$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer File: gAU2J4vfpFmf4GZnJwxX1IVoBfE.cer (raw, json) Hash identifier: inbo0DfJSw9W9NOPt2ZTNieWMmxul6tcPNfKtcm9C2o= Subject key identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: BA7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 27 Sep 2024 02:47:59 +0000 Certificate not after: Sat 27 Sep 2025 02:40:14 +0000 Subordinate resources: AS: 151309 IP: 103.244.26.0/23 IP: 2401:1de0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47741 (0xba7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Sep 27 02:47:59 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=800536278BDFA4599FE06667270C57D4856805F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e5:53:c2:62:b5:91:94:dc:9f:9f:32:23:eb: 79:bb:fc:b5:11:58:63:86:b4:47:97:04:b1:2a:ee: c8:96:4a:b8:82:f2:eb:c9:26:97:59:54:96:57:f1: c9:68:63:49:02:c0:13:c5:2d:b4:ca:4a:ab:d9:6d: 2a:b8:fc:f6:09:7a:94:a8:a7:7f:7b:93:31:15:35: b2:a9:57:8b:f6:cd:c0:9a:e0:b2:a2:ff:25:ee:ed: 53:4c:ad:fa:d9:1f:af:28:d0:38:86:2d:87:2c:9d: 6b:41:a0:af:34:74:3d:dc:22:00:f5:81:a5:62:42: db:56:7e:32:7e:2e:86:4a:fa:94:34:91:f4:90:95: dc:27:a3:fc:ae:83:32:3c:4d:6a:1b:59:9e:84:0d: 35:30:e1:e3:ee:68:8f:dd:9f:44:cb:0e:16:90:2d: 23:d9:16:70:7b:da:38:4a:64:5c:20:b1:35:ad:2a: fe:0b:fc:78:86:e8:c7:1b:cc:28:dc:e4:56:33:ea: e4:5c:98:47:2c:3d:ce:40:42:06:ed:bb:13:ec:a4: 6e:e3:ee:c5:bc:91:c8:e5:d7:a2:d9:53:55:f6:c6: 8d:77:35:c7:7e:56:48:93:a0:ea:9f:a3:91:aa:71: 70:ec:b7:92:a1:9a:dc:65:5f:06:08:3e:eb:b1:51: 23:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:05:36:27:8B:DF:A4:59:9F:E0:66:67:27:0C:57:D4:85:68:05:F1 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3234/gAU2J4vfpFmf4GZnJwxX1IVoBfE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151309 sbgp-ipAddrBlock: critical IPv4: 103.244.26.0/23 IPv6: 2401:1de0::/32 Signature Algorithm: sha256WithRSAEncryption 61:e1:6c:a8:a7:e0:fd:4f:37:9f:d7:8f:73:14:ea:14:d0:66: b3:1e:d4:dd:83:93:ef:d0:2e:1b:75:9d:b5:64:01:bf:7c:e9: 30:6e:0e:4a:d8:85:cd:69:61:9e:37:bc:b6:3b:57:35:80:34: 6c:0e:83:dc:27:5c:54:3b:f9:65:7e:29:ab:b9:cd:06:78:8b: 19:44:99:4e:8e:d4:07:85:b0:96:0a:0e:c9:64:3d:90:6c:8a: ae:c0:d7:d3:55:ea:50:91:d9:0d:ba:55:3d:5f:3e:49:e4:9b: fe:26:48:d8:95:a2:cd:9d:2c:17:0d:44:8a:73:62:c1:cc:35: 5e:46:51:30:91:58:37:2e:c3:ce:d8:58:18:e6:10:d0:36:ac: 3b:61:36:a7:82:6e:0b:c0:a1:9c:59:0f:aa:4c:bb:4f:88:cf: 4a:b6:a7:5d:23:27:a9:fe:af:9a:44:1b:b2:6d:4d:46:32:85: 03:58:17:fc:2f:f3:07:92:b7:84:16:88:63:a3:39:79:82:ee: 9d:ab:e0:28:e6:73:52:e0:3d:0b:f2:9c:f9:f2:6b:b1:85:1c: 6b:a1:2d:f0:85:20:2e:1d:82:ac:86:1d:51:13:8b:a9:ce:3c: 2e:d7:85:ee:c6:5f:4d:23:fc:81:66:1b:83:6d:78:45:2e:82: b9:4a:c2:2c -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDALp9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ3NTlaFw0yNTA5MjcwMjQwMTRaMDMx MTAvBgNVBAMTKDgwMDUzNjI3OEJERkE0NTk5RkUwNjY2NzI3MEM1N0Q0ODU2ODA1 RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw5VPCYrWRlNyfnzIj 63m7/LURWGOGtEeXBLEq7siWSriC8uvJJpdZVJZX8cloY0kCwBPFLbTKSqvZbSq4 /PYJepSop397kzEVNbKpV4v2zcCa4LKi/yXu7VNMrfrZH68o0DiGLYcsnWtBoK80 dD3cIgD1gaViQttWfjJ+LoZK+pQ0kfSQldwno/yugzI8TWobWZ6EDTUw4ePuaI/d n0TLDhaQLSPZFnB72jhKZFwgsTWtKv4L/HiG6McbzCjc5FYz6uRcmEcsPc5AQgbt uxPspG7j7sW8kcjl16LZU1X2xo13Ncd+VkiToOqfo5GqcXDst5KhmtxlXwYIPuux USNdAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQUgAU2J4vfpFmf4GZnJwxX1IVoBfEw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIzNC9nQVUySjR2ZnBGbWY0R1puSnd4WDFJVm9CZkUubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJPDTAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWf0GjANBAIAAjAHAwUAJAEd4DANBgkqhkiG9w0BAQsFAAOCAQEA YeFsqKfg/U83n9ePcxTqFNBmsx7U3YOT79AuG3WdtWQBv3zpMG4OStiFzWlhnje8 tjtXNYA0bA6D3CdcVDv5ZX4pq7nNBniLGUSZTo7UB4WwlgoOyWQ9kGyKrsDX01Xq UJHZDbpVPV8+SeSb/iZI2JWizZ0sFw1EinNiwcw1XkZRMJFYNy7DzthYGOYQ0Das O2E2p4JuC8ChnFkPqky7T4jPSranXSMnqf6vmkQbsm1NRjKFA1gX/C/zB5K3hBaI Y6M5eYLunavgKOZzUuA9C/Kc+fJrsYUca6Et8IUgLh2CrIYdUROLqc48LteF7sZf TSP8gWYbg214RS6CuUrCLA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:27 2024 by rpki-client on console-fra.rpki-client.org