Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/sTLT4KDPHu-UWlZnFbFefhSl_uM.cer
File: sTLT4KDPHu-UWlZnFbFefhSl_uM.cer (raw, json)
Hash identifier: f793o/imq1g3xq0gXLUVbPqx8kGVlbM/4HWwnqgVeJY=
Subject key identifier: B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: C774
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 02:57:25 +0000
Certificate not after: Sat 27 Sep 2025 02:44:05 +0000
Subordinate resources: AS: 17962
IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51060 (0xc774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 02:57:25 2025 GMT
Not After : Sep 27 02:44:05 2025 GMT
Subject: CN=B132D3E0A0CF1EEF945A566715B15E7E14A5FEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:cd:d8:d9:b0:02:98:9e:b3:e5:47:6c:ef:
46:cc:38:32:a2:f8:fc:0c:34:28:df:15:04:21:95:
17:20:3d:94:a8:ff:9d:0a:4d:a8:dc:c6:f0:b5:01:
9e:af:80:50:65:5a:aa:70:e2:b7:47:24:f2:b0:88:
cb:5f:94:50:de:82:b9:e9:42:c1:7f:21:30:3d:a5:
c6:82:c8:80:66:15:9e:64:98:84:a0:19:e6:27:db:
d5:f3:5e:7f:d6:dd:73:6a:6a:47:62:c5:77:c5:c5:
09:46:5f:22:30:95:02:e3:2b:f8:3d:a9:1d:67:4a:
cd:78:ff:a6:a4:ec:91:f6:d8:a3:97:ac:dc:a2:0f:
3a:4b:89:b3:7d:6b:b6:7d:9d:1c:8b:36:3e:3f:67:
b5:ab:aa:2f:0a:f4:0d:06:fe:7f:1c:25:7e:1c:09:
47:26:4c:63:9c:de:12:62:6d:65:99:ee:40:43:54:
e3:a8:42:dc:64:94:e8:7a:3b:75:52:5a:5c:de:3d:
64:9b:44:e3:8f:84:90:96:20:64:21:06:d3:f7:b7:
8d:4a:6d:17:50:c4:f8:cb:35:81:9f:41:d3:fa:f2:
25:bd:a1:ef:c8:e6:f5:c2:ad:24:e7:c9:86:4f:6d:
d4:5c:58:d4:42:d4:b8:b0:32:97:a7:0e:35:c0:a3:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:D3:E0:A0:CF:1E:EF:94:5A:56:67:15:B1:5E:7E:14:A5:FE:E3
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/142/sTLT4KDPHu-UWlZnFbFefhSl_uM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17962
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
Signature Algorithm: sha256WithRSAEncryption
31:de:4a:cc:90:6a:75:1b:31:cb:f0:22:97:fa:1e:07:b8:a9:
ae:8e:7e:b3:ac:8c:50:07:c0:84:b7:5a:75:8e:76:ec:81:09:
8f:7f:cf:85:b6:da:b9:a1:12:3e:f8:6c:67:10:f2:c7:cd:8e:
8a:94:41:b7:db:24:5a:e9:80:2d:83:8b:93:53:f4:9a:6a:de:
9e:e5:c4:21:45:9d:08:14:c7:ee:b4:d0:cc:6d:18:fa:ef:2a:
18:ff:cb:c8:37:74:cd:b5:19:2f:78:7b:f0:8f:1e:c7:80:48:
4e:29:c5:6c:03:9c:7f:58:57:57:38:6c:36:ca:d2:2d:e9:25:
d8:51:1b:4d:36:66:22:79:03:54:f6:7c:5b:ff:de:d8:cc:11:
6d:b6:6a:36:b1:42:13:a5:d2:8d:f6:09:92:13:b6:06:2d:bf:
aa:68:45:84:eb:88:ce:69:9f:1a:b6:50:28:37:40:da:16:e7:
89:9d:6a:c1:fa:36:4a:6a:43:58:77:65:02:de:af:37:ea:fa:
b0:2e:8f:00:76:3a:5c:3f:29:c3:f1:53:04:e5:88:26:17:97:
f7:8f:e7:fd:9a:93:05:f1:9f:65:80:62:a3:08:0d:30:08:b3:
1b:ce:9a:a1:22:db:9e:4d:01:ce:ff:41:b4:30:26:79:c9:5a:
bd:6c:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:39 2025 by rpki-client