Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer
File: _uDIJ84pYgIAbrTtK2WV3ODpfHs.cer (raw, json)
Hash identifier: CpYPhbVPvxi4bA+OJQJav6EFMq+GCxAWnBoIVtuyI2I=
Subject key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CF2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Wed 09 Apr 2025 06:48:05 +0000
Certificate not after: Thu 09 Apr 2026 06:40:47 +0000
Subordinate resources: AS: 59015
IP: 43.224.240.0/22
IP: 43.247.100.0/22
IP: 103.43.240.0/22
IP: 103.234.128.0/22
IP: 119.38.224.0/19
IP: 2403:3d80::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53037 (0xcf2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 9 06:48:05 2025 GMT
Not After : Apr 9 06:40:47 2026 GMT
Subject: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:9b:44:4f:c4:aa:09:e8:c6:2c:b9:7c:39:
52:15:4a:86:2b:11:a5:f6:10:00:ff:16:ae:be:11:
8c:59:8e:d1:99:e6:c6:9c:27:9b:c0:23:51:d7:e4:
c5:d8:db:ac:21:93:4a:c7:df:d2:91:cc:4d:2b:48:
f9:6c:89:db:bc:39:5f:5e:42:69:60:0b:79:1d:a3:
27:22:ad:b3:67:e7:1c:bf:33:5b:38:5a:e3:64:6a:
f2:fa:ce:c0:d7:04:74:f6:8a:56:5b:a4:4d:99:84:
4c:6a:e6:e1:42:42:e4:23:8c:21:5d:66:63:35:4f:
d3:1e:a8:b5:b8:e4:15:50:5c:c3:fb:af:d2:f6:3d:
e4:88:6f:f9:cd:5e:d4:9e:5a:2c:4e:ad:f9:c9:13:
96:4f:78:3e:58:fb:8c:e8:11:7d:20:17:b9:0c:71:
6e:70:85:dd:5e:3c:bc:4f:9f:a7:c1:a0:f0:fc:a7:
17:a8:3d:9a:f2:f9:14:47:4e:7f:b6:88:61:cd:d0:
ff:e3:ec:1c:6d:2d:ae:b1:a2:ca:63:0c:88:06:60:
c0:2a:eb:94:36:05:f2:4d:14:b9:59:40:45:e4:4c:
13:3a:f5:c5:29:1a:8e:3e:81:ba:36:3c:74:59:3f:
d5:3a:0e:12:87:9e:0c:47:a3:a5:60:10:82:cc:5c:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59015
sbgp-ipAddrBlock: critical
IPv4:
43.224.240.0/22
43.247.100.0/22
103.43.240.0/22
103.234.128.0/22
119.38.224.0/19
IPv6:
2403:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
a3:a1:16:49:c3:29:49:8a:8e:29:5b:3e:8b:aa:8e:a2:9e:43:
c8:8b:77:18:38:dd:f5:b2:4e:bc:83:7c:e6:69:13:7f:27:0c:
6d:c4:c9:18:ee:1a:85:f5:b5:64:d7:ae:f9:4f:94:9f:0e:a6:
a1:5a:49:06:2e:d6:31:c4:f8:87:92:b2:77:1e:03:f4:52:34:
a8:36:d4:c0:66:ee:26:63:25:86:37:62:15:f2:d5:12:f1:b4:
2f:8a:9b:62:e0:16:ef:36:46:54:d4:76:a5:0d:2c:2a:b4:0c:
5e:f9:08:20:bf:2a:0f:1c:59:88:87:87:e9:88:c5:e6:96:0e:
19:e9:07:05:e6:2e:67:c8:5d:21:71:d7:a4:09:d0:3e:60:4c:
0d:8a:01:5d:cb:c0:0b:a8:d8:1c:e4:f0:3f:35:ef:0c:e4:1d:
1c:a3:4b:e7:55:8c:08:90:4c:6f:c7:44:f2:53:0c:5c:12:7c:
4d:5a:e0:ff:b6:32:c1:d9:8e:cb:05:b7:1f:0f:67:d6:91:dd:
22:5f:81:df:f7:53:96:e8:51:e8:4d:ee:03:c3:e1:51:68:23:
ac:f1:a7:1f:08:f1:b7:4c:ca:87:75:ec:db:dd:1c:1c:58:d6:
ed:2c:5d:5d:42:b5:93:25:83:ab:e8:dd:8a:1f:2e:b3:6f:35:
01:69:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:27 2025 by rpki-client