15:
53:02:53:d6:27:41:de:98:db:12:da:a0:7a:49:ff:
f7:10:b5:f0:56:d4:39:fe:bf:df:cd:ec:4b:a9:16:
d6:63:e9:c9:d1:6f:40:ce:65:eb:1b:ff:a6:df:70:
f1:fb:03:9b:01:da:ab:be:60:02:fd:9f:af:40:37:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58835
sbgp-ipAddrBlock: critical
IPv4:
1.12.0.0/14
1.116.0.0/15
14.196.0.0-14.197.127.255
42.187.128.0/17
42.192.0.0/15
42.194.128.0/17
43.242.252.0/22
49.51.0.0/16
49.223.0.0/16
49.232.0.0/14
58.87.64.0/18
101.130.0.0/15
101.244.0.0/16
101.246.0.0/17
103.38.116.0/22
103.234.0.0/22
106.50.0.0/16
106.52.0.0/14
110.40.128.0/17
110.42.128.0/17
111.229.0.0-111.231.255.255
114.117.0.0/17
114.132.0.0/16
115.159.0.0/16
117.75.0.0/16
118.89.0.0/16
118.126.64.0/18
118.205.0.0-118.206.255.255
119.27.160.0/19
119.28.0.0/15
119.45.0.0/16
119.91.0.0/16
120.53.0.0/16
121.4.0.0/15
121.68.0.0/16
122.51.0.0/16
122.152.192.0/18
123.197.128.0/17
123.206.0.0/15
124.220.0.0/14
175.24.0.0/16
175.27.0.0/16
175.178.0.0/16
175.188.0.0/17
180.91.0.0/17
182.254.128.0/17
203.195.128.0/17
210.73.160.0/19
210.74.48.0/20
211.159.128.0/17
223.210.128.0-223.211.255.255
IPv6:
2402:4e00::/32
Signature Algorithm: sha256WithRSAEncryption
17:73:4a:77:d9:6f:b3:7c:46:d5:8a:e9:d6:c1:d1:65:a3:8d:
9e:d2:2c:5c:f9:2d:a9:3c:de:6a:1f:e7:43:5f:1d:92:3a:df:
8e:4b:94:61:f7:8c:0c:b6:67:dc:e4:a9:48:44:b8:fc:d2:11:
96:26:27:dd:ff:9b:89:35:aa:0f:c4:c3:a6:b9:c9:c3:b4:ce:
1b:e1:c5:42:da:3d:39:b1:69:b2:c9:74:3f:2f:6b:74:75:ab:
37:a3:94:e6:7f:5f:b0:d7:2f:1b:37:2b:f1:0f:9b:4c:55:f4:
2b:8a:51:6d:0d:f1:ec:27:e8:7b:12:bc:32:34:ab:f0:62:3f:
f8:8c:c8:31:d2:fd:23:56:7b:f7:dc:4c:d1:7d:15:cf:61:fe:
d5:51:fa:92:74:46:18:4b:ba:9b:19:6e:d5:74:1d:83:84:bd:
af:0b:d3:c0:5c:51:a7:1d:d2:99:79:15:3c:1f:e4:0d:17:92:
3a:36:cc:6c:f5:61:8c:6a:71:7f:5b:a0:5b:23:75:99:24:23:
db:08:aa:d5:bb:ee:00:58:9c:ee:5c:8a:8c:6c:f4:85:c0:72:
e9:c3:f9:54:82:52:48:bf:5a:0f:a9:8b:a1:67:d0:01:76:16:
a5:e4:ee:cf:cc:9f:03:6a:37:25:6d:b5:61:04:4a:42:26:3c:
4b:80:57:3a
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIDALwPMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjUzNTdaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDY0REMyMEQ5NjEyQzVCNzc0OTlBNkQyMjNBNjUyQjJFMzhCMTE2
NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGfHvOWezxMaoOkvp
ijiXJOtlIgY8+C/dhY6ASq016XE335YX5+GlSFH0tflW4o7Ev4aSbh/HRsTt+OWL
idAxERg6KQP6ARhuJmhyX6Fo+o/I4yAISfdVdnYKPn7o+lbvutjGK82Ec22Ed0Q0
tymnDU3zLFMFqIbGdZElW6fekWrke+Oe4EopsImsVWOXOwejwRL1RjEoE6j3sNwQ
9hqvWK3uuFqB2SkQMw20WnPmIrq9ZrGep5OZUm6LN7cgaTwnFVMCU9YnQd6Y2xLa
oHpJ//cQtfBW1Dn+v9/N7EupFtZj6cnRb0DOZesb/6bfcPH7A5sB2qu+YAL9n69A
N9pXAgMBAAGjggO0MIIDsDAdBgNVHQ4EFgQUZNwg2WEsW3dJmm0iOmUrLjixFkcw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY1
Ni8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC82NTYvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5dMwggFiBggrBgEFBQcBBwEB/wSCAVEw
ggFNMIIBOgQCAAEwggEyAwMCAQwDAwEBdDALAwMCDsQDBAcOxQADBAcqu4ADAwEq
wAMEByrCgAMEAivy/AMDADEzAwMAMd8DAwIx6AMEBjpXQAMDAWWCAwMAZfQDBAdl
9gADBAJnJnQDBAJn6gADAwBqMgMDAmo0AwQHbiiAAwQHbiqAMAoDAwBv5QMDA2/g
AwQHcnUAAwMAcoQDAwBznwMDAHVLAwMAdlkDBAZ2fkAwCgMDAHbNAwMAds4DBAV3
G6ADAwF3HAMDAHctAwMAd1sDAwB4NQMDAXkEAwMAeUQDAwB6MwMEBnqYwAMEB3vF
gAMDAXvOAwMCfNwDAwCvGAMDAK8bAwMAr7IDBAevvAADBAe0WwADBAe2/oADBAfL
w4ADBAXSSaADBATSSjADBAfTn4AwCwMEB9/SgAMDAt/QMA0EAgACMAcDBQAkAk4A
MA0GCSqGSIb3DQEBCwUAA4IBAQAXc0p32W+zfEbViunWwdFlo42e0ixc+S2pPN5q
H+dDXx2SOt+OS5Rh94wMtmfc5KlIRLj80hGWJifd/5uJNaoPxMOmucnDtM4b4cVC
2j05sWmyyXQ/L2t0das3o5Tmf1+w1y8bNyvxD5tMVfQrilFtDfHsJ+h7ErwyNKvw
Yj/4jMgx0v0jVnv33EzRfRXPYf7VUfqSdEYYS7qbGW7VdB2DhL2vC9PAXFGnHdKZ
eRU8H+QNF5I6Nsxs9WGManF/W6BbI3WZJCPbCKrVu+4AWJzuXIqMbPSFwHLpw/lU
glJIv1oPqYuhZ9ABdhal5O7PzJ8DajclbbVhBEpCJjxLgFc6
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:27 2024 by rpki-client on console-fra.rpki-client.org