Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer
File: UJGXL6ttHEVOK0QS3ESFpHRYvjY.cer (raw, json)
Hash identifier: fOdd2JTLXBrjPHLtMAkZwXmr8tYHgJd1K7NaHFGUTfE=
Subject key identifier: 50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CD6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:09:05 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 59048
IP: 43.224.56.0/22
IP: 43.228.132.0 -- 43.228.139.255
IP: 43.242.60.0 -- 43.242.67.255
IP: 45.124.80.0/22
IP: 45.253.24.0/22
IP: 45.253.32.0/22
IP: 103.192.212.0/22
IP: 103.222.32.0/22
IP: 103.222.40.0/22
IP: 103.222.164.0/22
IP: 103.222.172.0/22
IP: 103.223.140.0/22
IP: 103.223.188.0/22
IP: 103.224.228.0/22
IP: 103.255.88.0/22
IP: 103.255.200.0/22
IP: 2401:a140::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52591 (0xcd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:09:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5091972FAB6D1C454E2B4412DC4485A47458BE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:a3:03:d2:c1:28:c7:2b:2c:0f:37:d3:82:
4c:70:35:fe:6b:55:c1:15:b0:a6:ee:33:c4:38:a9:
69:c4:a5:fa:f3:4a:ca:9d:73:2d:6f:af:c2:82:8b:
17:1e:5e:28:92:26:d4:40:fa:25:b6:4a:1c:69:d8:
c6:e6:3a:ac:76:b4:c2:3e:a8:f9:b8:10:f3:97:76:
48:9a:08:56:3e:15:6e:94:82:22:5c:e0:f2:7e:cd:
0b:32:aa:a5:12:ab:8c:5f:8c:2c:a2:58:12:ba:91:
d8:43:77:d7:cc:f4:51:c5:27:54:92:fe:d7:16:6a:
08:8a:28:fe:d2:6e:6e:45:0d:c1:86:31:de:15:f1:
d6:89:46:04:b5:09:e2:56:4a:74:f7:e0:26:ee:51:
b6:2d:79:fa:13:40:e5:4d:5d:06:af:45:d0:4d:ad:
d7:20:14:9c:3d:f4:2f:95:84:02:a5:ca:fa:7f:95:
43:b7:a9:82:91:f8:c9:9a:ff:85:a9:02:8e:14:5e:
cc:e2:d2:60:2b:1b:d6:08:96:d7:02:a3:93:dd:d4:
cf:66:12:20:3d:a6:2c:87:27:ea:d9:45:9b:36:4e:
12:ba:ae:87:99:e6:99:c5:07:5c:ea:ab:bd:7a:86:
cb:b5:d3:80:8c:b2:d4:74:e5:66:55:4d:3a:60:02:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:97:2F:AB:6D:1C:45:4E:2B:44:12:DC:44:85:A4:74:58:BE:36
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/678/UJGXL6ttHEVOK0QS3ESFpHRYvjY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59048
sbgp-ipAddrBlock: critical
IPv4:
43.224.56.0/22
43.228.132.0-43.228.139.255
43.242.60.0-43.242.67.255
45.124.80.0/22
45.253.24.0/22
45.253.32.0/22
103.192.212.0/22
103.222.32.0/22
103.222.40.0/22
103.222.164.0/22
103.222.172.0/22
103.223.140.0/22
103.223.188.0/22
103.224.228.0/22
103.255.88.0/22
103.255.200.0/22
IPv6:
2401:a140::/32
Signature Algorithm: sha256WithRSAEncryption
18:fd:c9:f8:bc:62:2d:60:b7:8b:0a:b7:cb:41:44:b3:d1:60:
0b:06:eb:7c:a3:65:d4:3e:95:40:c7:5c:04:6c:c6:01:48:9c:
51:1f:6a:71:76:d9:ea:70:9e:cb:87:9b:7d:bf:d1:55:d6:56:
c4:a8:f9:0a:44:a9:fa:2f:ea:d7:51:7e:81:87:be:6f:b0:75:
04:39:42:65:c8:49:d2:5d:6f:dc:e1:3a:b8:76:ca:14:b9:8d:
f1:b4:bb:a8:b3:5d:bf:ad:49:ad:c3:1c:e9:30:31:5a:58:48:
3d:3c:f2:98:08:f6:0e:c0:71:e0:1b:6f:7e:77:b9:39:c2:dc:
a1:d7:3e:28:91:2d:4b:d6:c0:46:ed:9e:96:d4:b3:b0:19:31:
51:69:a3:c5:de:ff:94:34:dc:11:18:ab:3b:65:98:db:bc:52:
ef:13:32:ab:6b:c5:45:49:b3:24:4a:2b:b2:bc:a3:c6:bf:4d:
46:07:4f:17:04:76:ea:64:ad:09:a8:f8:35:e6:b3:21:20:86:
88:85:31:b5:b5:9b:fb:5b:99:b4:21:ac:93:73:d6:c6:51:2f:
4f:a1:05:c4:67:56:77:47:bf:73:3f:a5:e7:f4:3f:20:61:e0:
2c:c5:ea:d0:59:e0:00:7c:3c:ca:94:32:67:b3:b4:0b:ba:e3:
a2:65:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:21:24 2025 by rpki-client