Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer
File: vLbTxJb1ASxY0bSOg1wBNuZAq7g.cer (raw, json)
Hash identifier: nR5ZCMN2xx4VaN+Hr1YCgMNzYhch34ucLYFvC1IrfGg=
Subject key identifier: BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AE5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:20:14 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: IP: 103.50.44.0 -- 103.50.75.255
IP: 103.50.108.0 -- 103.50.127.255
IP: 103.50.132.0 -- 103.50.143.255
IP: 103.50.172.0 -- 103.50.203.255
IP: 103.50.220.0 -- 103.50.251.255
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 May 2024 05:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44637 (0xae5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:20:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BCB6D3C496F5012C58D1B48E835C0136E640ABB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:c9:5c:5c:b8:1f:1e:fd:08:25:00:8f:4a:
1a:bc:21:ab:4d:a8:11:f7:6f:e8:fc:21:b0:6f:8b:
70:08:2b:7a:07:45:69:1b:9e:78:bf:9c:8d:e1:3a:
d7:42:a6:02:45:34:bd:c6:2c:68:ee:b9:f5:65:a6:
37:22:e6:c6:49:78:0f:2f:10:7b:6f:9d:68:ea:17:
77:31:1a:be:1b:a6:d3:32:6f:4d:b4:91:de:02:8a:
9e:d5:48:a9:03:07:05:a4:9f:96:4f:1c:74:a4:f0:
74:85:cc:3b:77:6b:59:70:38:54:8f:6f:f7:1d:98:
d4:f7:c1:c8:f0:aa:a0:19:5b:67:82:8b:01:f8:5e:
98:93:8a:7d:f1:e2:6e:7b:f2:27:bf:77:45:bd:a6:
6d:11:f5:a0:ec:dd:70:b9:b8:0c:43:5b:87:b1:36:
52:00:52:6a:81:67:e0:57:37:bf:b8:77:24:3f:bd:
84:f1:03:55:7c:d9:1d:45:c6:d0:30:34:d5:13:4c:
f6:eb:0b:17:ac:b1:b6:63:84:53:c0:d0:4e:85:cc:
f2:2e:8d:ce:93:e8:31:49:19:b9:aa:da:66:a6:c8:
bc:c2:df:56:c7:e6:b0:79:b0:fc:60:ad:51:be:0b:
a8:01:d6:cc:f7:97:00:ef:c9:50:5f:b7:65:01:1a:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:D3:C4:96:F5:01:2C:58:D1:B4:8E:83:5C:01:36:E6:40:AB:B8
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1049/vLbTxJb1ASxY0bSOg1wBNuZAq7g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.44.0-103.50.75.255
103.50.108.0-103.50.127.255
103.50.132.0-103.50.143.255
103.50.172.0-103.50.203.255
103.50.220.0-103.50.251.255
Signature Algorithm: sha256WithRSAEncryption
04:24:94:76:97:fb:5c:d6:03:02:3e:4c:4e:1e:04:ce:86:4e:
dd:91:1d:af:34:8c:49:32:cc:05:cf:b0:da:a4:12:e0:87:51:
f9:d9:83:5b:53:55:38:5e:19:83:fa:08:1a:cf:e3:f5:34:19:
8a:33:e9:e7:0b:ab:6e:8e:97:85:ba:22:bd:cc:8b:50:3e:59:
46:bf:70:c0:ec:0f:da:29:23:7a:31:80:0f:58:56:b0:1d:0e:
34:72:ae:93:1b:8b:bc:0c:44:3f:c5:e4:f3:40:dd:8c:7f:33:
19:d8:78:f8:34:f2:b3:5f:6a:bd:63:74:fe:05:56:8b:ff:d6:
32:de:07:eb:0e:ab:74:55:70:11:e3:22:96:5e:3c:13:5a:7f:
0c:87:da:84:4b:42:db:a9:7c:01:ea:97:24:95:f9:73:2d:69:
94:73:19:71:0f:11:fa:7b:86:93:bd:6c:6a:57:cb:7c:47:9e:
4d:32:b5:35:95:f1:1c:ff:29:7e:67:91:b4:52:75:bb:6e:78:
29:69:fb:3e:05:fd:5c:e0:e2:89:af:6e:e0:ef:b9:75:2d:84:
5d:4e:fe:6f:c4:72:5f:56:08:e4:9e:42:8d:ea:52:a0:13:25:
d2:9f:01:53:9e:b5:02:44:4f:a1:84:2f:d2:5b:90:4b:aa:d3:
65:98:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:17:34 2024 by rpki-client on console-fra.rpki-client.org