Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
File: tRlLGMyNlt0mESh8YqnqgiDbOm4.cer (raw, json)
Hash identifier: 939ZkNXWNajEQHJw/zklltWPPmlDQ9qxW3V4DtVbdV4=
Subject key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: A9D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Mon 09 Oct 2023 00:31:11 +0000
Certificate not after: Tue 08 Oct 2024 00:16:33 +0000
Subordinate resources: AS: 59002
IP: 103.229.20.0/22
IP: 121.100.128.0/18
IP: 2400:d780::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 15:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43472 (0xa9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 9 00:31:11 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:09:bf:a3:d7:1e:61:de:58:da:50:87:9b:
f1:67:07:01:94:bc:e4:f8:a3:b8:12:2c:80:c7:89:
ce:9e:3a:e6:97:33:3e:2d:e6:bf:d6:40:b6:6a:98:
15:5b:55:52:33:cf:59:51:21:10:72:34:6f:70:86:
1e:de:2a:a7:8b:a1:50:47:e8:95:ac:9b:13:e5:fa:
d9:c1:1b:13:21:29:0e:21:c3:31:14:e1:74:c2:6b:
b1:f3:2e:8d:14:86:20:a2:0c:90:4e:24:cc:16:10:
f7:c2:51:0c:23:eb:96:b2:67:a9:0d:92:25:ed:52:
a3:dc:14:ce:b1:2a:7d:ca:8f:dd:5c:4e:be:ff:2f:
a8:03:4a:b1:e5:5f:78:aa:bc:3a:80:78:5a:ca:aa:
91:4e:db:7a:01:ce:97:d7:6e:cf:bd:88:c3:20:6b:
1e:09:6e:c0:38:98:0f:19:d8:a6:f2:34:8c:83:85:
53:d6:5d:f1:91:16:4b:c9:d6:fa:e7:a2:74:d0:10:
47:bf:fd:d3:76:b9:98:a5:1a:5d:16:99:e9:f9:4e:
38:dc:0c:59:9f:c4:46:ed:61:9b:87:50:c9:52:51:
95:47:0b:49:d2:8d:8c:19:12:51:56:36:9b:31:b3:
5c:26:d8:1d:77:b2:86:c6:8c:79:2a:95:7e:80:3a:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59002
sbgp-ipAddrBlock: critical
IPv4:
103.229.20.0/22
121.100.128.0/18
IPv6:
2400:d780::/32
Signature Algorithm: sha256WithRSAEncryption
56:e9:31:48:aa:1f:c9:10:5b:66:18:20:a2:2a:b4:c7:4b:66:
f4:77:b2:9b:bf:c2:dc:f9:a6:63:42:e3:15:8a:ab:ac:55:35:
28:b2:c5:ed:15:8f:6e:d4:c6:07:8e:2a:fc:b2:62:36:c8:59:
e3:fe:f1:ae:7f:f3:1b:5f:21:55:18:db:a8:dc:08:da:d2:50:
e6:2b:32:29:6e:35:9a:fd:7d:f0:1e:96:5f:b1:3b:24:34:92:
c5:8f:48:d7:af:d5:04:f1:c2:98:af:60:a9:53:9b:ae:aa:6f:
24:af:d3:18:7f:0f:5a:a8:2e:ac:a3:8c:bf:26:7d:d8:13:41:
0e:11:39:af:18:e9:cf:f3:13:47:a3:66:c8:ce:34:41:3b:d8:
3c:db:e0:56:4a:d9:79:86:be:04:85:a0:7c:3e:f0:2a:0f:97:
d4:f2:1f:31:33:1e:74:1b:08:0d:f4:ae:58:44:bd:18:4b:7d:
a7:09:fc:c2:88:28:e1:7b:d6:a8:a8:ca:38:1f:ad:65:93:90:
df:8d:39:da:58:a4:14:0a:d5:d2:b3:a4:0c:f8:97:97:ca:0f:
82:ee:4b:7e:c0:37:16:b3:2f:d4:d6:54:64:ad:00:a2:0c:1b:
48:9c:c3:f9:06:1a:53:94:13:c1:83:25:5b:ae:1d:02:60:6c:
1a:71:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:14:57 2024 by rpki-client on console-fra.rpki-client.org