Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/w_lVr2j6-y_dR6ydZ5DlAsCMphM.cer
File: w_lVr2j6-y_dR6ydZ5DlAsCMphM.cer (raw, json)
Hash identifier: 6uL5akqkeboxcTQM0u2tCXRojnXA1wC88TdOtSOaPEI=
Subject key identifier: C3:F9:55:AF:68:FA:FB:2F:DD:47:AC:9D:67:90:E5:02:C0:8C:A6:13
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BC05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/w_lVr2j6-y_dR6ydZ5DlAsCMphM.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:53:47 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 56001
IP: 45.113.56.0/22
IP: 101.251.64.0/20
IP: 101.251.96.0/19
IP: 103.17.120.0/22
IP: 117.48.176.0/20
IP: 118.126.0.0/19
IP: 180.150.160.0/20
IP: 203.134.240.0/21
IP: 2401:8600::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48133 (0xbc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:53:47 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C3F955AF68FAFB2FDD47AC9D6790E502C08CA613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:6b:64:a5:82:fa:59:cc:f0:6e:fd:c2:dd:
28:d5:36:2c:e1:b9:a4:2b:b4:84:d3:2e:8c:82:5b:
3e:ef:53:9a:85:0a:f6:0a:f9:21:4e:0e:0e:93:0a:
e1:14:9b:44:d5:1e:f6:9c:d8:58:09:9e:03:e9:3e:
58:2b:85:e0:0f:6a:ab:ee:cf:4f:3d:80:e7:38:df:
87:42:fc:0a:80:2f:13:e3:72:ce:95:80:b7:eb:22:
c8:fc:2b:e5:13:b5:4d:12:80:31:79:a2:53:b2:dd:
6e:b9:7c:49:67:7c:ed:98:58:38:bc:b7:2d:be:2a:
c4:4b:9a:2b:00:53:3b:e6:60:43:48:0d:d7:a6:28:
2d:6c:97:5b:b6:4a:07:ca:d5:57:c9:c6:7e:db:c4:
93:f3:d1:f0:45:cd:03:b1:30:28:22:5b:fb:5a:7a:
ff:76:f7:7f:18:52:9d:ea:35:e9:fa:78:5f:a3:ef:
d6:bb:79:78:18:cc:81:26:5d:5b:b8:b6:5e:e9:9f:
d1:f0:c3:9e:0d:70:92:6e:51:21:39:e3:da:b9:68:
18:90:cf:42:9b:17:22:89:a0:a0:e1:62:a4:4d:07:
b4:ec:51:af:3b:ca:e1:5c:be:c0:cc:28:fd:e8:e8:
f1:0f:02:e0:16:18:a0:0b:a6:63:95:7d:d8:cb:e3:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:55:AF:68:FA:FB:2F:DD:47:AC:9D:67:90:E5:02:C0:8C:A6:13
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/369/w_lVr2j6-y_dR6ydZ5DlAsCMphM.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56001
sbgp-ipAddrBlock: critical
IPv4:
45.113.56.0/22
101.251.64.0/20
101.251.96.0/19
103.17.120.0/22
117.48.176.0/20
118.126.0.0/19
180.150.160.0/20
203.134.240.0/21
IPv6:
2401:8600::/32
Signature Algorithm: sha256WithRSAEncryption
36:4a:67:8e:e6:da:02:c7:a7:2b:a7:f1:5b:cb:92:2a:33:83:
ce:97:df:67:e4:16:2e:8a:d9:15:31:1d:da:7b:45:93:55:bd:
68:5d:57:a7:c9:ce:83:f5:80:97:e9:ea:44:6e:b7:b8:bb:a6:
84:2c:3d:6e:4e:9b:5b:de:6e:43:72:6a:47:8d:7c:33:99:3f:
ab:03:f2:01:90:36:97:e3:03:26:df:d6:f5:d7:e3:04:c7:20:
96:80:88:ad:46:60:a6:05:95:f7:a1:e6:ef:23:80:b1:30:30:
50:44:10:1b:e7:df:ea:9c:82:5c:b3:94:8d:40:34:bd:2d:b9:
dd:25:3f:5c:22:0a:a7:c2:f8:1b:3c:07:7a:cc:52:39:ac:53:
9a:49:98:dd:6f:58:ab:b0:f8:14:bd:45:c3:80:fd:b7:43:ab:
61:88:f3:91:93:9c:ce:89:f3:f6:a0:6d:68:de:46:80:59:81:
22:b4:02:07:9a:43:4b:92:3d:cf:57:be:02:fd:e8:ea:a8:04:
f6:59:a9:67:d2:11:a4:51:48:11:fc:a1:56:77:a6:f9:23:e7:
52:ab:ab:70:24:9e:75:a4:5c:73:20:af:be:a2:83:07:07:5d:
58:a9:ea:91:4f:87:ff:53:8c:18:bd:8d:4e:4b:35:ec:87:1c:
65:94:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:28 2024 by rpki-client on console-fra.rpki-client.org