Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer
File: tRlLGMyNlt0mESh8YqnqgiDbOm4.cer (raw, json)
Hash identifier: x79fcO5C+cc5RTfV595Eoy/HQfx5V4l3NeZTG6lQfb0=
Subject key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:50:42 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 59002
IP: 103.229.20.0/22
IP: 121.100.128.0/18
IP: 2400:d780::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47931 (0xbb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:50:42 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:09:bf:a3:d7:1e:61:de:58:da:50:87:9b:
f1:67:07:01:94:bc:e4:f8:a3:b8:12:2c:80:c7:89:
ce:9e:3a:e6:97:33:3e:2d:e6:bf:d6:40:b6:6a:98:
15:5b:55:52:33:cf:59:51:21:10:72:34:6f:70:86:
1e:de:2a:a7:8b:a1:50:47:e8:95:ac:9b:13:e5:fa:
d9:c1:1b:13:21:29:0e:21:c3:31:14:e1:74:c2:6b:
b1:f3:2e:8d:14:86:20:a2:0c:90:4e:24:cc:16:10:
f7:c2:51:0c:23:eb:96:b2:67:a9:0d:92:25:ed:52:
a3:dc:14:ce:b1:2a:7d:ca:8f:dd:5c:4e:be:ff:2f:
a8:03:4a:b1:e5:5f:78:aa:bc:3a:80:78:5a:ca:aa:
91:4e:db:7a:01:ce:97:d7:6e:cf:bd:88:c3:20:6b:
1e:09:6e:c0:38:98:0f:19:d8:a6:f2:34:8c:83:85:
53:d6:5d:f1:91:16:4b:c9:d6:fa:e7:a2:74:d0:10:
47:bf:fd:d3:76:b9:98:a5:1a:5d:16:99:e9:f9:4e:
38:dc:0c:59:9f:c4:46:ed:61:9b:87:50:c9:52:51:
95:47:0b:49:d2:8d:8c:19:12:51:56:36:9b:31:b3:
5c:26:d8:1d:77:b2:86:c6:8c:79:2a:95:7e:80:3a:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59002
sbgp-ipAddrBlock: critical
IPv4:
103.229.20.0/22
121.100.128.0/18
IPv6:
2400:d780::/32
Signature Algorithm: sha256WithRSAEncryption
52:d4:d1:c4:e6:ce:6d:b8:47:84:6d:a8:ec:9c:4d:85:36:18:
54:40:38:3c:38:82:6b:d0:07:80:5f:28:72:fa:88:2f:4b:cb:
45:5a:a2:c9:52:be:1b:ca:25:94:eb:d1:0b:6f:e4:3e:a9:2f:
a2:89:61:fe:d2:2b:61:71:24:dd:16:0e:86:01:98:94:1f:a8:
5c:06:60:10:a7:ee:e7:89:26:cf:0a:ff:ab:10:5e:4b:e5:4b:
82:a9:85:2a:f1:7c:49:0f:44:af:0e:85:aa:4a:ca:a0:47:e7:
17:1b:12:67:4b:8f:35:55:1d:a3:e0:1c:be:1f:09:7a:b0:b2:
99:27:11:b8:b5:f0:7f:8b:44:51:7a:4c:7a:b9:2c:67:91:fe:
cc:95:05:32:54:d4:1c:23:c7:f4:b6:c5:3d:57:4c:5d:bf:57:
09:a8:19:f4:47:62:de:5f:43:4c:04:4e:5f:94:1d:b8:7c:0e:
53:a2:3c:ea:42:47:54:fa:b7:a4:89:b6:6c:69:75:05:41:6f:
e3:dd:9b:23:01:7c:8d:b1:f5:17:63:10:f5:59:a2:4e:35:57:
ef:a7:3b:ad:69:a3:80:7c:c4:aa:a9:ee:77:40:2e:61:2d:5e:
0d:e0:46:b0:1e:62:7a:d2:56:af:1a:28:e9:14:a8:47:50:ee:
24:b6:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:41 2024 by rpki-client on console-ams.rpki-client.org