Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
File: ze9xEd6YvXVtkrNNOU2i057_m44.cer (raw, json)
Hash identifier: sME9kaJNg1OxDF8pMqDY9MAXLkDai1bqb6URnnk+w68=
Subject key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: BB07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 27 Sep 2024 02:49:57 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 58593
IP: 42.159.0.0/16
IP: 103.9.8.0/22
IP: 163.228.0.0/16
IP: 2404:7940::/32
IP: 2406:e500::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47879 (0xbb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Sep 27 02:49:57 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:2d:87:41:8f:b7:96:8d:b1:e7:38:4c:8b:
1b:d7:13:01:85:92:1c:d0:f8:03:c2:b8:2b:3e:15:
c3:99:f0:37:b6:3f:f7:de:af:ad:f4:f6:79:a4:e0:
ca:5e:a2:70:55:58:b0:b9:a0:a4:42:0a:5a:48:fa:
fa:81:90:6e:65:18:77:47:e6:e6:61:b4:a6:68:a5:
5d:48:cb:70:fb:12:68:12:12:00:e4:d9:fd:ef:23:
dc:a3:ad:f0:e5:27:43:fc:fd:56:c5:af:36:b6:18:
73:82:7f:c1:1f:ea:ac:a0:1b:31:dc:3c:30:8d:3a:
1f:86:e3:bd:24:e6:04:e0:ae:ff:a6:5d:ab:99:50:
0b:58:b7:8a:59:77:54:d7:ab:8a:b8:54:b6:b7:65:
6a:56:dd:ab:41:12:28:3a:d3:38:f0:68:1d:41:00:
13:1b:d7:38:90:9c:85:ed:70:c1:be:1c:61:10:08:
b8:3f:45:53:1b:8c:b4:ee:c2:6a:e1:f9:23:3e:85:
ee:c4:cd:e1:3a:82:90:e0:2b:b5:02:64:3f:04:ab:
18:86:c9:0f:07:65:83:31:ce:c6:1b:14:72:22:34:
77:18:4d:df:09:71:83:89:02:b3:b6:6c:39:bf:a0:
85:57:3c:3c:25:75:03:da:02:4a:de:f4:15:01:f4:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58593
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
163.228.0.0/16
IPv6:
2404:7940::/32
2406:e500::/32
Signature Algorithm: sha256WithRSAEncryption
9f:cb:2e:db:12:75:2a:7b:61:59:61:cc:84:1d:2d:70:ff:e3:
05:da:3b:09:14:1b:68:c3:77:0f:fa:6f:ce:46:89:fb:48:d6:
61:37:96:d5:cc:60:88:49:53:fe:21:ca:3a:b5:9f:55:ac:2a:
99:42:50:dd:36:c3:ce:11:ca:e3:40:ee:e5:38:7a:d5:95:b4:
dc:54:e4:57:9c:30:21:2f:df:e1:d2:20:a0:7d:ff:ae:67:88:
c7:87:66:49:8b:ec:9b:69:2c:e9:7a:38:ee:68:f6:1a:c7:ce:
93:7a:94:00:fd:c6:f3:d5:52:f8:35:60:58:9c:c2:62:65:23:
1f:dd:40:bb:98:23:d5:d7:33:bd:8d:96:55:bc:25:b3:c4:16:
3e:f7:78:bf:69:98:19:d5:2f:11:56:14:f2:d0:23:84:86:0c:
22:c4:7b:eb:76:fc:d4:c4:9b:01:0a:5a:c6:79:bc:9a:06:09:
48:48:4d:40:51:33:a6:31:11:5a:31:18:0f:68:79:9a:84:72:
df:89:fc:b7:d7:11:24:f3:67:64:bf:41:24:88:c7:63:13:0c:
26:86:4c:52:5e:48:29:22:d2:fc:54:13:65:f8:b7:73:47:8a:
ac:df:78:ae:17:59:27:ab:59:09:2d:13:13:d5:08:d9:e2:77:
38:a4:31:71
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDALsHMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNDA5MjcwMjQ5NTdaFw0yNTA5MjcwMjQwMTRaMDMx
MTAvBgNVBAMTKENERUY3MTExREU5OEJENzU2RDkyQjM0RDM5NERBMkQzOUVGRjlC
OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd6y2HQY+3lo2x5zhM
ixvXEwGFkhzQ+APCuCs+FcOZ8De2P/fer6309nmk4MpeonBVWLC5oKRCClpI+vqB
kG5lGHdH5uZhtKZopV1Iy3D7EmgSEgDk2f3vI9yjrfDlJ0P8/VbFrza2GHOCf8Ef
6qygGzHcPDCNOh+G470k5gTgrv+mXauZUAtYt4pZd1TXq4q4VLa3ZWpW3atBEig6
0zjwaB1BABMb1ziQnIXtcMG+HGEQCLg/RVMbjLTuwmrh+SM+he7EzeE6gpDgK7UC
ZD8EqxiGyQ8HZYMxzsYbFHIiNHcYTd8JcYOJArO2bDm/oIVXPDwldQPaAkre9BUB
9NXlAgMBAAGjggKRMIICjTAdBgNVHQ4EFgQUze9xEd6YvXVtkrNNOU2i057/m44w
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF
BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2
MjAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2
MkUzRDAwMDAvMjYyMC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDk4TA/BggrBgEFBQcBBwEB/wQwMC4w
FgQCAAEwEAMDACqfAwQCZwkIAwMAo+QwFAQCAAIwDgMFACQEeUADBQAkBuUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCfyy7bEnUqe2FZYcyEHS1w/+MF2jsJFBtow3cP+m/O
Ron7SNZhN5bVzGCISVP+Ico6tZ9VrCqZQlDdNsPOEcrjQO7lOHrVlbTcVORXnDAh
L9/h0iCgff+uZ4jHh2ZJi+ybaSzpejjuaPYax86TepQA/cbz1VL4NWBYnMJiZSMf
3UC7mCPV1zO9jZZVvCWzxBY+93i/aZgZ1S8RVhTy0COEhgwixHvrdvzUxJsBClrG
ebyaBglISE1AUTOmMRFaMRgPaHmahHLfify31xEk82dkv0EkiMdjEwwmhkxSXkgp
ItL8VBNl+LdzR4qs33iuF1knq1kJLRMT1QjZ4nc4pDFx
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:28 2024 by rpki-client on console-fra.rpki-client.org