Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
File: ze9xEd6YvXVtkrNNOU2i057_m44.cer (raw, json)
Hash identifier: oWu4N15sSirHt6chP/MxR0wWkWAS5MY6TiU2QwaySZk=
Subject key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: AE7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 01 Feb 2024 01:20:32 +0000
Certificate not after: Fri 31 Jan 2025 01:13:46 +0000
Subordinate resources: AS: 58593
IP: 42.159.0.0/16
IP: 103.9.8.0/22
IP: 163.228.0.0/16
IP: 2404:7940::/32
IP: 2406:e500::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 May 2024 19:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44667 (0xae7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Feb 1 01:20:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:2d:87:41:8f:b7:96:8d:b1:e7:38:4c:8b:
1b:d7:13:01:85:92:1c:d0:f8:03:c2:b8:2b:3e:15:
c3:99:f0:37:b6:3f:f7:de:af:ad:f4:f6:79:a4:e0:
ca:5e:a2:70:55:58:b0:b9:a0:a4:42:0a:5a:48:fa:
fa:81:90:6e:65:18:77:47:e6:e6:61:b4:a6:68:a5:
5d:48:cb:70:fb:12:68:12:12:00:e4:d9:fd:ef:23:
dc:a3:ad:f0:e5:27:43:fc:fd:56:c5:af:36:b6:18:
73:82:7f:c1:1f:ea:ac:a0:1b:31:dc:3c:30:8d:3a:
1f:86:e3:bd:24:e6:04:e0:ae:ff:a6:5d:ab:99:50:
0b:58:b7:8a:59:77:54:d7:ab:8a:b8:54:b6:b7:65:
6a:56:dd:ab:41:12:28:3a:d3:38:f0:68:1d:41:00:
13:1b:d7:38:90:9c:85:ed:70:c1:be:1c:61:10:08:
b8:3f:45:53:1b:8c:b4:ee:c2:6a:e1:f9:23:3e:85:
ee:c4:cd:e1:3a:82:90:e0:2b:b5:02:64:3f:04:ab:
18:86:c9:0f:07:65:83:31:ce:c6:1b:14:72:22:34:
77:18:4d:df:09:71:83:89:02:b3:b6:6c:39:bf:a0:
85:57:3c:3c:25:75:03:da:02:4a:de:f4:15:01:f4:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58593
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
163.228.0.0/16
IPv6:
2404:7940::/32
2406:e500::/32
Signature Algorithm: sha256WithRSAEncryption
00:93:c0:aa:fc:f1:b5:be:6e:21:1a:53:d0:9f:c3:70:52:54:
34:4b:5b:0e:70:cc:d5:f0:74:b0:a4:3a:66:cb:14:d9:41:67:
54:90:da:bd:0f:03:97:5e:2c:3d:e0:fe:cc:06:13:e9:20:8e:
36:ee:1f:e9:ca:b2:a3:21:6a:97:25:c8:f7:5a:ff:10:ac:b6:
ee:13:ea:e6:78:36:ee:e4:46:ab:b6:c2:82:3a:34:90:c7:4f:
77:eb:34:c4:46:65:f2:da:8b:43:c9:a8:ad:aa:9e:58:c6:99:
dc:6d:c1:35:9b:52:98:35:e4:43:2a:6d:32:73:9a:e4:a3:ef:
a2:e8:71:ed:c8:6b:af:55:70:f4:71:81:3a:ca:fd:02:73:28:
b3:f5:7a:df:d1:61:4f:76:76:76:19:f7:29:20:e2:cf:56:c8:
d9:10:a3:f8:4a:a9:3f:e8:25:2c:15:2d:64:3d:d9:1e:2f:5a:
67:21:b0:ad:2c:63:fa:8d:af:e5:c4:9f:43:34:2d:05:5c:31:
0b:d7:93:75:ce:90:3b:1e:a1:4c:5a:28:0b:96:96:8d:f4:72:
d5:1d:6b:1e:10:97:f3:bd:cf:5e:f9:42:59:5a:bd:9b:6f:8d:
1b:b3:28:9b:28:f5:b4:8c:35:bd:52:34:7a:fc:d0:b1:93:ae:
98:5d:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:16:52 2024 by rpki-client on console-ams.rpki-client.org