Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer (raw, json)
Hash identifier: /pYRMrP8eq7hTutC/Kg5m0SS2oBrWZLUjYM9Qd+YVLQ=
Subject key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C86D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:57:53 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 36.206.0.0/16
IP: 36.216.0.0/14
IP: 110.116.0.0/16
IP: 110.199.0.0/16
IP: 122.94.0.0/16
IP: 123.77.0.0/16
IP: 222.49.128.0/17
IP: 222.59.128.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51309 (0xc86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:57:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:ad:1b:43:76:5d:77:9d:6c:3c:27:96:d9:
fb:42:1d:91:c9:d2:bc:ee:73:8e:09:97:59:99:b3:
20:75:1f:bb:19:ff:a8:22:12:f8:92:1b:37:f6:c6:
07:2f:f0:83:52:81:88:0e:ad:9c:7e:a1:60:0e:e9:
2f:1f:2f:6e:48:69:52:6f:a2:67:4f:3d:58:37:1f:
4f:59:4c:82:6d:74:4e:34:8e:c2:50:84:a9:2a:a7:
83:00:61:3d:e5:03:f9:b1:86:3f:04:4c:ce:69:33:
1d:31:6e:27:e1:01:be:88:c4:60:e6:00:2b:a3:b7:
09:f1:5e:9a:e5:87:ee:13:e6:b2:7b:b6:4c:9c:6c:
67:ee:9f:18:26:b8:05:9e:cc:b2:ff:ad:4f:9d:88:
78:8e:b7:bb:ef:9f:31:a5:88:96:3e:06:6c:34:46:
35:a4:e7:ca:eb:44:b3:51:10:57:32:6a:73:79:4e:
a7:ed:1e:7a:0c:b3:59:9b:c5:f8:1e:0d:dc:14:c3:
a3:87:63:5b:a9:8e:e8:c1:48:6a:a1:00:7d:82:67:
14:21:1d:01:d9:6c:47:a5:08:e4:6c:60:37:3e:cf:
01:0d:97:38:d8:37:af:98:9c:68:c9:e3:af:f2:7d:
9a:65:6a:21:61:40:a1:94:3a:c3:12:62:14:93:57:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.206.0.0/16
36.216.0.0/14
110.116.0.0/16
110.199.0.0/16
122.94.0.0/16
123.77.0.0/16
222.49.128.0/17
222.59.128.0/17
Signature Algorithm: sha256WithRSAEncryption
32:63:4c:4a:15:bf:76:73:5d:7e:a9:17:e9:4a:21:c9:4b:1e:
47:5e:2b:84:b3:4e:73:6a:61:c3:c1:c8:7e:cf:e5:7d:60:49:
20:cb:1f:dd:0a:7b:09:c2:f7:cd:cf:dc:72:43:d2:b0:63:ec:
c4:e8:f2:09:9d:df:16:2d:7c:17:ae:89:4f:4f:98:1c:96:d5:
9a:b9:6c:ce:b6:31:82:db:bc:5c:2d:cc:45:49:f9:91:d4:cd:
46:f5:3f:8b:13:a7:a2:a6:0d:a7:17:a8:f6:06:d0:c5:1f:4c:
93:c3:66:aa:18:e9:bd:dc:63:b1:a8:c2:e4:b0:b0:9c:e9:68:
2e:30:47:a0:0c:5a:5b:5a:81:f9:e8:a2:ea:db:c7:5a:d7:0e:
57:4d:a7:af:2d:1f:47:52:90:3e:17:18:73:4d:3d:8f:25:5c:
c7:ea:5a:a5:6e:83:18:da:0d:6b:77:7d:42:7c:73:a1:80:69:
bf:8a:96:6e:10:c6:eb:df:a2:96:82:96:8f:8a:78:86:12:1d:
20:ed:38:6a:fe:49:93:29:f6:20:76:b4:ba:7f:98:59:80:d3:
2e:10:ce:05:21:16:dd:d0:5b:67:72:e9:66:79:c8:08:b0:48:
54:94:0f:35:32:68:10:1c:6f:8f:7f:b2:f2:64:98:7b:a2:90:
3a:5b:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:31 2025 by rpki-client