Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer (raw, json)
Hash identifier: 3VUFjiQcldEKagzlNGU80ONI5HNe5cGI2AJoPSpN4/Y=
Subject key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BAEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:49:38 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: IP: 103.50.44.0 -- 103.50.75.255
IP: 103.50.108.0 -- 103.50.127.255
IP: 103.50.132.0 -- 103.50.143.255
IP: 103.50.172.0 -- 103.50.203.255
IP: 103.50.220.0 -- 103.50.251.255
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47855 (0xbaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:49:38 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:c9:5c:5c:b8:1f:1e:fd:08:25:00:8f:4a:
1a:bc:21:ab:4d:a8:11:f7:6f:e8:fc:21:b0:6f:8b:
70:08:2b:7a:07:45:69:1b:9e:78:bf:9c:8d:e1:3a:
d7:42:a6:02:45:34:bd:c6:2c:68:ee:b9:f5:65:a6:
37:22:e6:c6:49:78:0f:2f:10:7b:6f:9d:68:ea:17:
77:31:1a:be:1b:a6:d3:32:6f:4d:b4:91:de:02:8a:
9e:d5:48:a9:03:07:05:a4:9f:96:4f:1c:74:a4:f0:
74:85:cc:3b:77:6b:59:70:38:54:8f:6f:f7:1d:98:
d4:f7:c1:c8:f0:aa:a0:19:5b:67:82:8b:01:f8:5e:
98:93:8a:7d:f1:e2:6e:7b:f2:27:bf:77:45:bd:a6:
6d:11:f5:a0:ec:dd:70:b9:b8:0c:43:5b:87:b1:36:
52:00:52:6a:81:67:e0:57:37:bf:b8:77:24:3f:bd:
84:f1:03:55:7c:d9:1d:45:c6:d0:30:34:d5:13:4c:
f6:eb:0b:17:ac:b1:b6:63:84:53:c0:d0:4e:85:cc:
f2:2e:8d:ce:93:e8:31:49:19:b9:aa:da:66:a6:c8:
bc:c2:df:56:c7:e6:b0:79:b0:fc:60:ad:51:be:0b:
a8:01:d6:cc:f7:97:00:ef:c9:50:5f:b7:65:01:1a:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.44.0-103.50.75.255
103.50.108.0-103.50.127.255
103.50.132.0-103.50.143.255
103.50.172.0-103.50.203.255
103.50.220.0-103.50.251.255
Signature Algorithm: sha256WithRSAEncryption
1b:4b:a4:ef:99:fb:2f:93:0d:01:35:53:1e:b9:c3:c1:5d:95:
7e:eb:bd:0b:c4:e7:cc:ca:3d:5c:60:61:9e:2e:58:a2:80:64:
07:3b:8c:8a:54:3a:45:59:b4:ca:18:c3:e6:00:2c:ae:8f:9d:
26:9c:d9:08:94:07:f3:a4:4e:e5:a9:c7:57:f7:69:73:67:35:
fb:64:95:4d:c4:de:f4:d4:6d:23:5b:12:24:5b:a6:0f:a0:80:
41:62:f7:cb:47:fa:bc:a9:42:7f:32:8b:79:84:3a:29:d8:27:
48:c4:f2:56:62:47:b2:55:1e:51:6f:cc:31:b7:8b:ae:1a:86:
68:2d:24:3b:bd:b6:9f:30:2c:ef:1d:38:5a:54:d8:40:2a:6f:
f7:0e:2a:40:d0:85:c8:78:f8:6e:f2:02:e8:e2:81:21:f4:67:
55:8d:61:b1:91:4d:46:99:b6:08:c2:63:72:4b:f4:64:05:53:
db:52:d2:56:e8:5c:5b:71:4e:52:c8:89:e8:32:cc:66:fd:48:
bd:19:53:b2:df:2a:9a:0f:a4:e7:ca:49:1c:d5:07:c8:78:db:
f7:06:54:94:28:27:ce:da:e2:fe:6a:59:18:f4:0c:97:c9:f8:
bf:d0:c1:09:88:73:79:89:06:ea:73:6e:f8:f5:b9:50:c2:03:
19:2a:fb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:28 2024 by rpki-client on console-fra.rpki-client.org