Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
File: WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer (raw, json)
Hash identifier: u+DfcKba+HnR6P+8cqlX88/4csOOIx88HcxqmRv7otw=
Subject key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CCB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:05:50 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 45110
IP: 43.254.228.0 -- 43.254.243.255
IP: 43.254.248.0/22
IP: 43.255.0.0/22
IP: 45.125.76.0/22
IP: 45.125.84.0 -- 45.125.103.255
IP: 103.23.160.0/22
IP: 103.103.188.0/22
IP: 103.193.212.0 -- 103.193.239.255
IP: 103.200.220.0 -- 103.201.3.255
IP: 103.201.192.0 -- 103.201.219.255
IP: 103.229.216.0/21
IP: 103.229.228.0/22
IP: 103.229.236.0 -- 103.229.243.255
IP: 111.118.200.0/21
IP: 113.21.232.0/21
IP: 114.31.64.0/21
IP: 114.141.80.0/21
IP: 119.161.120.0/21
IP: 120.136.16.0/21
IP: 202.47.104.0/21
IP: 202.57.192.0/20
IP: 202.65.96.0/22
IP: 203.114.244.0/22
IP: 2401:f7c0::/32
IP: 2403:9b00::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52405 (0xccb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:05:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:2c:cf:1d:e3:6b:44:6f:78:c6:23:43:04:
ad:eb:e0:99:00:0b:61:37:4e:83:2e:04:8a:e2:ea:
b5:47:fb:a8:1c:9d:a3:aa:a5:a7:3d:93:5a:a5:01:
ca:62:f2:94:2b:f9:ae:ee:4b:23:62:06:d3:54:b6:
6e:3b:46:3c:4f:98:88:d8:31:d6:a8:35:d2:5e:2e:
8f:42:43:9f:8f:fb:67:11:df:32:38:26:ac:28:ca:
55:e8:05:01:55:e7:a8:8d:b2:12:08:47:72:91:34:
a7:cf:91:1c:9f:60:1c:c6:d9:0a:28:6a:74:7d:9b:
81:b4:29:b0:4a:cc:b9:45:02:49:42:4b:11:68:4e:
db:39:2c:57:a4:c1:bb:86:ff:b5:93:d0:56:7e:23:
ba:b9:c8:14:e5:6e:1e:c7:a1:04:26:93:e7:eb:5f:
54:2c:bc:ae:c7:54:81:9a:0d:20:21:55:d1:2f:79:
39:7e:27:96:a8:73:c6:6a:d6:68:42:4c:36:d2:81:
41:21:48:a8:5f:dd:bc:fe:be:14:95:a8:33:a5:a4:
2f:1c:6a:43:b1:9f:54:75:d4:b0:d9:f8:d8:86:bb:
4c:56:5c:92:19:76:69:e6:48:96:1a:c9:8f:84:9d:
16:8b:6a:a1:72:d1:0b:f6:c1:f9:79:1c:2a:a7:f3:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45110
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0-43.254.243.255
43.254.248.0/22
43.255.0.0/22
45.125.76.0/22
45.125.84.0-45.125.103.255
103.23.160.0/22
103.103.188.0/22
103.193.212.0-103.193.239.255
103.200.220.0-103.201.3.255
103.201.192.0-103.201.219.255
103.229.216.0/21
103.229.228.0/22
103.229.236.0-103.229.243.255
111.118.200.0/21
113.21.232.0/21
114.31.64.0/21
114.141.80.0/21
119.161.120.0/21
120.136.16.0/21
202.47.104.0/21
202.57.192.0/20
202.65.96.0/22
203.114.244.0/22
IPv6:
2401:f7c0::/32
2403:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
56:44:3c:68:e5:82:3a:97:1f:3d:b3:bd:59:88:0e:c4:c9:dd:
eb:86:b3:57:7e:c6:fa:f5:f2:fe:66:51:c1:43:e6:a3:29:ee:
