Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
File: s7pq7zuPouXZteQ0OOACDUJqHso.cer (raw, json)
Hash identifier: Rnu5cRpz6ly8Kw/0A+3w2O5tWRrzYcI4OTOACZExyow=
Subject key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BBA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:52:14 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 45096
AS: 45108
IP: 39.96.0.0 -- 39.108.255.255
IP: 42.96.128.0/17
IP: 42.120.0.0/15
IP: 42.156.128.0/17
IP: 59.110.0.0/16
IP: 60.205.0.0/16
IP: 101.37.0.0/16
IP: 101.132.0.0/15
IP: 101.200.0.0/15
IP: 103.15.96.0/22
IP: 106.14.0.0/15
IP: 110.75.160.0/19
IP: 110.76.32.0/20
IP: 112.74.0.0/16
IP: 112.124.0.0/14
IP: 114.55.0.0/16
IP: 114.215.0.0/16
IP: 115.28.0.0/15
IP: 116.62.0.0/16
IP: 118.31.0.0/16
IP: 118.178.0.0/16
IP: 118.190.0.0/16
IP: 119.23.0.0/16
IP: 120.24.0.0/14
IP: 120.55.0.0/16
IP: 120.76.0.0/14
IP: 121.40.0.0/14
IP: 121.89.0.0/16
IP: 121.196.0.0/14
IP: 123.56.0.0/15
IP: 157.119.192.0/22
IP: 182.92.0.0/16
IP: 203.107.0.0/17
IP: 218.244.128.0/19
IP: 223.4.0.0/14
IP: 2400:3200::/32
IP: 2405:e000::/32
IP: 2406:2880::/32
IP: 2407:bc00::/32
IP: 2408:4000::/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48041 (0xbba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:52:14 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:dc:2f:fd:24:a9:3f:fc:dc:e6:f4:90:98:
e1:4b:48:a3:da:b1:bb:32:0b:79:56:49:b6:8b:c2:
f4:e7:42:a9:17:18:72:f3:8b:cf:bd:1e:87:bc:9e:
18:5f:3b:e5:2f:09:6c:53:6a:64:5a:f6:68:7a:74:
06:c1:f4:64:6f:f3:99:95:0f:b8:97:1a:e7:e3:b1:
36:63:1a:9b:96:8c:26:e2:cc:30:34:e9:13:8f:00:
dd:db:9c:63:c7:da:44:32:ec:c0:d6:cd:17:81:06:
f4:10:79:18:5f:4b:c6:cc:e2:ca:ad:01:c5:2a:48:
ae:81:7a:0c:b9:3c:ca:22:5a:cf:32:9e:00:2c:d0:
20:e9:65:4b:a6:1e:8a:61:b2:4a:d7:b2:f6:36:26:
e6:df:6b:c8:70:68:6c:4d:67:5c:34:33:b0:ca:73:
f9:3e:e0:c2:a4:7b:1b:c8:9d:ea:3c:eb:67:74:1a:
86:47:00:18:06:34:eb:c5:40:ac:7a:79:12:85:ce:
61:9a:aa:8b:42:66:00:66:4b:8d:eb:25:7a:bc:3a:
a3:da:2d:83:16:17:d0:07:e1:78:53:fd:0f:b3:d2:
69:91:7a:f4:a2:d7:ed:48:5f:d9:28:3d:42:7b:d3:
ca:58:e9:06:69:9e:ee:e0:6f:31:6f:26:90:56:83:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45096
45108
sbgp-ipAddrBlock: critical
IPv4:
39.96.0.0-39.108.255.255
42.96.128.0/17
42.120.0.0/15
42.156.128.0/17
59.110.0.0/16
60.205.0.0/16
101.37.0.0/16
101.132.0.0/15
101.200.0.0/15
103.15.96.0/22
106.14.0.0/15
110.75.160.0/19
110.76.32.0/20
112.74.0.0/16
112.124.0.0/14
114.55.0.0/16
114.215.0.0/16
115.28.0.0/15
116.62.0.0/16
118.31.0.0/16
118.178.0.0/16
118.190.0.0/16
119.23.0.0/16
120.24.0.0/14
120.55.0.0/16
120.76.0.0/14
121.40.0.0/14
121.89.0.0/16
121.196.0.0/14
123.56.0.0/15
157.119.192.0/22
182.92.0.0/16
203.107.0.0/17
218.244.128.0/19
223.4.0.0/14
IPv6:
2400:3200::/32
2405:e000::/32
2406:2880::/32
2407:bc00::/32
2408:4000::/22
Signature Algorithm: sha256WithRSAEncryption
2c:14:ca:73:f4:e9:43:ff:ee:51:04:e5:9a:39:0e:32:8d:cd:
79:bb:f4:b4:a4:a3:93:b3:1e:9d:58:c6:bd:a5:b3:24:a1:73:
dd:1b:85:d4:4e:b1:1c:61:a0:c1:78:53:1b:ef:c3:94:8e:72:
41:1c:b8:84:56:1a:f4:98:d9:e5:a7:12:d6:82:e9:96:4d:49:
2c:3e:b7:5b:1a:fd:84:be:80:a9:a9:54:a6:f9:90:a7:db:df:
bc:4c:55:53:53:74:95:fb:c5:12:1a:a6:33:f5:48:04:24:a2:
7a:3d:bf:32:59:e6:2f:6d:73:fe:7f:90:a8:f9:b0:5d:26:ff:
a0:e0:1d:c5:24:fb:2e:50:a3:b1:a3:ca:25:e6:5d:e4:dd:23:
a7:40:56:2c:37:fe:b5:87:65:c8:2b:fa:6d:e8:cc:fe:f4:7c:
51:93:aa:0b:97:ba:21:ee:ae:11:bd:8d:c9:54:2b:e3:33:41:
c5:4a:13:bb:24:75:be:1c:9d:1e:3e:7b:0b:87:6d:c9:be:21:
a2:a5:42:28:4d:bb:41:e9:63:fd:d7:b4:6e:49:4f:4f:ed:0e:
28:53:8c:45:db:a2:70:b8:22:46:40:93:ec:75:8a:bc:90:e3:
0b:9e:07:12:52:a6:d0:bf:31:85:3c:54:36:bb:95:b3:c0:1c:
09:13:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:28 2024 by rpki-client on console-fra.rpki-client.org