Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer (raw, json)
Hash identifier: gJtW4OPVVOrQVLiw/HdDy+u3ZqxpnrcSrc/b+dkTsiQ=
Subject key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:13:12 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 151291
IP: 49.128.4.0/22
IP: 103.31.236.0/22
IP: 103.244.116.0/22
IP: 223.29.252.0/22
IP: 2403:6380::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52777 (0xce29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:13:12 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:82:1d:19:33:ce:c8:2a:a9:38:6a:9b:ee:
e8:1b:87:35:fe:af:2b:87:59:0f:4a:ba:18:16:b3:
ec:eb:3d:62:2f:0e:43:9e:5f:84:3c:c6:51:14:7e:
cc:9a:2b:4a:87:b3:74:46:50:27:f7:4e:c1:8c:c0:
2f:9a:86:32:c5:bc:c8:82:bb:c0:c6:49:f5:62:b1:
86:a0:37:29:34:dd:32:44:c2:ff:f2:ce:c2:a2:19:
fc:90:8e:6c:e2:17:01:4e:2e:32:42:0e:b4:ad:ba:
a6:50:df:5e:b2:bb:54:0a:7a:ae:aa:aa:2e:ed:6c:
17:cc:f8:d0:d6:06:49:84:2c:8d:0a:1c:9f:14:63:
a0:fd:54:f3:b6:d4:d0:06:70:56:bb:17:9c:1a:06:
42:a0:60:77:31:9c:6e:d1:49:69:e7:f7:ba:c4:2a:
70:fd:a3:90:41:37:27:f5:a6:2c:f8:95:bd:bd:19:
1f:f8:1c:ba:73:a1:fb:37:0c:29:64:5a:c5:05:33:
43:5c:40:c6:be:f9:5d:62:50:82:f1:03:71:68:d3:
e9:db:c1:81:ac:6b:75:ac:b0:b8:e0:95:fb:88:56:
bf:b0:82:38:f9:85:d1:c7:13:bb:03:8b:62:f3:ec:
45:98:ce:fd:14:54:89:12:69:32:bd:f5:60:7b:5b:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151291
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
103.31.236.0/22
103.244.116.0/22
223.29.252.0/22
IPv6:
2403:6380::/32
Signature Algorithm: sha256WithRSAEncryption
01:e4:13:4a:b2:ae:50:44:da:9e:37:eb:b1:e6:11:2d:17:e3:
af:61:aa:2a:14:23:80:de:af:ca:77:c1:21:15:af:32:2a:dd:
a4:89:d7:19:15:6d:5e:a2:21:72:af:13:2d:ba:9b:f5:e5:59:
4b:dc:b1:8b:20:e6:d3:32:8b:08:dd:b0:1e:f2:4e:bb:8a:bc:
c7:12:d5:ac:a8:af:54:1b:8f:dd:14:10:31:3a:5d:13:d8:05:
a3:82:ff:7a:2f:72:3f:63:12:89:39:40:51:27:06:90:d3:e5:
09:3d:1b:97:fb:82:bb:ce:f5:10:32:6d:5e:3c:e6:84:b8:22:
65:68:d4:43:b4:e0:47:88:f1:47:67:af:e8:d0:a9:d9:ae:fb:
58:af:8f:87:87:38:d2:3f:b8:22:51:a3:2b:a0:8d:70:cb:e6:
fc:66:b1:80:6c:0a:94:82:3d:38:a5:54:58:f3:69:da:57:39:
1d:fe:ed:c1:6d:71:93:44:fc:f4:5d:b8:c8:f3:83:36:aa:14:
bb:3c:66:c0:ed:21:23:0b:4f:ad:7f:28:5c:e0:fb:71:5e:65:
0f:ae:0b:46:f5:84:bd:f4:8a:81:ae:25:e2:b7:5d:0f:dc:5f:
ff:1c:8f:f1:0d:19:07:e0:10:64:83:55:d2:70:a4:02:dc:5d:
61:58:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:21:18 2025 by rpki-client