Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
File: tRlLGMyNlt0mESh8YqnqgiDbOm4.cer (raw, json)
Hash identifier: ZFTDb6AiQ51sEg1RO/acnrvA/roErF5lCDjuW+fpH0Q=
Subject key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CA6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:07:42 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 59002
IP: 103.229.20.0/22
IP: 121.100.128.0/18
IP: 2400:d780::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51823 (0xca6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:07:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:09:bf:a3:d7:1e:61:de:58:da:50:87:9b:
f1:67:07:01:94:bc:e4:f8:a3:b8:12:2c:80:c7:89:
ce:9e:3a:e6:97:33:3e:2d:e6:bf:d6:40:b6:6a:98:
15:5b:55:52:33:cf:59:51:21:10:72:34:6f:70:86:
1e:de:2a:a7:8b:a1:50:47:e8:95:ac:9b:13:e5:fa:
d9:c1:1b:13:21:29:0e:21:c3:31:14:e1:74:c2:6b:
b1:f3:2e:8d:14:86:20:a2:0c:90:4e:24:cc:16:10:
f7:c2:51:0c:23:eb:96:b2:67:a9:0d:92:25:ed:52:
a3:dc:14:ce:b1:2a:7d:ca:8f:dd:5c:4e:be:ff:2f:
a8:03:4a:b1:e5:5f:78:aa:bc:3a:80:78:5a:ca:aa:
91:4e:db:7a:01:ce:97:d7:6e:cf:bd:88:c3:20:6b:
1e:09:6e:c0:38:98:0f:19:d8:a6:f2:34:8c:83:85:
53:d6:5d:f1:91:16:4b:c9:d6:fa:e7:a2:74:d0:10:
47:bf:fd:d3:76:b9:98:a5:1a:5d:16:99:e9:f9:4e:
38:dc:0c:59:9f:c4:46:ed:61:9b:87:50:c9:52:51:
95:47:0b:49:d2:8d:8c:19:12:51:56:36:9b:31:b3:
5c:26:d8:1d:77:b2:86:c6:8c:79:2a:95:7e:80:3a:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59002
sbgp-ipAddrBlock: critical
IPv4:
103.229.20.0/22
121.100.128.0/18
IPv6:
2400:d780::/32
Signature Algorithm: sha256WithRSAEncryption
68:e9:49:59:da:4e:62:2a:90:38:6d:80:44:12:b9:44:f3:1e:
a3:de:9e:d2:f8:34:9a:0a:53:0e:6e:61:81:ed:15:ca:88:0f:
d0:b8:f2:9a:c9:ca:e1:09:ff:62:c7:06:b1:3b:4e:74:ac:23:
4a:46:be:d5:9e:ce:9f:69:44:4e:2d:2a:14:d8:cf:dc:30:7b:
72:4f:e0:ce:71:11:56:81:c7:db:19:18:05:10:b2:0a:e3:3b:
e6:0d:f2:d1:20:4b:d6:06:eb:ae:eb:48:96:fc:f1:5c:8c:2c:
a7:c1:53:dd:2b:8c:de:39:4f:36:ac:44:8b:1f:f6:4a:96:d0:
fe:ec:4a:29:6b:27:29:4d:cd:77:cc:b2:81:2d:7e:ce:60:39:
f1:21:1d:d8:a4:eb:2f:0a:fb:2f:1a:3a:c3:10:41:e1:70:94:
0f:c7:5e:32:32:17:46:cb:58:d9:e2:1b:f4:f0:0a:a2:e1:d0:
8d:4f:f6:5a:a5:86:9d:0d:0a:91:23:e5:e2:bf:5a:98:d8:f2:
51:4b:66:96:d3:11:cd:a9:06:48:75:4a:17:c9:12:0d:16:a9:
9c:b5:a2:91:66:d4:d2:9c:8f:e1:3c:bb:3e:70:6b:4a:b2:59:
65:7b:bc:4f:02:23:9c:ae:fe:a8:b3:77:c3:5c:cc:1a:36:f4:
7f:41:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:52 2025 by rpki-client