$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/bvKvdW1CN346rCRuOiHy_UtAf8U.cer File: bvKvdW1CN346rCRuOiHy_UtAf8U.cer (raw, json) Hash identifier: tLVvfNnX2Vkl4M/el9vsPsXRD/OSA1tW4mu0jaYcU+c= Subject key identifier: 6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: AE63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 01 Feb 2024 01:20:17 +0000 Certificate not after: Fri 31 Jan 2025 01:13:46 +0000 Subordinate resources: AS: 137802 IP: 103.114.4.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 00:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44643 (0xae63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Feb 1 01:20:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6EF2AF756D42377E3AAC246E3A21F2FD4B407FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:62:31:6a:ec:e7:cb:21:11:85:db:83:7f: 3e:cf:b1:77:2e:40:35:78:13:fe:af:19:7c:6a:f7: 23:5e:c5:55:68:48:57:26:83:66:8a:35:1b:76:bd: 52:e1:0c:a5:2c:cb:fe:9e:71:1b:45:9a:c2:76:3d: 95:2a:8f:e7:b4:4d:0f:7a:a7:11:0f:5d:84:7c:69: 8e:59:30:86:2a:cc:7f:c1:ee:1a:e6:1a:a1:0e:9e: 86:e0:f8:50:11:76:46:bd:49:69:5a:2d:16:4d:85: 6e:c9:46:2c:7e:1c:d2:9d:f9:0f:60:89:2e:1d:fb: 4b:ce:2f:99:44:74:62:cc:e7:10:72:24:7c:1f:e9: 3f:44:e5:10:82:60:1e:d6:7e:bb:01:ba:ac:d0:22: 6e:53:fd:12:6c:6f:a2:82:a8:22:6f:83:47:05:40: 78:f4:af:38:f4:ce:e3:e1:4e:de:af:25:38:c1:ff: f5:f2:17:bd:2b:d6:f4:1c:7f:77:76:e7:6b:a0:f7: 25:ae:2f:b2:a4:14:db:a4:a7:f9:c3:77:77:42:97: 0c:da:29:29:f5:7d:46:15:ba:f4:85:f2:ba:36:18: f0:a3:a7:03:64:f2:a5:bc:88:9a:6f:28:49:20:8b: f8:72:50:66:5f:b8:41:c7:ff:22:03:7d:6b:39:75: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F2:AF:75:6D:42:37:7E:3A:AC:24:6E:3A:21:F2:FD:4B:40:7F:C5 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2713/bvKvdW1CN346rCRuOiHy_UtAf8U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137802 sbgp-ipAddrBlock: critical IPv4: 103.114.4.0/22 Signature Algorithm: sha256WithRSAEncryption 62:50:58:9d:61:c2:da:9a:9b:e5:d2:84:10:c9:48:e0:56:27: 49:3b:b6:02:47:fe:8e:aa:11:5c:41:36:2d:6c:9f:de:a5:00: 49:dd:3c:2b:0d:37:6b:20:dc:44:4e:a7:b7:fe:b3:f8:a0:2b: 6f:7e:bb:3f:3b:d9:93:d9:1a:9b:32:35:b7:8b:77:c3:f1:68: 4d:f6:b9:af:bd:9b:ce:ec:09:25:6f:b6:b4:c8:bd:fd:0a:1c: 98:41:cc:bf:da:99:2f:bd:c5:f8:0b:54:61:30:3f:71:f6:a1: 1e:05:54:8e:da:79:13:a4:84:19:ad:3d:e1:a4:a1:b2:28:90: f2:9d:88:2f:cd:9f:bb:b1:81:d3:d8:e2:ff:5b:90:21:98:c3: e1:50:93:41:13:1b:9b:41:a7:fd:7b:b5:2a:84:60:3b:91:70: aa:f2:bd:b7:50:ac:ee:e2:31:79:1a:4a:41:12:06:41:a1:62: 0a:dd:31:81:75:e2:9d:69:28:a8:8c:9b:51:fb:fb:c5:3e:db: 09:1e:bb:48:bc:bc:59:90:71:52:13:9d:9a:e9:90:d5:0b:88: 09:2b:96:d9:06:48:57:b4:e9:f6:8c:62:27:3f:55:e1:f6:3f: 29:ca:6e:18:6b:53:d5:15:c2:92:1d:0b:7c:90:26:47:c8:d4: 1d:c5:5e:d0 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAK5jMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDAyMDEwMTIwMTdaFw0yNTAxMzEwMTEzNDZaMDMx MTAvBgNVBAMTKDZFRjJBRjc1NkQ0MjM3N0UzQUFDMjQ2RTNBMjFGMkZENEI0MDdG QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFmIxauznyyERhduD fz7PsXcuQDV4E/6vGXxq9yNexVVoSFcmg2aKNRt2vVLhDKUsy/6ecRtFmsJ2PZUq j+e0TQ96pxEPXYR8aY5ZMIYqzH/B7hrmGqEOnobg+FARdka9SWlaLRZNhW7JRix+ HNKd+Q9giS4d+0vOL5lEdGLM5xByJHwf6T9E5RCCYB7WfrsBuqzQIm5T/RJsb6KC qCJvg0cFQHj0rzj0zuPhTt6vJTjB//XyF70r1vQcf3d252ug9yWuL7KkFNukp/nD d3dClwzaKSn1fUYVuvSF8ro2GPCjpwNk8qW8iJpvKEkgi/hyUGZfuEHH/yIDfWs5 dThZAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUbvKvdW1CN346rCRuOiHy/UtAf8Uw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 MTMvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjcxMy9idkt2ZFcxQ04zNDZyQ1J1T2lIeV9VdEFmOFUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaSjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdyBDANBgkqhkiG9w0BAQsFAAOCAQEAYlBYnWHC2pqb5dKEEMlI 4FYnSTu2Akf+jqoRXEE2LWyf3qUASd08Kw03ayDcRE6nt/6z+KArb367PzvZk9ka mzI1t4t3w/FoTfa5r72bzuwJJW+2tMi9/QocmEHMv9qZL73F+AtUYTA/cfahHgVU jtp5E6SEGa094aShsiiQ8p2IL82fu7GB09ji/1uQIZjD4VCTQRMbm0Gn/Xu1KoRg O5FwqvK9t1Cs7uIxeRpKQRIGQaFiCt0xgXXinWkoqIybUfv7xT7bCR67SLy8WZBx UhOdmumQ1QuICSuW2QZIV7Tp9oxiJz9V4fY/KcpuGGtT1RXCkh0LfJAmR8jUHcVe 0A== -----END CERTIFICATE-----Generated at Sun May 19 19:43:01 2024 by rpki-client on console-ams.rpki-client.org