86:a7:a0:21:7d:67:ad:d2:c7:c7:cf:cc:93:88:f9:bd:9b:c6:
84:21:fc:7b:ae:67:04:bb:37:aa:d5:de:2d:bd:dd:59:5c:81:
df:5a:de:d1:03:2c:10:a9:1a:2b:fe:0c:8b:5c:5d:b5:9e:f2:
ca:ed:80:8b:00:08:27:31:9d:fa:b3:1a:5a:a5:56:00:74:d4:
da:bb:0c:31:0d:f3:82:60:25:f0:b0:c7:6f:03:07:ec:eb:1f:
f3:e4:a8:74:d0:2e:d5:50:04:32:f3:cf:e7:ba:7b:d8:9a:5d:
02:2b:60:f5:89:e8:e0:e0:f7:48:eb:2c:e4:d1:98:21:f9:58:
5c:b7:c1:46:d6:9d:e4:e4:b9:00:f7:e4:82:a1:9d:34:f2:d9:
4b:28:0a:f9:2b:f1:23:55:30:ec:f5:89:90:53:5d:91:af:ac:
c7:fc:0b:4a:b2:db:79:d9:7a:86:57:75:b5:31:64:14:00:ec:
bf:cf:5d:84:24:4a:08:f7:ee:02:87:16:d1:06:cf:91:58:ae:
ba:67:1d:c7:6c:94:3e:48:aa:eb:d6:15:ba:a0:30:64:b0:98:
ad:7e:28:18
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIDAMy1MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5
MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG
MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODA1NTBaFw0yNjA0MDMwODAwMDlaMDMx
MTAvBgNVBAMTKDU4NTIwNkM4NzQyMEJFNDJDN0I5MDQyREUzRTVGRDUxNTk1RkYx
NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPSzPHeNrRG94xiND
BK3r4JkAC2E3ToMuBIri6rVH+6gcnaOqpac9k1qlAcpi8pQr+a7uSyNiBtNUtm47
RjxPmIjYMdaoNdJeLo9CQ5+P+2cR3zI4JqwoylXoBQFV56iNshIIR3KRNKfPkRyf
YBzG2QooanR9m4G0KbBKzLlFAklCSxFoTts5LFekwbuG/7WT0FZ+I7q5yBTlbh7H
oQQmk+frX1QsvK7HVIGaDSAhVdEveTl+J5aoc8Zq1mhCTDbSgUEhSKhf3bz+vhSV
qDOlpC8cakOxn1R11LDZ+NiGu0xWXJIZdmnmSJYayY+EnRaLaqFy0Qv2wfl5HCqn
84YVAgMBAAGjggM+MIIDOjAdBgNVHQ4EFgQUWFIGyHQgvkLHuQQt4+X9UVlf8Usw
HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu
Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE
MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF
MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF
BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM2
MS8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy
RTNEMDAwMC8zNjEvV0ZJR3lIUWd2a0xIdVFRdDQtWDlVVmxmOFVzLm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAsDYwge0GCCsGAQUFBwEHAQH/BIHdMIHa
MIHBBAIAATCBujAMAwQCK/7kAwQCK/7wAwQCK/74AwQCK/8AAwQCLX1MMAwDBAIt
fVQDBAMtfWADBAJnF6ADBAJnZ7wwDAMEAmfB1AMEBGfB4DAMAwQCZ8jcAwQCZ8kA
MAwDBAZnycADBAJnydgDBANn5dgDBAJn5eQwDAMEAmfl7AMEAmfl8AMEA292yAME
A3EV6AMEA3IfQAMEA3KNUAMEA3eheAMEA3iIEAMEA8ovaAMEBMo5wAMEAspBYAME
Asty9DAUBAIAAjAOAwUAJAH3wAMFACQDmwAwDQYJKoZIhvcNAQELBQADggEBAFZE
PGjlgjqXHz2zvVmIDsTJ3euGs1d+xvr18v5mUcFD5qMp7oanoCF9Z63Sx8fPzJOI
+b2bxoQh/HuuZwS7N6rV3i293Vlcgd9a3tEDLBCpGiv+DItcXbWe8srtgIsACCcx
nfqzGlqlVgB01Nq7DDEN84JgJfCwx28DB+zrH/PkqHTQLtVQBDLzz+e6e9iaXQIr
YPWJ6ODg90jrLOTRmCH5WFy3wUbWneTkuQD35IKhnTTy2UsoCvkr8SNVMOz1iZBT
XZGvrMf8C0qy23nZeoZXdbUxZBQA7L/PXYQkSgj37gKHFtEGz5FYrrpnHcdslD5I
quvWFbqgMGSwmK1+KBg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:20:29 2025 by rpki-client