Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
File: iIhNTUp18X8I3UTLqVkv5w9TnZc.cer (raw, json)
Hash identifier: dLfWyilMsVhpWBYtaOA4dw/+utgrFpqGXqM//IReNaA=
Subject key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BE60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 18 Oct 2024 08:19:40 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 63641
AS: 151222
IP: 103.74.124.0/22
IP: 120.137.0.0/17
IP: 123.49.128.0 -- 123.49.247.255
IP: 2405:6c0::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48736 (0xbe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 18 08:19:40 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:1f:7d:9b:d3:8e:e3:08:07:05:74:2b:2d:
bf:bd:db:c5:f3:fa:33:1e:31:38:5b:bf:7d:2c:bf:
4b:d0:c8:5b:0e:5e:bd:2e:dd:ae:09:7b:5c:ca:b6:
89:de:63:96:e3:26:22:1e:29:36:2d:59:19:2c:fe:
28:6b:6b:51:65:9a:3a:01:f4:1e:ca:98:a3:0f:93:
ea:aa:e9:13:c3:b0:6c:5b:b9:60:ab:cc:c8:fd:6e:
9a:3a:d4:88:bd:73:74:89:8f:d3:61:3c:51:8a:33:
59:4f:c6:05:9b:95:f4:f5:75:0c:e7:e8:1a:83:1b:
87:9b:f3:00:5a:ea:96:cf:19:f7:9b:83:6c:54:90:
59:1b:7e:1d:17:7b:dc:08:dc:59:1f:2b:9e:4a:6b:
d0:85:d9:e9:c0:79:c4:21:bf:17:a2:b6:d4:f7:00:
6b:99:41:8d:24:ff:ff:06:41:69:bd:ca:de:1b:d6:
73:20:cd:c4:0b:cb:07:3a:84:75:d0:a4:b9:75:f5:
26:c6:c0:e4:95:85:0c:fe:bf:31:59:48:0c:25:15:
e1:04:3d:23:d4:f6:67:76:8a:50:b2:73:6b:59:cf:
19:07:ca:cd:01:6d:a7:4c:01:02:84:50:fc:91:e7:
a4:55:47:65:25:89:09:76:ac:00:2e:b5:91:fd:4c:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63641
151222
sbgp-ipAddrBlock: critical
IPv4:
103.74.124.0/22
120.137.0.0/17
123.49.128.0-123.49.247.255
IPv6:
2405:6c0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:03:05:62:87:85:98:18:e1:f6:05:c2:7a:e0:ae:bc:bd:44:
fb:d5:92:35:24:be:cc:4f:3d:e0:6c:0b:11:92:3f:e7:76:12:
10:65:9d:7e:f1:c5:4f:9e:4e:c0:98:73:1c:c7:d8:e8:5f:3d:
8f:f6:5f:67:f4:f8:b1:f6:61:16:14:07:1c:e2:b1:c3:74:5f:
6a:eb:f2:b2:d2:11:79:2e:4f:20:26:b8:8a:ca:5b:9e:03:aa:
6e:49:e8:84:40:ed:86:d1:69:2d:ee:25:ed:74:40:16:27:80:
cf:c0:dc:8a:13:00:c8:87:a1:79:1e:fa:23:0b:e8:6a:1f:12:
26:73:70:98:6b:6e:eb:1c:f7:dc:a9:61:65:71:02:79:b8:b8:
1d:d2:7f:55:9a:63:13:d4:e1:ae:c3:b6:78:46:5c:80:d3:d4:
41:83:75:08:6e:c9:af:bc:37:36:01:30:8e:68:4b:3d:3a:46:
07:93:18:36:ea:a0:a2:2f:04:5e:15:5c:d4:fe:82:2c:07:d7:
b6:49:8f:06:28:c2:44:25:ef:62:a3:1d:ef:4a:6a:c3:3f:69:
79:9e:95:7b:b7:65:11:15:e2:ba:bb:db:be:ce:09:b6:dc:14:
8b:fc:38:71:cc:c0:6c:c1:9d:03:b3:a7:af:3e:3f:b1:e5:fc:
18:2f:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:27 2024 by rpki-client on console-fra.rpki-client.org