Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/DLBMxaazmxSN1xDvXG4_LZOAtFU.cer
File: DLBMxaazmxSN1xDvXG4_LZOAtFU.cer (raw, json)
Hash identifier: 5gaYiUi5f43/FQG4oJhSfSiLml7B1UWigVEfe6Zhc9I=
Subject key identifier: 0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CDEB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:11:25 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 55989
IP: 45.124.76.0/22
IP: 103.43.132.0/22
IP: 103.157.212.0/23
IP: 103.192.208.0/22
IP: 103.235.100.0/22
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52715 (0xcdeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:11:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=0CB04CC5A6B39B148DD710EF5C6E3F2D9380B455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:c6:32:88:0d:3d:7f:d7:d6:ce:f9:ee:ab:
6b:dd:e0:96:44:da:62:2e:12:ed:08:42:b9:15:23:
d1:a0:3c:86:ee:62:ad:db:96:42:6c:b0:5b:38:05:
3c:93:77:02:53:1e:db:42:3f:73:71:db:be:2a:f1:
8c:71:92:b5:42:87:8a:e4:5c:eb:be:a8:75:7e:6b:
dc:d0:fd:fc:31:02:be:6f:98:19:f7:4b:a6:26:0c:
7f:05:42:19:02:9a:94:07:9b:5b:65:ed:15:f9:58:
b1:49:f6:4f:bd:e6:51:67:19:d1:00:58:e1:3a:1e:
58:5f:4c:b0:ec:e9:ac:c6:70:bb:52:4c:6b:f7:df:
04:3d:91:b8:48:94:b6:20:59:51:16:bb:68:71:04:
fd:14:2c:06:c2:52:ab:c2:0e:60:3d:54:e1:ca:88:
21:9f:ce:8e:af:dd:27:22:74:eb:d2:f4:76:fd:8b:
9e:ed:c6:36:a1:b5:f8:80:23:8b:ce:9d:13:a8:af:
ef:c5:60:1e:69:2d:c9:79:16:e3:ea:56:e8:bd:ae:
b3:42:37:34:33:30:4d:dd:6b:25:fd:2c:3e:ce:e4:
93:84:94:8f:ba:a8:df:3d:12:e8:3f:0a:b1:ad:52:
cf:6e:1c:2a:ea:1b:d9:12:ce:46:57:49:7f:00:c1:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:4C:C5:A6:B3:9B:14:8D:D7:10:EF:5C:6E:3F:2D:93:80:B4:55
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3026/DLBMxaazmxSN1xDvXG4_LZOAtFU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55989
sbgp-ipAddrBlock: critical
IPv4:
45.124.76.0/22
103.43.132.0/22
103.157.212.0/23
103.192.208.0/22
103.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3b:c4:39:51:aa:94:5b:35:f0:71:7c:cc:ef:26:b0:60:30:
5c:2b:5e:bf:4d:4d:40:64:56:22:1a:b6:4f:fa:76:19:d4:91:
0a:31:fc:d7:de:24:cf:fc:cc:71:f3:99:3e:74:d6:e7:91:c4:
5a:7e:26:64:4c:d6:f8:b8:c7:32:ea:a9:10:02:00:be:e5:21:
61:78:89:d0:34:97:c4:7a:9b:78:aa:8f:30:c2:23:8b:dc:95:
89:07:6c:5c:68:73:a0:ee:cb:25:b1:49:68:91:4b:05:3b:ae:
13:a7:38:82:f9:e7:5b:c7:ed:f6:c4:75:79:b9:e8:15:1a:c6:
60:37:86:09:dc:b5:58:72:54:0e:5b:09:47:ff:ec:fa:8c:2c:
af:17:9c:ff:dc:20:21:7d:49:9c:7c:66:f1:c6:45:3a:4b:c3:
b6:2a:04:da:90:e9:0f:0d:50:07:f7:2a:ab:2f:56:d7:9f:c5:
be:ae:4e:81:23:54:95:fd:cd:8c:a9:04:7a:26:4d:81:f2:fc:
0b:2d:a7:95:66:ea:d6:11:c3:a2:2a:08:83:c3:ca:51:7c:e6:
8f:07:20:58:4e:aa:50:4f:de:3f:21:45:ba:c3:1d:b5:36:94:
ce:36:05:ba:f7:39:31:d9:e1:79:1a:53:f0:93:ca:a0:37:87:
db:2e:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:14:19 2025 by rpki-client