Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
File: duBG4-yhC5KEmfIqXnZcBBamCk8.cer (raw, json)
Hash identifier: fZtPujt/ypOjm87j7qWvwu7RvEmv8PLqF2MnAaFG5QI=
Subject key identifier: 76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CE63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 03 Apr 2025 08:14:20 +0000
Certificate not after: Fri 03 Apr 2026 08:00:09 +0000
Subordinate resources: AS: 23771
AS: 45078
IP: 59.153.4.0/22
IP: 103.197.228.0/22
IP: 124.22.0.0/15
IP: 124.47.0.0/18
IP: 182.80.0.0/14
IP: 202.150.16.0/20
IP: 203.152.64.0/19
IP: 210.87.128.0/18
IP: 2405:e600::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Apr 2025 12:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52835 (0xce63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Apr 3 08:14:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:64:31:d3:99:09:25:0a:06:44:5c:ec:e0:
d5:fa:07:c4:da:b6:0d:da:cf:05:6d:04:35:22:a4:
a1:31:0f:13:25:06:27:45:93:31:52:96:65:61:78:
b3:63:ea:e0:a5:15:b6:fb:64:c9:4f:0e:82:f2:8b:
7e:46:b5:4f:f5:40:2f:24:4e:fc:42:aa:51:4e:f0:
43:42:51:1d:3a:5b:8f:c8:7a:23:a6:71:a0:5a:ab:
68:c0:6c:43:31:76:f7:33:a5:18:f3:e8:5d:a3:46:
05:4b:f9:01:ee:91:b4:2b:cd:a8:26:37:b0:de:79:
11:8c:24:e3:da:2d:fa:40:5c:2d:c6:b1:f1:cd:1e:
d0:ea:c8:43:82:66:d2:5b:40:b0:07:f4:e3:ff:17:
57:70:09:fe:e8:1c:72:d2:55:e0:0e:dd:eb:e5:3f:
17:c1:49:d6:b7:ff:b9:cd:5a:93:00:bb:bf:e5:c7:
36:fd:c0:6f:05:a0:e7:f3:89:b2:fd:c8:23:3b:8c:
85:10:a2:b8:97:4c:69:b9:92:37:4b:83:49:93:5f:
76:3e:fd:44:33:a8:0e:dc:14:21:f4:d3:cf:bd:59:
d5:75:49:8b:d7:9b:81:aa:fd:6b:4d:5b:1b:fe:79:
a2:dc:39:83:52:4f:6b:66:ee:11:98:b3:22:0d:d7:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23771
45078
sbgp-ipAddrBlock: critical
IPv4:
59.153.4.0/22
103.197.228.0/22
124.22.0.0/15
124.47.0.0/18
182.80.0.0/14
202.150.16.0/20
203.152.64.0/19
210.87.128.0/18
IPv6:
2405:e600::/32
Signature Algorithm: sha256WithRSAEncryption
63:fe:75:2d:a5:3c:82:69:34:46:3a:cc:39:aa:a6:60:20:14:
5d:99:db:a9:1c:52:ed:f9:e6:90:cc:de:04:f1:4c:29:8b:79:
4c:98:18:12:36:27:b8:8d:74:1f:fc:91:86:c6:6c:41:2e:aa:
ef:32:d2:56:70:32:15:0c:ba:8f:04:94:cf:00:f1:46:81:f5:
a1:2c:8e:5f:bf:df:fb:5e:71:c1:0d:1a:ae:46:af:12:a1:c0:
88:5d:69:a2:73:84:8b:a3:c8:48:19:1f:ef:08:f3:ab:d4:ed:
59:81:98:83:03:b4:74:2a:c3:e0:c9:0c:cf:8e:10:cf:7f:b2:
cd:62:9b:3d:27:2e:d2:27:3b:9f:7c:46:55:2e:6e:f0:99:58:
fa:ee:0c:27:5d:0c:1e:22:c2:97:18:32:6a:cb:87:7b:be:3e:
fc:69:88:1a:17:51:8e:c7:60:e9:5f:8d:36:da:7a:a9:c3:34:
d1:c2:3f:33:08:32:6b:97:9a:68:91:9e:dd:94:13:15:5a:b9:
c2:ce:a7:81:68:b5:6e:90:d6:73:38:1c:70:68:1b:0e:ce:78:
c6:af:35:8a:de:9c:1e:30:bb:5f:ba:2e:4f:21:69:35:e8:3c:
b3:5f:5a:a3:c4:a5:0a:ba:e7:fe:5f:57:b9:78:75:79:40:44:
3f:6b:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:24:14 2025 by rpki-client