Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
File: ze9xEd6YvXVtkrNNOU2i057_m44.cer (raw, json)
Hash identifier: 52a5RgZCEB5MU7tgnKlGIhP3iyRT4sNSTV30PnkuJ5o=
Subject key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CD13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:07:29 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 58593
IP: 42.159.0.0/16
IP: 103.9.8.0/22
IP: 163.228.0.0/16
IP: 2404:7940::/32
IP: 2406:e500::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 04:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52499 (0xcd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Apr 3 08:07:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:2d:87:41:8f:b7:96:8d:b1:e7:38:4c:8b:
1b:d7:13:01:85:92:1c:d0:f8:03:c2:b8:2b:3e:15:
c3:99:f0:37:b6:3f:f7:de:af:ad:f4:f6:79:a4:e0:
ca:5e:a2:70:55:58:b0:b9:a0:a4:42:0a:5a:48:fa:
fa:81:90:6e:65:18:77:47:e6:e6:61:b4:a6:68:a5:
5d:48:cb:70:fb:12:68:12:12:00:e4:d9:fd:ef:23:
dc:a3:ad:f0:e5:27:43:fc:fd:56:c5:af:36:b6:18:
73:82:7f:c1:1f:ea:ac:a0:1b:31:dc:3c:30:8d:3a:
1f:86:e3:bd:24:e6:04:e0:ae:ff:a6:5d:ab:99:50:
0b:58:b7:8a:59:77:54:d7:ab:8a:b8:54:b6:b7:65:
6a:56:dd:ab:41:12:28:3a:d3:38:f0:68:1d:41:00:
13:1b:d7:38:90:9c:85:ed:70:c1:be:1c:61:10:08:
b8:3f:45:53:1b:8c:b4:ee:c2:6a:e1:f9:23:3e:85:
ee:c4:cd:e1:3a:82:90:e0:2b:b5:02:64:3f:04:ab:
18:86:c9:0f:07:65:83:31:ce:c6:1b:14:72:22:34:
77:18:4d:df:09:71:83:89:02:b3:b6:6c:39:bf:a0:
85:57:3c:3c:25:75:03:da:02:4a:de:f4:15:01:f4:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58593
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
163.228.0.0/16
IPv6:
2404:7940::/32
2406:e500::/32
Signature Algorithm: sha256WithRSAEncryption
5c:bd:b2:bd:d5:f2:b5:97:fb:43:1b:aa:0a:9a:66:68:10:86:
fb:7b:4c:00:14:cc:1b:56:37:cd:5c:18:8b:70:70:95:9e:b1:
34:fd:ff:1a:85:bf:50:a9:5d:59:a6:e3:6d:f0:51:c3:75:03:
88:24:a2:7c:e2:28:12:c7:38:92:ae:fb:e0:e0:23:a6:40:19:
3a:dd:23:e9:af:af:7e:54:54:a1:54:cb:c2:90:7e:78:a0:ba:
ef:1b:3a:eb:3c:0e:33:1f:a3:c5:c3:fc:6f:bf:78:ab:8e:a5:
32:3a:f9:21:0e:ca:33:44:01:81:ce:4f:9f:4a:d6:8f:60:ed:
7e:00:73:24:5c:81:0c:14:a0:28:60:2e:4b:71:74:44:3d:d2:
cf:f8:6c:64:35:ab:80:41:df:04:e8:a3:b9:20:3f:c7:a9:00:
12:7f:4a:81:ec:7e:d6:26:54:24:9a:bb:2b:3d:80:e0:22:52:
94:86:b2:14:de:78:5d:b7:63:7e:23:cc:54:49:a3:66:75:de:
16:29:95:7f:b2:d1:81:ad:38:f0:04:f9:90:f4:20:fc:2e:59:
46:8f:73:3a:6e:76:b8:67:1b:34:55:8f:78:2d:81:27:7b:68:
a1:4e:eb:d3:54:83:92:ba:6a:1b:22:33:8b:a6:04:d3:82:97:
b2:9a:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:18:43 2025 by rpki-client