Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/HsPdz0dl7wGHxupiZgyDpkGedEQ.cer
File: HsPdz0dl7wGHxupiZgyDpkGedEQ.cer (raw, json)
Hash identifier: eZA1jQB1f1JHwI5PqLyx/yTjTv70sEOI1GzpZpkiBfw=
Subject key identifier: 1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CD47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:08:21 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 9395
IP: 43.247.208.0/22
IP: 49.221.0.0/16
IP: 103.23.56.0/22
IP: 103.24.184.0/22
IP: 115.172.0.0/19
IP: 115.172.96.0 -- 115.172.191.255
IP: 124.14.64.0 -- 124.14.191.255
IP: 124.14.224.0/19
IP: 124.15.128.0/18
IP: 124.254.0.0/18
IP: 175.188.128.0/17
IP: 175.190.0.0/17
IP: 180.88.0.0 -- 180.89.127.255
IP: 180.91.128.0/17
IP: 211.161.0.0 -- 211.161.59.255
IP: 211.161.64.0/19
IP: 211.161.112.0 -- 211.161.191.255
IP: 211.162.0.0/18
IP: 211.162.80.0 -- 211.162.111.255
IP: 211.162.128.0/18
IP: 211.162.196.0 -- 211.162.255.255
IP: 220.112.128.0/18
IP: 220.112.208.0/20
IP: 220.113.0.0 -- 220.113.149.255
IP: 220.113.168.0 -- 220.113.223.255
IP: 220.115.0.0/19
IP: 220.115.64.0 -- 220.115.247.255
IP: 223.210.0.0/17
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52551 (0xcd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:08:21 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1EC3DDCF4765EF0187C6EA62660C83A6419E7444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:8b:b4:3c:44:1f:6c:c8:6f:11:f7:3f:5a:
e8:98:b2:2f:95:61:3d:3a:38:0b:56:8b:2e:93:a2:
bf:75:ab:08:35:ec:c0:51:e3:7d:6a:43:d3:b6:49:
d1:df:5b:cd:e1:61:6f:8c:46:6c:5e:4e:74:81:ce:
15:35:d8:c9:77:5d:e1:48:10:f4:71:59:4d:3d:5d:
6d:59:10:a4:97:11:79:8a:59:3f:c0:cc:f7:0a:f3:
dc:6d:3c:6c:6f:bc:18:ba:c3:69:c1:a0:0a:55:eb:
ce:bb:bf:fe:ca:7c:2d:80:0f:60:ce:a0:be:1f:85:
85:6e:21:fb:fd:ce:18:46:1b:f6:13:cb:b2:5f:00:
7e:d4:c7:71:25:16:8d:c6:12:c9:b0:af:d9:6a:5e:
63:d1:80:31:94:ab:a7:0b:5a:b8:17:81:a1:97:9d:
87:fb:5b:ac:45:19:d2:9c:93:82:94:f0:a3:7a:33:
ac:9f:88:b9:da:bb:f8:74:92:4e:50:dc:29:aa:aa:
3b:37:dc:2f:14:7e:a2:25:1b:fd:5b:4d:63:39:62:
b2:12:a9:21:12:b3:60:ba:0a:b5:0b:3c:6b:82:3d:
89:6a:3f:48:e6:b8:e6:01:47:a9:15:b1:16:e6:38:
36:c0:fd:8e:db:db:95:fe:6e:93:5a:4d:ce:02:2d:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:DD:CF:47:65:EF:01:87:C6:EA:62:66:0C:83:A6:41:9E:74:44
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/583/HsPdz0dl7wGHxupiZgyDpkGedEQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9395
sbgp-ipAddrBlock: critical
IPv4:
43.247.208.0/22
49.221.0.0/16
103.23.56.0/22
103.24.184.0/22
115.172.0.0/19
115.172.96.0-115.172.191.255
124.14.64.0-124.14.191.255
124.14.224.0/19
124.15.128.0/18
124.254.0.0/18
175.188.128.0/17
175.190.0.0/17
180.88.0.0-180.89.127.255
180.91.128.0/17
211.161.0.0-211.161.59.255
211.161.64.0/19
211.161.112.0-211.161.191.255
211.162.0.0/18
211.162.80.0-211.162.111.255
211.162.128.0/18
211.162.196.0-211.162.255.255
220.112.128.0/18
220.112.208.0/20
220.113.0.0-220.113.149.255
220.113.168.0-220.113.223.255
220.115.0.0/19
220.115.64.0-220.115.247.255
223.210.0.0/17
Signature Algorithm: sha256WithRSAEncryption
06:e8:53:d6:47:2d:a3:e6:f7:a0:c8:fb:23:0d:28:e1:01:4b:
f2:6f:8f:34:c2:aa:ad:87:23:9c:96:b7:b8:44:ec:25:99:a7:
8a:0b:f5:ea:1c:ec:7f:f6:63:7a:8b:ab:dc:5f:99:ee:b7:3c:
43:62:b9:5d:d6:ce:26:2f:15:e6:c0:26:10:5e:98:5e:38:c8:
40:13:ad:e6:81:52:3a:c3:7f:bc:1e:a7:ca:48:73:31:be:bf:
73:bd:21:9d:93:28:ca:0b:4c:4f:37:27:88:07:76:98:d2:1d:
c3:d1:93:30:99:87:7d:cc:b1:fc:18:38:44:10:52:03:46:24:
85:84:3f:b0:36:a6:e7:f8:c2:02:75:c3:d9:40:3f:2f:83:fc:
79:ae:ba:54:a3:f5:a7:ab:b5:91:70:ce:48:2d:8b:9d:8f:59:
10:de:17:8e:6b:96:89:27:06:23:7b:52:35:08:1b:58:c8:10:
09:8d:71:0d:04:f2:c3:97:b3:6b:07:d9:b8:10:96:b7:87:07:
4f:d2:a7:4d:01:49:f9:3e:a1:e0:d7:0f:15:34:07:b6:27:4e:
1f:61:68:b6:cf:02:88:5c:60:80:98:90:25:cc:d8:f3:8d:11:
36:0e:d3:d2:4e:c4:d9:cb:60:5a:45:cd:1f:8d:92:f9:3f:63:
d7:98:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:23:46 2025 by rpki-client