Certificate

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bg7MO7fHsBvgmhGJ-9IjV551o58.cer
File:                     bg7MO7fHsBvgmhGJ-9IjV551o58.cer (raw, json)
Hash identifier:          tl1lth97BjN6nezAacLA9aHz0uQhFuFXahoT1UyqQ60=
Subject key identifier:   6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer:       /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial:       C8A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest:                 rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
caRepository:             rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/
Notify URL:               https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before:   Fri 21 Mar 2025 02:58:00 +0000
Certificate not after:    Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources:    AS: 132019
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51369 (0xc8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0000
        Validity
            Not Before: Mar 21 02:58:00 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=6E0ECC3BB7C7B01BE09A1189FBD223579E75A39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:7c:31:26:b3:3a:0a:6a:a5:af:f3:a7:f8:
                    21:4f:4d:54:47:d7:0b:ee:77:7c:56:64:06:26:3f:
                    54:66:60:05:e5:cb:8e:f8:61:5b:66:b0:b5:cb:0d:
                    e6:fc:6a:a1:bf:f4:63:53:45:ee:12:b7:41:34:a1:
                    af:f6:17:fc:fd:26:4b:f6:23:fa:51:f2:e5:f5:50:
                    3c:f6:2f:44:8d:bb:f3:45:b3:7a:2e:58:cd:74:40:
                    71:e8:7e:c9:83:96:06:d1:c6:94:d4:84:18:9f:fb:
                    51:60:7c:63:0b:1a:ab:a8:78:e2:40:d8:38:00:44:
                    23:eb:a6:bf:65:c4:11:fb:36:bc:e4:78:98:10:38:
                    41:df:bb:d6:d2:1e:79:79:39:c7:51:6f:61:62:79:
                    24:ed:1f:b2:ef:c8:f1:fd:f7:62:64:1d:47:fd:d4:
                    30:d9:d6:58:a1:04:fc:5a:5c:1b:50:af:78:92:98:
                    6e:07:34:ea:d1:57:4a:d6:51:2f:71:88:e6:27:39:
                    ab:54:23:7e:f8:27:97:16:0a:08:98:9a:6c:89:df:
                    f4:15:ad:9b:ad:0d:27:b8:49:82:81:cf:fd:5a:c6:
                    98:37:4b:e2:d2:0b:36:b2:5f:6e:d0:44:4b:98:b0:
                    3d:f9:6c:d3:1c:78:85:a0:d8:bd:1e:5e:2f:cc:39:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:CC:3B:B7:C7:B0:1B:E0:9A:11:89:FB:D2:23:57:9E:75:A3:9F
            X509v3 Authority Key Identifier:
                keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/
                RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/bg7MO7fHsBvgmhGJ-9IjV551o58.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132019

    Signature Algorithm: sha256WithRSAEncryption
         ab:3e:10:e9:e3:73:44:c8:77:85:8b:42:e6:c4:45:ae:39:16:
         88:42:2f:30:04:74:f0:2e:b4:42:c5:b6:70:00:44:50:d0:c9:
         4a:d0:42:3a:b4:35:fd:24:9f:d4:bd:c5:a2:e4:3b:e4:08:bd:
         2d:59:21:c1:ed:8f:68:c2:4f:ea:10:d1:24:77:50:28:67:0a:
         cd:62:b6:f2:4b:7a:58:b6:48:b0:02:7b:a9:1b:98:da:d7:9e:
         cf:43:ff:93:d5:ad:dc:4c:53:18:d7:e7:ef:b4:fc:47:de:31:
         81:6e:36:0a:62:b3:61:59:7b:52:2e:67:a8:ba:82:80:f1:21:
         5c:c8:f1:12:2c:5d:15:5c:04:96:de:b8:39:30:16:a6:8d:21:
         3d:9a:4a:2e:6a:c2:54:23:68:61:70:1f:1e:fe:86:a7:b4:a2:
         36:2f:27:be:8b:47:b0:3c:eb:eb:f2:3d:fa:a0:05:27:c8:29:
         57:d9:98:a4:a9:c3:ab:21:8b:4c:e2:c7:de:6e:43:ab:06:4d:
         cd:52:cd:7d:83:3d:f4:59:94:95:79:ba:5b:a2:34:e5:50:48:
         51:f7:9d:19:e5:11:b2:10:0e:f7:31:2f:30:f4:90:f6:24:6b:
         9c:12:f7:9e:cc:da:6e:9e:fc:9a:7e:fe:cc:06:43:d3:7f:5d:
         4d:9f:fa:05
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDAMipMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTAzMjEwMjU4MDBaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKDZFMEVDQzNCQjdDN0IwMUJFMDlBMTE4OUZCRDIyMzU3OUU3NUEz
OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwXwxJrM6Cmqlr/On
+CFPTVRH1wvud3xWZAYmP1RmYAXly474YVtmsLXLDeb8aqG/9GNTRe4St0E0oa/2
F/z9Jkv2I/pR8uX1UDz2L0SNu/NFs3ouWM10QHHofsmDlgbRxpTUhBif+1FgfGML
GquoeOJA2DgARCPrpr9lxBH7NrzkeJgQOEHfu9bSHnl5OcdRb2FieSTtH7LvyPH9
92JkHUf91DDZ1lihBPxaXBtQr3iSmG4HNOrRV0rWUS9xiOYnOatUI374J5cWCgiY
mmyJ3/QVrZutDSe4SYKBz/1axpg3S+LSCzayX27QREuYsD35bNMceIWg2L0eXi/M
OerLAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUbg7MO7fHsBvgmhGJ+9IjV551o58w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4
MTUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjgxNS9iZzdNTzdmSHNCdmdtaEdKLTlJalY1NTFvNTgubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIDszANBgkqhkiG9w0BAQsFAAOCAQEA
qz4Q6eNzRMh3hYtC5sRFrjkWiEIvMAR08C60QsW2cABEUNDJStBCOrQ1/SSf1L3F
ouQ75Ai9LVkhwe2PaMJP6hDRJHdQKGcKzWK28kt6WLZIsAJ7qRuY2teez0P/k9Wt
3ExTGNfn77T8R94xgW42CmKzYVl7Ui5nqLqCgPEhXMjxEixdFVwElt64OTAWpo0h
PZpKLmrCVCNoYXAfHv6Gp7SiNi8nvotHsDzr6/I9+qAFJ8gpV9mYpKnDqyGLTOLH
3m5DqwZNzVLNfYM99FmUlXm6W6I05VBIUfedGeURshAO9zEvMPSQ9iRrnBL3nsza
bp78mn7+zAZD039dTZ/6BQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:01:40 2025 by rpki-client