Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer
File: O3WyLEecFpumBZHB3tRCDFNoHbo.cer (raw, json)
Hash identifier: Kf/mwK0X2AdOw5wfy+gCpZNxmlVbRGgpGRXQeGCsdsM=
Subject key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CD1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:07:37 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 58993
IP: 27.0.160.0/22
IP: 43.228.116.0/22
IP: 43.243.12.0/22
IP: 43.254.88.0/22
IP: 103.82.224.0/22
IP: 103.208.12.0/22
IP: 103.233.52.0/22
IP: 103.238.132.0/22
IP: 182.50.112.0/20
IP: 223.223.192.0/20
IP: 2404:1c80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52507 (0xcd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:07:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=3B75B22C479C169BA60591C1DED4420C53681DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:10:28:dd:a3:cf:eb:82:0e:9b:67:b4:13:
b8:c0:28:36:7f:44:ad:a3:24:3f:ca:76:0a:83:e2:
2a:3d:c2:2e:5b:cc:d6:88:7b:19:15:2e:d8:7b:b5:
de:6b:a0:d4:42:95:b2:76:8c:6c:c7:ac:6f:7c:d8:
e6:9a:fc:a2:0c:46:75:88:33:8a:dd:52:e6:9b:bc:
65:42:92:78:df:e3:38:aa:89:c5:da:27:2f:20:fb:
9d:33:10:bb:27:bc:4e:bb:62:fb:e5:7c:d0:f2:b6:
80:e1:9b:56:ec:32:7a:99:7e:91:e2:3d:29:69:40:
28:df:8a:e8:8c:e9:17:64:07:7a:8f:f6:39:8b:a8:
d4:92:9f:31:a6:bd:c3:a9:b0:ac:63:5a:e7:56:8e:
15:75:9b:eb:af:f8:de:01:0f:45:56:c5:b2:e6:5d:
cb:73:80:a0:c4:75:fa:05:15:49:dd:be:13:67:9e:
5f:ef:07:47:b7:d9:e4:a0:e4:27:b3:c6:34:e2:58:
55:60:57:dd:29:a5:68:a7:5c:ee:99:cc:77:0a:92:
91:65:d0:41:a9:22:8d:64:a7:b3:51:1a:1d:8b:46:
a8:f2:a0:9a:f4:05:a7:d2:a4:50:e6:c8:a3:c5:50:
15:2c:3a:8d:25:50:9d:b3:c8:5b:0b:2e:67:2c:43:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58993
sbgp-ipAddrBlock: critical
IPv4:
27.0.160.0/22
43.228.116.0/22
43.243.12.0/22
43.254.88.0/22
103.82.224.0/22
103.208.12.0/22
103.233.52.0/22
103.238.132.0/22
182.50.112.0/20
223.223.192.0/20
IPv6:
2404:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
4d:c9:fc:34:4b:7a:b9:64:ac:f4:3a:8d:55:bc:6d:1b:ba:cc:
18:67:f6:36:b6:77:93:6d:5e:f9:30:35:19:20:1e:ba:f1:c9:
52:93:c5:cc:a3:17:3a:42:ad:b4:76:d5:0b:63:48:5f:34:96:
bd:fc:07:e3:3b:f0:bf:a2:de:37:13:d8:6a:85:bb:7f:ff:f6:
ec:8e:1d:ad:ea:68:83:5b:b0:b3:53:9d:d7:2d:5e:b5:37:d1:
93:2d:81:e8:d6:e7:2c:5d:aa:09:1a:ea:43:d1:11:cd:b5:25:
2f:98:d9:f7:7a:a1:ac:75:a9:b6:16:55:c0:fe:61:71:b2:c7:
a6:06:6e:f9:15:9b:32:e6:e0:7f:79:81:21:cb:5a:a4:63:30:
b5:75:c4:27:51:a9:d4:14:cd:6a:db:b7:a8:88:b9:3b:29:3f:
17:2d:ff:d1:10:eb:95:f8:ce:1f:62:79:ec:c0:7d:db:eb:9e:
54:59:96:3c:f2:4e:64:5e:65:db:56:65:13:ca:12:62:08:eb:
ec:30:77:52:ef:57:bc:67:ae:01:9b:73:5b:13:2b:77:fe:86:
e1:18:fe:07:cc:c0:66:98:c5:d3:99:3f:47:ed:d2:2b:3e:99:
c9:32:8d:6e:2c:61:0e:8d:ad:d4:ba:ac:4f:f3:52:58:94:b7:
62:1a:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:06 2025 by rpki-client