Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
File: sTLT4KDPHu-UWlZnFbFefhSl_uM.cer (raw, json)
Hash identifier: f0UFA3LKdX6q0ETOhUZaBRKTGoa8G97PgvJDwXyxAG4=
Subject key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BCD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 03:00:33 +0000
Certificate not after: Sat 27 Sep 2025 02:44:05 +0000
Subordinate resources: AS: 17962
IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
IP: 2400:ee00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48345 (0xbcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 03:00:33 2024 GMT
Not After : Sep 27 02:44:05 2025 GMT
Subject: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:cd:d8:d9:b0:02:98:9e:b3:e5:47:6c:ef:
46:cc:38:32:a2:f8:fc:0c:34:28:df:15:04:21:95:
17:20:3d:94:a8:ff:9d:0a:4d:a8:dc:c6:f0:b5:01:
9e:af:80:50:65:5a:aa:70:e2:b7:47:24:f2:b0:88:
cb:5f:94:50:de:82:b9:e9:42:c1:7f:21:30:3d:a5:
c6:82:c8:80:66:15:9e:64:98:84:a0:19:e6:27:db:
d5:f3:5e:7f:d6:dd:73:6a:6a:47:62:c5:77:c5:c5:
09:46:5f:22:30:95:02:e3:2b:f8:3d:a9:1d:67:4a:
cd:78:ff:a6:a4:ec:91:f6:d8:a3:97:ac:dc:a2:0f:
3a:4b:89:b3:7d:6b:b6:7d:9d:1c:8b:36:3e:3f:67:
b5:ab:aa:2f:0a:f4:0d:06:fe:7f:1c:25:7e:1c:09:
47:26:4c:63:9c:de:12:62:6d:65:99:ee:40:43:54:
e3:a8:42:dc:64:94:e8:7a:3b:75:52:5a:5c:de:3d:
64:9b:44:e3:8f:84:90:96:20:64:21:06:d3:f7:b7:
8d:4a:6d:17:50:c4:f8:cb:35:81:9f:41:d3:fa:f2:
25:bd:a1:ef:c8:e6:f5:c2:ad:24:e7:c9:86:4f:6d:
d4:5c:58:d4:42:d4:b8:b0:32:97:a7:0e:35:c0:a3:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17962
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
IPv6:
2400:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
57:c7:4c:7f:c0:8f:2b:4a:54:93:4f:02:1b:77:7c:d6:8c:91:
63:e7:23:c0:31:e8:d1:53:78:37:6d:ac:f1:83:7a:bf:a0:45:
16:de:41:f7:8c:59:82:0d:3d:4c:fc:99:ea:d0:d3:d2:ec:79:
53:80:ed:46:16:44:31:b5:fa:8c:6f:46:bc:09:bc:26:8e:da:
9b:06:25:aa:42:ab:31:1c:67:9e:d5:aa:ce:d3:2b:8f:15:6f:
9b:27:3d:17:78:2d:46:a5:d8:98:96:10:db:82:24:f1:c9:49:
fd:c8:7c:78:cc:61:13:09:f9:5f:41:bd:81:00:09:8c:07:09:
5c:a7:21:e7:b1:d4:61:ab:94:5b:3f:39:30:64:6a:5b:9d:b2:
ae:6d:35:47:8f:54:eb:b8:41:6f:fe:47:2a:f9:58:32:a8:e2:
23:c8:be:72:73:96:49:fe:80:47:fa:53:b5:f1:55:03:01:43:
d2:cf:29:31:61:59:28:2f:37:cf:8b:3e:93:ea:36:8c:95:81:
14:67:18:cb:3e:91:77:a4:98:b6:88:b8:aa:f6:51:53:1f:89:
aa:a2:df:ad:7d:2f:d6:ad:4d:9f:dc:7e:bf:12:c9:ad:53:63:
d9:c3:74:2f:7f:ad:a3:ee:51:6a:19:66:1c:54:b8:05:8e:7f:
ce:55:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:28 2024 by rpki-client on console-fra.rpki-client.org