Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
File: duBG4-yhC5KEmfIqXnZcBBamCk8.cer (raw, json)
Hash identifier: ThU3cxI24OTBeXDbMIXLtJgQGIt1UFt7mfm9T7JI/MU=
Subject key identifier: 76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C43B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 14 Jan 2025 03:04:46 +0000
Certificate not after: Wed 14 Jan 2026 03:00:41 +0000
Subordinate resources: AS: 23771
AS: 45078
IP: 59.153.4.0/22
IP: 103.197.228.0/22
IP: 124.22.0.0/15
IP: 124.47.0.0/18
IP: 182.80.0.0/14
IP: 202.150.16.0/20
IP: 203.152.64.0/19
IP: 210.87.128.0/18
IP: 2405:e600::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Feb 2025 17:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50235 (0xc43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Jan 14 03:04:46 2025 GMT
Not After : Jan 14 03:00:41 2026 GMT
Subject: CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:64:31:d3:99:09:25:0a:06:44:5c:ec:e0:
d5:fa:07:c4:da:b6:0d:da:cf:05:6d:04:35:22:a4:
a1:31:0f:13:25:06:27:45:93:31:52:96:65:61:78:
b3:63:ea:e0:a5:15:b6:fb:64:c9:4f:0e:82:f2:8b:
7e:46:b5:4f:f5:40:2f:24:4e:fc:42:aa:51:4e:f0:
43:42:51:1d:3a:5b:8f:c8:7a:23:a6:71:a0:5a:ab:
68:c0:6c:43:31:76:f7:33:a5:18:f3:e8:5d:a3:46:
05:4b:f9:01:ee:91:b4:2b:cd:a8:26:37:b0:de:79:
11:8c:24:e3:da:2d:fa:40:5c:2d:c6:b1:f1:cd:1e:
d0:ea:c8:43:82:66:d2:5b:40:b0:07:f4:e3:ff:17:
57:70:09:fe:e8:1c:72:d2:55:e0:0e:dd:eb:e5:3f:
17:c1:49:d6:b7:ff:b9:cd:5a:93:00:bb:bf:e5:c7:
36:fd:c0:6f:05:a0:e7:f3:89:b2:fd:c8:23:3b:8c:
85:10:a2:b8:97:4c:69:b9:92:37:4b:83:49:93:5f:
76:3e:fd:44:33:a8:0e:dc:14:21:f4:d3:cf:bd:59:
d5:75:49:8b:d7:9b:81:aa:fd:6b:4d:5b:1b:fe:79:
a2:dc:39:83:52:4f:6b:66:ee:11:98:b3:22:0d:d7:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23771
45078
sbgp-ipAddrBlock: critical
IPv4:
59.153.4.0/22
103.197.228.0/22
124.22.0.0/15
124.47.0.0/18
182.80.0.0/14
202.150.16.0/20
203.152.64.0/19
210.87.128.0/18
IPv6:
2405:e600::/32
Signature Algorithm: sha256WithRSAEncryption
9d:8f:05:80:d8:c2:40:9c:4a:3f:9f:3d:9c:51:17:c2:70:93:
7b:f3:90:3e:d1:2c:6b:35:23:ae:ff:19:7e:b9:63:bd:18:78:
6f:9a:11:6e:28:b5:c8:41:9d:2f:37:9a:50:63:ec:7d:97:2c:
e2:b4:00:37:b0:e0:1d:a5:93:5a:68:0d:bf:71:b4:6c:e8:b9:
af:2f:dd:ce:8f:a3:1f:ec:2c:d5:d3:eb:97:d0:37:84:de:98:
16:1c:31:83:61:10:90:4a:f9:37:13:67:56:0e:71:43:7c:24:
26:e7:e1:68:03:c4:dc:96:3b:e8:52:81:ad:05:89:d2:6f:30:
38:fc:0c:96:57:06:c1:9d:ec:c0:c2:71:79:ba:60:ac:78:50:
75:24:d6:35:1a:06:f9:b0:a3:46:3b:8e:92:1e:65:4f:d7:bd:
0a:f9:a0:77:a1:2c:4f:b4:15:0f:36:1d:8f:6e:fb:b4:64:ee:
c0:37:8b:ca:7d:dd:c5:a0:1a:35:51:bb:74:d7:00:33:59:71:
df:52:a5:57:09:0a:d7:5a:57:16:0b:07:a7:11:55:7b:af:c6:
d6:a0:90:36:a1:e5:db:18:f3:04:b6:af:f7:42:61:21:9c:b9:
0a:3a:0b:69:90:3b:37:37:29:b7:01:b8:b6:b3:7f:91:93:de:
81:48:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:11:00 2025 by rpki-client