Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer
File: nAOAuRdGDFBwN_PKf1O0K8K4Lec.cer (raw, json)
Hash identifier: nLw0aREbgPBKN6IYhGj1402fGCL5ZkRuIUWRGmwbuAY=
Subject key identifier: 9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BD6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Tue 08 Oct 2024 05:54:20 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 36.206.0.0/16
IP: 36.212.0.0 -- 36.221.255.255
IP: 110.100.0.0/16
IP: 110.116.0.0/16
IP: 110.199.0.0/16
IP: 110.218.0.0/15
IP: 122.94.0.0/16
IP: 123.77.0.0/16
IP: 222.45.0.0/16
IP: 222.49.128.0/17
IP: 222.59.128.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48491 (0xbd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 8 05:54:20 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9C0380B917460C507037F3CA7F53B42BC2B82DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:ad:1b:43:76:5d:77:9d:6c:3c:27:96:d9:
fb:42:1d:91:c9:d2:bc:ee:73:8e:09:97:59:99:b3:
20:75:1f:bb:19:ff:a8:22:12:f8:92:1b:37:f6:c6:
07:2f:f0:83:52:81:88:0e:ad:9c:7e:a1:60:0e:e9:
2f:1f:2f:6e:48:69:52:6f:a2:67:4f:3d:58:37:1f:
4f:59:4c:82:6d:74:4e:34:8e:c2:50:84:a9:2a:a7:
83:00:61:3d:e5:03:f9:b1:86:3f:04:4c:ce:69:33:
1d:31:6e:27:e1:01:be:88:c4:60:e6:00:2b:a3:b7:
09:f1:5e:9a:e5:87:ee:13:e6:b2:7b:b6:4c:9c:6c:
67:ee:9f:18:26:b8:05:9e:cc:b2:ff:ad:4f:9d:88:
78:8e:b7:bb:ef:9f:31:a5:88:96:3e:06:6c:34:46:
35:a4:e7:ca:eb:44:b3:51:10:57:32:6a:73:79:4e:
a7:ed:1e:7a:0c:b3:59:9b:c5:f8:1e:0d:dc:14:c3:
a3:87:63:5b:a9:8e:e8:c1:48:6a:a1:00:7d:82:67:
14:21:1d:01:d9:6c:47:a5:08:e4:6c:60:37:3e:cf:
01:0d:97:38:d8:37:af:98:9c:68:c9:e3:af:f2:7d:
9a:65:6a:21:61:40:a1:94:3a:c3:12:62:14:93:57:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:80:B9:17:46:0C:50:70:37:F3:CA:7F:53:B4:2B:C2:B8:2D:E7
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3311/nAOAuRdGDFBwN_PKf1O0K8K4Lec.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.206.0.0/16
36.212.0.0-36.221.255.255
110.100.0.0/16
110.116.0.0/16
110.199.0.0/16
110.218.0.0/15
122.94.0.0/16
123.77.0.0/16
222.45.0.0/16
222.49.128.0/17
222.59.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5c:bd:1d:98:91:04:91:38:ea:08:54:bb:6d:93:76:b9:60:a6:
93:ef:54:53:9d:f1:71:35:61:43:82:8b:02:b3:7a:11:6f:16:
ed:b3:6e:22:66:8a:c8:52:9b:3c:19:cf:07:84:8e:00:69:f3:
cc:f3:5e:4f:5f:81:0d:0e:06:14:00:96:95:e2:ec:5f:76:00:
48:bb:a8:f7:6f:e1:a7:a9:ba:f9:eb:fd:99:ca:82:22:9a:ca:
ce:86:9e:aa:2f:2c:67:c7:9f:1a:b9:2b:b8:56:81:0f:82:02:
81:2f:e8:6d:cc:c4:0d:2c:2f:cf:77:84:f0:02:bd:c3:c3:0c:
5b:2e:52:8c:43:53:0d:3f:2c:99:dc:45:1f:e9:04:bf:ad:eb:
46:13:75:75:f1:76:01:a2:6c:2d:a9:04:a8:72:1d:12:1e:1f:
d7:af:9e:ed:a9:b7:ab:d6:4f:70:20:d2:0f:ab:ec:69:a3:4c:
a7:39:4e:5c:f5:e6:b0:96:bc:60:20:9b:db:cc:00:a6:7d:ba:
e9:cb:1b:df:db:3d:10:64:7a:8b:d9:26:5f:64:51:50:a9:84:
48:f2:2a:b7:99:28:bc:a8:07:0e:8c:9b:18:c9:ec:a0:46:30:
c3:88:3a:f0:f4:e0:72:e9:33:e1:9c:32:28:0e:97:00:fc:22:
34:72:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:27 2024 by rpki-client on console-fra.rpki-client.org